Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vnFpx3N1gTlvwEcXsjhpQGPw-S0.roa
File: vnFpx3N1gTlvwEcXsjhpQGPw-S0.roa (raw, json)
Hash identifier: 8XGjhKT+15IkYM1nPSTf72WOFUvsoSbX8mOtNsX+EHw=
Subject key identifier: BE:71:69:C7:73:75:81:39:6F:C0:47:17:B2:38:69:40:63:F0:F9:2D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01929480583F314D730E5D12F08F51E5625D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vnFpx3N1gTlvwEcXsjhpQGPw-S0.roa
Signing time: Wed 16 Oct 2024 08:44:51 +0000
ROA not before: Wed 16 Oct 2024 08:44:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 17:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:80:58:3f:31:4d:73:0e:5d:12:f0:8f:51:e5:62:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 08:44:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be7169c7737581396fc04717b238694063f0f92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:ad:6e:9f:e2:8c:30:94:2b:28:75:ff:12:
5c:c2:83:ac:aa:1a:3a:c1:c8:3a:ba:c4:6a:e8:9e:
28:26:a2:60:ee:41:ea:c2:aa:d1:c5:c3:86:e9:c1:
94:bd:05:3b:d6:69:5a:48:8c:7a:89:6a:72:17:96:
25:81:df:ca:1d:49:30:49:f8:d3:d1:b4:91:27:43:
4f:5a:fa:f2:d8:08:ca:18:3b:4c:86:58:f4:5d:d6:
f2:e2:e6:d0:ea:dc:38:d4:b0:f2:a7:d8:62:32:31:
14:14:d6:b0:a9:2a:37:f9:63:58:f6:2c:52:bd:c6:
55:89:4d:31:70:cc:75:12:ee:01:bb:c0:4e:bd:b2:
c7:9d:e6:9e:8b:38:21:01:27:4c:ee:98:f9:19:26:
ca:f8:1b:a8:06:63:1f:93:25:65:84:05:09:2d:db:
bd:b9:5e:40:41:58:db:41:98:0d:ef:d3:3b:1f:a2:
f3:4a:bf:8b:b3:59:bd:a8:54:9c:e1:28:4c:06:0c:
80:ad:f3:5a:b1:5c:ce:45:a6:9e:47:bf:56:ec:d2:
ec:40:ad:ce:3d:be:eb:40:f8:6e:5b:19:9c:a7:cc:
8a:ed:83:89:68:67:83:6c:dc:05:17:d6:38:54:04:
e1:c4:b8:9a:5a:0a:d0:24:d5:a2:c4:2d:c9:c4:03:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:69:C7:73:75:81:39:6F:C0:47:17:B2:38:69:40:63:F0:F9:2D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vnFpx3N1gTlvwEcXsjhpQGPw-S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.64.0/24
31.56.160.0/21
31.57.184.0/22
31.57.202.0/23
31.59.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:85:26:c5:b8:ef:d1:9f:36:cb:6d:f7:8e:76:55:49:69:21:
12:15:62:8e:84:70:2b:9e:84:6d:9d:2f:dd:d0:9d:2a:84:07:
cb:bd:a9:b7:02:8b:2b:79:c8:bc:75:b4:36:a6:ba:0f:df:86:
30:18:ca:ef:4a:22:49:31:4a:5d:c2:b5:84:a1:59:a0:6d:fd:
98:23:72:b3:2c:63:86:57:26:37:3f:e3:fb:8f:57:25:52:bd:
56:96:b8:fd:b9:7b:be:5c:d9:d7:76:96:76:87:bd:f0:e8:25:
bd:70:fe:39:e9:c7:50:c9:38:f1:c6:2e:c3:7f:3c:6a:ad:de:
d6:71:68:70:23:f9:bc:32:d2:64:04:ac:f6:12:7c:c6:d7:41:
5e:c2:3d:2e:a5:f0:91:23:22:79:62:f9:c8:28:a9:c6:9f:d7:
18:14:9a:e2:00:91:fe:8d:cc:0d:b1:d8:07:c9:b8:67:e3:5e:
56:47:e5:5b:09:7a:2b:89:e6:b5:fd:9e:85:41:a3:cd:ea:4f:
2b:e7:0b:4e:8b:de:0f:eb:ed:cb:93:2a:67:aa:2c:72:d7:df:
b4:4a:1b:f9:8a:1a:0f:34:63:0e:f5:c5:e1:70:e7:ae:4a:a4:
d5:04:fe:a0:e0:00:5b:fb:28:d9:aa:dd:85:6b:bd:f9:eb:11:
45:c3:ff:ea
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZKUgFg/MU1zDl0S8I9R5WJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE2MDg0NDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTcxNjljNzczNzU4MTM5NmZjMDQ3MTdiMjM4Njk0MDYzZjBmOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJOtbp/ijDCUKyh1/xJcwoOsqho6
wcg6usRq6J4oJqJg7kHqwqrRxcOG6cGUvQU71mlaSIx6iWpyF5Ylgd/KHUkwSfjT
0bSRJ0NPWvry2AjKGDtMhlj0Xdby4ubQ6tw41LDyp9hiMjEUFNawqSo3+WNY9ixS
vcZViU0xcMx1Eu4Bu8BOvbLHneaeizghASdM7pj5GSbK+BuoBmMfkyVlhAUJLdu9
uV5AQVjbQZgN79M7H6LzSr+Ls1m9qFSc4ShMBgyArfNasVzORaaeR79W7NLsQK3O
Pb7rQPhuWxmcp8yK7YOJaGeDbNwFF9Y4VAThxLiaWgrQJNWixC3JxANfaQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFL5xacdzdYE5b8BHF7I4aUBj8PktMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdm5GcHgzTjFnVGx2d0VjWHNqaHBRR1B3LVMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzghAwQA
HzhAAwQDHzigAwQCHzm4AwQBHznKAwQAHzsiMA0GCSqGSIb3DQEBCwUAA4IBAQAM
hSbFuO/RnzbLbfeOdlVJaSESFWKOhHArnoRtnS/d0J0qhAfLvam3Aosreci8dbQ2
proP34YwGMrvSiJJMUpdwrWEoVmgbf2YI3KzLGOGVyY3P+P7j1clUr1Wlrj9uXu+
XNnXdpZ2h73w6CW9cP456cdQyTjxxi7Dfzxqrd7WcWhwI/m8MtJkBKz2EnzG10Fe
wj0upfCRIyJ5YvnIKKnGn9cYFJriAJH+jcwNsdgHybhn415WR+VbCXoriea1/Z6F
QaPN6k8r5wtOi94P6+3Lkypnqixy19+0Shv5ihoPNGMO9cXhcOeuSqTVBP6g4ABb
+yjZqt2Fa7356xFFw//q
-----END CERTIFICATE-----
Generated at Tue Oct 29 20:19:37 2024 by rpki-client on console-ams.rpki-client.org