Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wZmB6p-Uk4H7dg9EdCo3eRuihQI.roa
File: wZmB6p-Uk4H7dg9EdCo3eRuihQI.roa (raw, json)
Hash identifier: 0sWy4VtsMndj6Jxa1nWhT9Ut22zhMZ1w8l9SiTAfbgY=
Subject key identifier: C1:99:81:EA:9F:94:93:81:FB:76:0F:44:74:2A:37:79:1B:A2:85:02
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019285E5A3BF862136C5C55243E1B6CF3476
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wZmB6p-Uk4H7dg9EdCo3eRuihQI.roa
Signing time: Sun 13 Oct 2024 12:41:12 +0000
ROA not before: Sun 13 Oct 2024 12:41:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 08:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:85:e5:a3:bf:86:21:36:c5:c5:52:43:e1:b6:cf:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 13 12:41:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c19981ea9f949381fb760f44742a37791ba28502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:3d:0c:2d:eb:f3:6f:e7:fd:18:02:41:63:
4b:38:57:b0:b4:0e:91:f3:88:ec:58:9c:40:76:08:
53:c3:82:76:ac:aa:cd:c3:a8:03:ba:ba:ca:a3:7e:
e5:ac:b3:61:55:0b:6c:f4:fb:24:5b:9e:d2:05:63:
d2:de:88:d0:41:01:5c:3b:ac:57:0c:85:40:1a:66:
ab:a7:5d:d2:90:9b:80:3b:49:e8:9f:71:8d:ca:a5:
ff:85:51:ac:4c:d8:c9:52:89:36:20:12:12:89:18:
12:ef:77:45:8e:73:2e:5f:07:5a:3c:9e:e4:3b:d9:
7c:0d:75:0b:7c:45:32:0e:20:65:a0:87:43:c7:d0:
58:a9:e2:c7:50:95:82:a4:92:73:6a:1f:98:18:56:
7c:d5:2b:ae:c2:94:26:46:d8:f0:95:4d:33:ef:0d:
55:39:ae:8b:f9:23:94:b6:d9:1f:fe:a0:b0:3e:c3:
7d:e3:ac:7b:ed:94:6f:30:04:d2:95:aa:d1:52:e2:
0e:ae:4d:20:dd:88:e1:9f:53:13:92:88:f6:18:3c:
93:e7:8b:44:10:29:df:31:10:5b:a7:f8:5a:d1:9f:
b0:b4:ca:43:a1:42:c7:08:ed:27:56:b1:0a:97:ca:
e9:ec:31:2f:9a:d3:a2:cb:8f:5c:a7:7d:ee:e3:56:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:81:EA:9F:94:93:81:FB:76:0F:44:74:2A:37:79:1B:A2:85:02
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wZmB6p-Uk4H7dg9EdCo3eRuihQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.64.0/24
31.56.160.0/21
31.57.184.0/22
31.57.202.0/23
Signature Algorithm: sha256WithRSAEncryption
77:a7:25:32:01:ee:4b:76:0a:a9:8d:71:41:17:56:6f:07:ea:
76:ae:ce:b4:45:61:81:d8:06:83:8a:5c:61:7f:07:96:e2:7b:
a1:a9:74:5d:d2:77:46:18:3e:53:13:d6:b6:f1:1f:25:ab:8d:
e1:8b:d2:b5:64:47:ca:61:35:43:25:06:e5:19:c5:d9:84:65:
b1:39:20:e4:dd:46:d0:60:92:58:80:8d:1e:b6:0b:6f:9e:04:
5e:18:d2:05:9e:46:b6:a2:4d:ab:2a:dd:7f:41:01:e9:da:1e:
5e:dd:1b:61:53:85:04:f9:3b:78:45:cb:01:0d:0d:aa:9b:a8:
5d:33:a0:bd:24:5d:91:75:7a:f1:59:8f:9f:e0:39:25:18:6b:
2b:43:98:65:f1:01:f8:7d:b7:6f:70:da:9a:e8:c4:e3:91:1d:
18:6f:1e:87:fd:5f:f8:c5:f9:79:c0:8f:df:af:49:44:ad:97:
57:d9:19:30:aa:ba:0d:8a:c1:2d:1c:30:1d:27:2c:d1:49:4f:
88:78:c1:45:43:b0:b6:62:8f:6c:68:79:15:27:81:7c:1a:af:
cb:85:75:81:a8:34:99:b7:66:24:e6:06:8a:f0:a4:7e:be:ff:
ad:de:96:b6:33:64:1f:35:26:86:f6:c8:99:6a:3c:75:66:ab:
b7:c4:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 10:45:14 2024 by rpki-client on console-ams.rpki-client.org