Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uhlUXimXBBAWn4ME7CF8vK2vANU.roa
File: uhlUXimXBBAWn4ME7CF8vK2vANU.roa (raw, json)
Hash identifier: fgeu0mcis+oV27+vrFVya5Z5I3HjOViMS54Ru66TY60=
Subject key identifier: BA:19:54:5E:29:97:04:10:16:9F:83:04:EC:21:7C:BC:AD:AF:00:D5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192153A82A1372367DA4A07C6B6343D0980
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uhlUXimXBBAWn4ME7CF8vK2vANU.roa
Signing time: Sat 21 Sep 2024 15:36:48 +0000
ROA not before: Sat 21 Sep 2024 15:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.138.0/24 maxlen: 24
31.57.189.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 05:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:15:3a:82:a1:37:23:67:da:4a:07:c6:b6:34:3d:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 21 15:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba19545e29970410169f8304ec217cbcadaf00d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:ea:44:71:15:ff:ee:a2:97:8b:50:ce:0c:
a7:0a:2f:7f:e2:c4:ab:21:b5:cf:1a:cf:a4:54:b3:
c1:45:7b:b8:03:5d:31:e8:ba:cf:d7:5e:06:47:b3:
d0:a9:cc:c0:4a:90:e7:91:a0:cb:27:8a:61:dc:bf:
ce:e8:c9:e6:09:54:ef:3b:d7:e6:e9:4d:91:fc:29:
c6:ae:02:27:75:05:80:9c:a3:7d:73:7e:1a:8f:c2:
55:f2:c9:93:af:18:2d:b1:a7:c0:7b:21:70:3e:ab:
e1:fa:ba:b5:1d:ea:8c:74:49:b0:a3:70:3f:95:36:
0b:86:89:3b:62:26:50:96:52:cf:f2:7b:e4:22:9a:
2c:ec:ed:2f:90:5f:72:0a:d1:2d:db:c8:65:1f:57:
74:76:e7:c2:94:7b:d0:9a:f7:7a:f6:df:89:f5:61:
15:59:c2:d9:f8:f2:a8:2d:75:13:11:fc:54:8a:f3:
72:ee:47:68:e1:f8:41:05:70:ec:54:ad:0a:f1:f5:
33:ed:ee:7b:5f:37:c5:9f:0f:d4:d2:30:8d:f4:df:
c8:28:13:c5:95:c7:81:ab:ce:d9:c3:ad:b8:aa:15:
53:84:bc:d1:45:28:be:c7:d6:ec:37:46:91:35:9b:
ed:fb:42:06:dd:59:d4:d3:3b:ee:fe:3b:92:43:63:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:54:5E:29:97:04:10:16:9F:83:04:EC:21:7C:BC:AD:AF:00:D5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uhlUXimXBBAWn4ME7CF8vK2vANU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
31.56.137.0-31.56.138.255
31.57.189.0/24
31.57.191.0/24
31.57.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0d:31:cb:f8:89:60:09:73:6f:15:12:da:51:bf:f4:78:97:
ad:5c:14:ae:32:8a:07:35:a9:54:a3:11:32:24:29:be:fa:2b:
aa:5b:3e:6a:95:99:5b:46:a2:90:25:ac:b5:3a:ea:9a:22:26:
6e:a0:28:55:1a:a6:2e:16:86:09:fd:ab:58:87:8e:06:82:7f:
4c:eb:71:bb:a4:21:4d:f4:2a:38:a2:8a:a8:09:61:6a:7e:ba:
32:73:b6:24:58:fc:cb:df:e3:9b:94:80:4d:f1:f8:c1:d8:f1:
6b:ca:c2:72:4c:4c:63:7f:29:26:d2:42:ff:97:4f:b5:62:b0:
a7:68:45:19:f6:20:13:06:1e:14:19:9c:00:5f:4f:d2:ce:b0:
b6:0f:23:00:5f:0a:61:29:ad:43:75:80:a2:e6:70:9e:03:99:
76:a0:0f:70:15:2b:f8:c4:e1:32:aa:42:5d:6c:38:c8:69:8e:
97:ec:c4:cf:ab:ac:72:ed:c3:55:1f:71:cd:5e:50:38:c1:76:
eb:18:a1:56:3e:ef:80:0e:9e:1e:30:21:d2:c6:1c:49:cf:38:
b8:a5:93:11:4c:6e:a6:8a:1c:c7:0a:fe:25:8b:6e:19:d9:92:
71:35:56:9b:fc:37:07:c2:7e:ac:96:a6:ba:52:d9:a6:30:ec:
ea:fc:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 09:28:06 2024 by rpki-client on console-ams.rpki-client.org