Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vFWoOLjeJsdT2cot4RNR863dt9E.roa
File: vFWoOLjeJsdT2cot4RNR863dt9E.roa (raw, json)
Hash identifier: H2t9IhJ5LfzQZJvbeWazh4l/gayH6V63rWhspmWSjD4=
Subject key identifier: BC:55:A8:38:B8:DE:26:C7:53:D9:CA:2D:E1:13:51:F3:AD:DD:B7:D1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191B8545EADBE8133B0DA340A666333667F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vFWoOLjeJsdT2cot4RNR863dt9E.roa
Signing time: Tue 03 Sep 2024 14:40:22 +0000
ROA not before: Tue 03 Sep 2024 14:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 17:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:54:5e:ad:be:81:33:b0:da:34:0a:66:63:33:66:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 3 14:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc55a838b8de26c753d9ca2de11351f3adddb7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:1e:6d:14:1c:a1:d8:ca:73:d4:90:aa:13:
21:d9:89:fb:39:47:7b:8a:3b:ac:c1:4f:7a:d7:1c:
13:f1:7a:6a:57:1c:d3:14:81:03:e7:c8:e2:81:a4:
5b:2c:19:74:8e:1d:57:f8:d0:f4:dd:73:24:4b:db:
2a:f3:14:9c:14:1a:48:ba:3a:84:3d:94:8e:d3:52:
62:0e:62:36:63:ee:a8:fa:ab:f5:b9:43:e9:98:34:
00:d9:1f:47:76:4d:cf:5c:26:e8:3c:48:9c:b1:6e:
4c:7c:f3:3b:3a:95:59:a6:46:c0:e4:70:ee:cf:b6:
f1:8c:72:19:18:0c:6f:f0:f2:33:05:ab:16:48:dd:
ba:ff:3b:05:b2:a2:51:c6:41:e3:5a:dd:74:7b:9e:
10:ed:c0:c5:36:7f:3a:e1:df:75:3a:99:37:c1:a9:
5a:85:94:94:43:ca:d2:d2:33:04:65:9a:0d:54:6e:
4a:f3:6b:99:ae:89:ae:27:dd:f4:72:bd:16:a4:2d:
e2:a6:c2:2a:1c:ce:fd:00:19:2a:da:09:6e:99:fd:
9f:ec:cc:77:37:69:3a:55:88:82:34:26:23:a5:69:
4e:2c:c5:0c:0b:9e:e4:f6:cd:c0:95:2c:a3:f8:96:
5d:6a:ac:73:3e:29:04:5a:d1:fd:c8:b0:50:c5:7e:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:A8:38:B8:DE:26:C7:53:D9:CA:2D:E1:13:51:F3:AD:DD:B7:D1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vFWoOLjeJsdT2cot4RNR863dt9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.63.0-31.56.64.255
31.56.69.0/24
31.56.72.0/24
31.56.160.0/21
Signature Algorithm: sha256WithRSAEncryption
22:b1:f6:ee:1e:44:9f:76:6b:5a:c1:54:4e:84:06:7d:c0:b4:
3d:98:d0:c5:db:d7:5e:77:de:b0:5c:48:07:77:97:9c:66:c3:
4c:0b:c9:9d:bd:08:46:99:60:db:f9:7e:3e:03:7f:97:99:95:
af:4a:76:79:64:4b:f5:2d:ee:2f:b6:59:35:20:60:58:49:59:
4e:c1:10:21:6b:c5:a5:a8:04:67:c2:69:8f:8f:27:a8:35:76:
d7:d4:a1:8b:4e:92:aa:31:78:e2:61:a4:e6:33:f7:4f:ac:a9:
18:00:40:72:5e:e2:b4:5f:9b:9f:22:86:34:c2:c0:1e:d4:a2:
08:88:fb:f4:bd:67:33:cb:b6:18:5f:64:9d:2f:d4:30:2a:e4:
9a:fb:36:b7:9f:61:c2:97:cc:49:7c:13:15:dd:12:9d:77:40:
59:14:e1:9e:ac:d4:a9:e5:d8:13:b7:2f:b5:6b:09:5b:96:d1:
bc:0e:1a:ef:1a:2f:54:f6:d1:35:b9:0a:9b:46:51:0d:87:8d:
26:26:a2:99:04:0b:c3:c7:c1:b2:78:df:29:5c:f4:70:9e:bf:
c5:57:ac:90:01:5d:d4:30:77:63:b8:db:66:3f:4a:6b:79:9f:
e0:b7:dd:8f:c8:56:44:84:fe:7f:74:9c:e0:72:a2:bd:98:91:
07:92:e0:2e
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZG4VF6tvoEzsNo0CmZjM2Z/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTAzMTQ0MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzU1YTgzOGI4ZGUyNmM3NTNkOWNhMmRlMTEzNTFmM2FkZGRiN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cgebRQcodjKc9SQqhMh2Yn7OUd7
ijuswU961xwT8XpqVxzTFIED58jigaRbLBl0jh1X+ND03XMkS9sq8xScFBpIujqE
PZSO01JiDmI2Y+6o+qv1uUPpmDQA2R9Hdk3PXCboPEicsW5MfPM7OpVZpkbA5HDu
z7bxjHIZGAxv8PIzBasWSN26/zsFsqJRxkHjWt10e54Q7cDFNn864d91Opk3wala
hZSUQ8rS0jMEZZoNVG5K82uZromuJ930cr0WpC3ipsIqHM79ABkq2glumf2f7Mx3
N2k6VYiCNCYjpWlOLMUMC57k9s3AlSyj+JZdaqxzPikEWtH9yLBQxX76ZQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFLxVqDi43ibHU9nKLeETUfOt3bfRMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdkZXb09MamVKc2RUMmNvdDRSTlI4NjNkdDlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAHzg7MAwD
BAAfOD8DBAAfOEADBAAfOEUDBAAfOEgDBAMfOKAwDQYJKoZIhvcNAQELBQADggEB
ACKx9u4eRJ92a1rBVE6EBn3AtD2Y0MXb11533rBcSAd3l5xmw0wLyZ29CEaZYNv5
fj4Df5eZla9KdnlkS/Ut7i+2WTUgYFhJWU7BECFrxaWoBGfCaY+PJ6g1dtfUoYtO
kqoxeOJhpOYz90+sqRgAQHJe4rRfm58ihjTCwB7UogiI+/S9ZzPLthhfZJ0v1DAq
5Jr7NrefYcKXzEl8ExXdEp13QFkU4Z6s1Knl2BO3L7VrCVuW0bwOGu8aL1T20TW5
CptGUQ2HjSYmopkEC8PHwbJ43ylc9HCev8VXrJABXdQwd2O422Y/Smt5n+C33Y/I
VkSE/n90nOByor2YkQeS4C4=
-----END CERTIFICATE-----
Generated at Thu Sep 12 20:43:35 2024 by rpki-client on console-ams.rpki-client.org