Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wN4sAknG3IUfaEg1CSU1YCvSIJw.roa
File: wN4sAknG3IUfaEg1CSU1YCvSIJw.roa (raw, json)
Hash identifier: kwOmTpor+hBXL+0WTQWpfdOfoj1ZOC/xxunRkR4/BuA=
Subject key identifier: C0:DE:2C:02:49:C6:DC:85:1F:68:48:35:09:25:35:60:2B:D2:20:9C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191AD508BC1F8399B875230579D62B67011
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wN4sAknG3IUfaEg1CSU1YCvSIJw.roa
Signing time: Sun 01 Sep 2024 11:20:22 +0000
ROA not before: Sun 01 Sep 2024 11:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.6.0/24 maxlen: 24
31.56.37.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ad:50:8b:c1:f8:39:9b:87:52:30:57:9d:62:b6:70:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 1 11:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0de2c0249c6dc851f684835092535602bd2209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:fd:2c:2e:2d:31:ff:47:0f:de:87:bf:23:
0b:93:5a:f2:33:5d:b3:6a:92:58:af:9c:ab:04:c3:
3a:a2:dd:73:f2:46:57:ef:db:eb:fb:cf:6e:ec:36:
9d:90:31:53:9f:27:46:a2:a8:2d:15:05:03:7e:02:
dc:19:47:d0:dd:4b:15:f0:ed:85:09:8d:f5:66:69:
81:f1:fb:80:bf:b0:78:c2:f5:80:1f:f1:e0:01:b9:
bb:6d:5f:56:f6:b5:11:e9:e5:b9:39:7e:f1:1b:93:
23:27:ff:63:c9:82:92:77:38:67:02:a2:6c:86:a1:
14:af:38:5f:39:b7:f2:80:eb:35:b1:61:cd:1c:d7:
38:c9:48:a7:34:0a:21:83:5a:23:2b:69:ad:8c:93:
13:e0:f0:8b:4e:14:b4:b1:75:7b:73:3b:9e:96:45:
49:44:86:ee:4e:1d:dc:18:58:b6:41:81:2f:9a:e3:
b3:ce:35:86:b8:71:b3:c9:7b:e5:37:a2:a1:d0:34:
7a:85:e2:05:87:27:79:98:a0:20:f7:f6:23:1e:d6:
f3:68:9a:e3:f7:e8:e7:87:a5:17:b7:b4:3a:e1:ce:
76:1d:71:e6:a8:1d:80:cc:78:16:ba:b5:41:92:25:
6e:d4:e8:bc:77:a9:c5:12:6b:55:1c:1e:a5:a1:ab:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DE:2C:02:49:C6:DC:85:1F:68:48:35:09:25:35:60:2B:D2:20:9C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wN4sAknG3IUfaEg1CSU1YCvSIJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.37.0/24
31.56.89.0/24
31.56.112.0/21
31.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:65:76:fc:2f:b2:53:5c:dc:42:3c:6e:7e:4f:81:48:ac:40:
3e:83:86:b3:f0:44:94:12:fa:ec:40:fc:2f:7d:88:cd:10:de:
68:95:29:83:42:95:0e:f5:7b:91:6c:c1:41:45:b0:c5:5e:e8:
85:21:a1:30:14:2f:3f:f5:44:f7:5c:5d:dd:50:ad:06:6d:dd:
79:e6:45:35:31:c5:a6:d2:d0:a3:a2:22:f1:60:a7:2a:d3:4d:
90:7a:8e:83:e2:fe:ee:e4:3c:e0:85:45:f1:81:cf:89:d3:14:
7c:5d:49:2e:fd:c8:84:8a:2c:8c:1d:64:cd:90:3d:50:5d:f6:
5d:34:5a:59:e8:e2:66:dd:7d:ac:c8:68:9e:4d:fe:e1:05:00:
ca:c5:71:b2:f3:41:36:95:2b:52:8a:1c:a3:e9:e3:4d:59:da:
cd:00:8f:90:9c:d6:24:cb:ce:4d:b3:e8:8d:1a:b2:2b:4a:58:
ba:98:bb:7e:90:84:3a:03:8a:af:b5:2f:de:54:66:59:64:ff:
f6:11:78:4c:2a:14:71:2b:42:7e:df:df:25:80:df:51:d6:1e:
e6:5a:ab:56:18:84:56:f7:c5:9a:7e:6a:b7:ff:c4:8a:cd:65:
52:f7:69:78:fe:ea:03:73:03:49:dd:47:39:36:01:08:30:e6:
f7:99:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:11 2024 by rpki-client on console-ams.rpki-client.org