Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wJ2gm1lbO7qEd1Ozxqt3jbPXbXI.roa
File: wJ2gm1lbO7qEd1Ozxqt3jbPXbXI.roa (raw, json)
Hash identifier: JFnbatgGhmcIdSOfMsnHiAylu4yZcCcam8se9qXXO/8=
Subject key identifier: C0:9D:A0:9B:59:5B:3B:BA:84:77:53:B3:C6:AB:77:8D:B3:D7:6D:72
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191B8545F0721D4A20A40AA386999DBAA5B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wJ2gm1lbO7qEd1Ozxqt3jbPXbXI.roa
Signing time: Tue 03 Sep 2024 14:40:22 +0000
ROA not before: Tue 03 Sep 2024 14:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 31.56.39.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:54:5f:07:21:d4:a2:0a:40:aa:38:69:99:db:aa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 3 14:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c09da09b595b3bba847753b3c6ab778db3d76d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:cc:8f:44:2b:38:95:fd:3b:83:44:d2:1f:
8e:24:2c:fa:10:5d:00:b8:3a:64:53:18:33:6d:cc:
b5:39:35:75:1a:07:a3:1a:e7:cf:7e:b0:f7:3a:93:
9e:b0:86:e4:b0:06:f2:19:01:12:19:96:f1:cf:1f:
ad:51:ea:7c:c3:ff:94:94:48:ea:50:41:09:5f:ef:
07:d7:5b:f3:15:01:9b:c1:c5:5e:f2:cb:53:da:d9:
68:ef:e5:c5:7f:74:a2:d7:a2:11:8c:fe:c2:09:f4:
9d:b5:02:a6:7f:db:6e:b4:54:63:87:c5:c8:88:c4:
66:80:d6:ea:0d:bb:93:d0:2e:b2:0c:dd:0d:7c:23:
66:e5:c6:ec:db:19:e5:33:fb:60:06:62:03:60:3a:
df:5a:10:0c:df:a8:7d:07:e5:05:7d:1c:b6:96:3e:
c4:67:17:e0:bd:6a:0a:3b:7a:3f:46:02:43:f1:6b:
07:6d:30:6a:ee:43:19:d4:f6:64:13:a0:93:12:2b:
5d:ae:67:3e:8c:e6:a7:38:fd:26:32:fd:05:f4:cb:
48:2d:e5:d3:79:65:a3:91:e4:e0:f8:45:a9:2f:cc:
5b:62:dd:56:22:b1:f4:d9:07:fb:52:1e:2e:7a:41:
2d:2c:d1:e6:00:59:9f:41:73:95:bf:5e:06:0d:00:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9D:A0:9B:59:5B:3B:BA:84:77:53:B3:C6:AB:77:8D:B3:D7:6D:72
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wJ2gm1lbO7qEd1Ozxqt3jbPXbXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.39.0/24
31.56.160.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:3f:eb:ee:3d:06:03:8a:56:7c:6c:f4:30:ec:70:4f:bd:0f:
28:d0:c6:00:e4:e0:36:d9:ff:c8:3b:8d:65:d8:da:0b:a3:28:
0c:fe:f9:18:1f:91:47:64:70:17:65:e5:f9:1a:5f:e6:bb:80:
c4:8b:91:74:98:2c:15:a9:3b:8a:3e:24:a0:87:c6:3e:84:b1:
44:4f:40:80:43:f0:fb:dd:30:28:8a:d7:67:d2:e0:9a:8e:b4:
81:f4:31:40:09:86:b3:7c:ac:21:fb:74:db:91:a0:83:e1:63:
af:6f:d7:e2:aa:e4:09:5c:31:a6:f5:c2:be:56:00:1b:82:3c:
ed:0d:12:09:a8:b0:1f:7e:13:2e:28:58:ca:1a:71:8f:69:38:
97:b8:e6:72:99:48:ae:61:a3:02:9c:ae:b4:47:e0:38:89:b0:
f8:66:a2:fe:4c:59:77:1d:84:c1:bc:34:3c:1b:2b:3c:30:76:
ec:59:dc:8c:d3:4f:30:77:bd:24:00:9e:fa:b0:ee:34:b1:c9:
91:90:9b:a6:02:5f:dc:92:fc:12:a4:76:a5:02:cb:4f:cc:25:
fa:eb:a4:48:bb:4c:bd:8a:90:c8:f2:23:6b:f4:b5:d8:69:46:
45:4b:2c:e0:eb:cb:e1:52:37:29:96:68:b7:14:15:85:30:94:
e9:f1:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 07:23:12 2024 by rpki-client on console-ams.rpki-client.org