Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vpbSUVdNi2_BeeKYHcOlVzmWTHA.roa
File: vpbSUVdNi2_BeeKYHcOlVzmWTHA.roa (raw, json)
Hash identifier: 796Rg+AV3YJOOgnKu87VBOqCr86ZYEtELLZdY4gOHoM=
Subject key identifier: BE:96:D2:51:57:4D:8B:6F:C1:79:E2:98:1D:C3:A5:57:39:96:4C:70
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01921E1819962287503798692EC0D8DC6A86
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vpbSUVdNi2_BeeKYHcOlVzmWTHA.roa
Signing time: Mon 23 Sep 2024 08:55:48 +0000
ROA not before: Mon 23 Sep 2024 08:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 04 Oct 2024 06:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:18:19:96:22:87:50:37:98:69:2e:c0:d8:dc:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 23 08:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be96d251574d8b6fc179e2981dc3a55739964c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:9b:ba:8c:fd:d6:50:92:5c:58:6f:41:bf:
20:be:94:9c:e9:75:30:f5:ca:5d:39:aa:e0:27:27:
8a:61:fb:70:12:8a:66:c4:4c:a9:fb:fd:2f:19:75:
e9:5c:92:06:da:47:35:4e:5c:13:84:92:a2:d1:22:
30:25:3b:e2:bf:ed:c0:17:70:b9:31:ea:b1:bc:b4:
bf:43:bc:b6:10:da:a6:57:5c:2b:c4:98:0c:57:76:
da:4f:16:df:6a:6b:99:3a:ab:42:0a:4c:54:a8:b1:
8c:23:cb:3b:05:65:74:11:fe:86:c0:c2:75:ca:fe:
66:f1:73:5c:47:54:ab:c0:68:69:d1:22:97:fe:e3:
e4:86:0b:ba:0e:36:38:6c:c7:fe:d9:1e:19:a0:36:
46:0f:97:39:23:81:59:68:44:01:59:87:d0:1c:7b:
59:b0:d7:40:63:89:db:5d:1e:11:ca:0f:82:2c:59:
37:de:e4:5e:11:2e:d2:9a:e9:73:c8:9d:00:5b:96:
cb:a3:b3:07:b9:74:8d:ac:15:8f:81:a2:6c:ce:5a:
8e:36:68:7a:7d:16:d8:dc:4b:6d:1c:c0:e5:58:b9:
56:1f:70:36:37:89:9d:60:95:d9:88:a9:53:8e:97:
2d:f5:77:c9:f6:0a:cb:68:7a:0d:bb:f5:9a:3f:49:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:D2:51:57:4D:8B:6F:C1:79:E2:98:1D:C3:A5:57:39:96:4C:70
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vpbSUVdNi2_BeeKYHcOlVzmWTHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.140.0/24
31.57.162.0-31.57.165.255
Signature Algorithm: sha256WithRSAEncryption
b1:59:b1:6e:fd:2a:29:21:8b:ed:b3:84:80:f3:0a:2e:78:f9:
47:b4:a8:06:ef:6d:79:92:66:32:c6:e7:5b:f1:16:77:ff:67:
3e:5b:2d:5a:18:46:2b:f9:4c:3f:db:99:e5:3d:d0:e0:51:56:
81:16:97:12:35:ef:78:ed:b2:e7:48:90:17:56:fd:95:3c:e8:
57:ca:ec:b9:97:b3:a1:1e:f8:af:5a:09:59:26:05:9e:fe:24:
63:53:56:5e:71:27:68:7f:7a:f6:e7:61:32:3a:2b:13:42:37:
1d:cb:da:5c:65:9b:a6:65:62:45:52:e7:bf:0a:d4:d3:fe:26:
fb:e2:a7:81:5d:b4:2c:c1:64:6a:05:bc:66:7f:78:95:02:3d:
73:11:89:f0:fa:7c:58:47:0f:36:f1:a6:3a:8c:52:a5:d1:e6:
0d:5d:53:a8:50:28:d8:24:5b:f1:51:81:92:21:43:a6:51:4d:
9e:dd:9d:6b:cc:1c:e9:42:e7:a5:a4:59:36:0c:84:d5:7b:fd:
7c:34:97:3d:2f:cc:eb:e1:4b:4b:9b:67:3f:d2:df:f0:74:59:
32:69:1c:75:e2:69:8d:d1:04:79:1e:ac:40:db:9a:99:ae:c7:
39:42:73:a4:93:24:a8:bd:8e:cb:a0:3e:7b:17:ae:fe:09:b1:
c4:fd:7a:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 4 08:34:02 2024 by rpki-client on console-fra.rpki-client.org