Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uDvkipfaGhfEuaJZbBSD0qz8WeI.roa
File: uDvkipfaGhfEuaJZbBSD0qz8WeI.roa (raw, json)
Hash identifier: hFOvU2B1vL1VoQZ9Go4fP288D8c36PqF85U4U4MYIsI=
Subject key identifier: B8:3B:E4:8A:97:DA:1A:17:C4:B9:A2:59:6C:14:83:D2:AC:FC:59:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01911929A2E1BE25E1A35EDFB91B221FCEDC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uDvkipfaGhfEuaJZbBSD0qz8WeI.roa
Signing time: Sat 03 Aug 2024 16:54:04 +0000
ROA not before: Sat 03 Aug 2024 16:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 10:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:19:29:a2:e1:be:25:e1:a3:5e:df:b9:1b:22:1f:ce:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 3 16:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b83be48a97da1a17c4b9a2596c1483d2acfc59e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:04:8a:d5:e9:a0:5a:c6:17:4f:7a:70:c8:
b6:03:ae:f2:f5:43:d7:1c:1e:7f:a2:53:2e:d6:04:
3a:56:06:81:33:b8:42:88:83:fe:a1:e3:d2:d1:2b:
68:64:e4:8b:30:1f:36:98:e8:a7:0e:0c:ab:51:cf:
7b:cc:46:17:0b:07:98:3b:e5:72:00:81:98:8e:2b:
9f:37:a7:3e:11:f4:d3:21:ca:31:6a:91:48:24:e6:
b2:1a:aa:ec:5c:a5:e2:68:3f:21:77:36:81:bd:59:
db:7f:93:fd:5b:72:20:13:cf:e0:07:66:88:14:af:
d3:14:cc:13:aa:ed:7a:d8:9b:2c:bc:f0:e5:9e:d7:
96:ad:41:4b:d0:c0:26:ad:b1:09:6a:e2:2a:6e:10:
8f:b1:87:01:47:3e:52:2f:88:92:b8:0a:2d:13:47:
8d:ad:3a:48:b8:80:b4:2a:b1:9a:fa:16:d4:bb:08:
55:8c:7f:90:a9:81:fb:ff:37:5e:58:1e:6c:41:1b:
6d:10:c5:c3:67:d4:ab:ed:9a:0b:78:01:55:b2:0c:
7b:32:73:d2:4c:15:53:5a:df:3f:97:e2:6d:17:ba:
3e:52:7b:f5:d1:0d:86:35:e9:48:80:4b:b1:da:28:
8e:db:eb:94:fd:23:0a:67:3b:66:a2:83:36:d3:27:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:E4:8A:97:DA:1A:17:C4:B9:A2:59:6C:14:83:D2:AC:FC:59:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uDvkipfaGhfEuaJZbBSD0qz8WeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.33.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7e:cc:1d:de:14:6a:fb:68:35:c6:f1:1a:8e:06:12:66:8c:
86:c6:00:d6:32:da:31:fa:38:39:10:e6:90:43:11:69:fc:2b:
a8:ca:7c:1b:f6:ab:60:27:e0:29:6b:85:c4:b9:36:8c:ae:86:
02:b5:e3:4c:a0:c4:37:b7:a2:05:65:82:c6:a0:4e:5b:f7:fa:
5f:17:a1:b6:30:8a:de:c8:5e:f0:18:e4:7e:ab:41:84:63:46:
a0:c0:3f:61:4b:2a:dd:ec:8c:8e:0e:0f:18:89:43:dc:3d:22:
b1:d6:4b:b1:56:e7:ac:a2:30:ea:c6:d6:04:c0:34:ed:54:04:
c0:0e:aa:f5:5f:15:76:a5:3c:16:49:0c:86:e7:0c:63:f5:f7:
6e:ff:3e:01:cf:45:41:ef:3c:3e:6f:30:0d:54:2e:ff:cb:cd:
dd:7f:13:d8:5c:6a:67:d7:30:b4:79:df:8a:14:fa:ef:ac:2b:
ba:f8:a3:75:23:02:ad:56:2f:04:97:5e:79:bc:ca:da:12:e9:
3a:16:17:53:78:70:9c:c9:77:ed:0a:56:08:3d:45:67:94:1c:
93:d7:a9:8b:b5:ee:f6:a7:da:eb:f0:26:52:23:7c:6d:1b:22:
cd:42:34:ac:7a:b3:d7:85:49:85:79:d0:6b:5c:27:f2:d0:10:
d6:4d:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:04:10 2024 by rpki-client on console-ams.rpki-client.org