Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xIYOLP3Dm2aC4ByXUxVcVxs0daM.roa
File: xIYOLP3Dm2aC4ByXUxVcVxs0daM.roa (raw, json)
Hash identifier: 5u7ys8HZvSZlisxGCjO7yXU2BygxoB2u9+y0qBWQIUs=
Subject key identifier: C4:86:0E:2C:FD:C3:9B:66:82:E0:1C:97:53:15:5C:57:1B:34:75:A3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193309410B3D7DB6BCF0A5E891AE493E939
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xIYOLP3Dm2aC4ByXUxVcVxs0daM.roa
Signing time: Fri 15 Nov 2024 16:07:10 +0000
ROA not before: Fri 15 Nov 2024 16:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 31.56.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 17:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:94:10:b3:d7:db:6b:cf:0a:5e:89:1a:e4:93:e9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 16:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4860e2cfdc39b6682e01c9753155c571b3475a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c9:88:8f:42:ff:41:5b:be:07:cf:6f:f9:a0:
1c:65:83:ff:3e:93:b5:6d:58:41:11:20:3e:56:75:
7a:5a:bc:42:7e:84:d4:6a:3c:ba:9e:74:2d:b4:fa:
23:cf:e6:e7:dc:2b:1b:c6:bc:a9:1d:5f:44:fe:ff:
d2:92:dd:d1:bd:7b:cf:5a:f7:fe:8b:0e:1c:eb:95:
6a:01:76:b5:6d:87:1a:21:88:e6:f6:d7:86:60:98:
6c:e9:4a:d7:f9:62:42:f8:8f:64:38:6f:e8:dc:8c:
46:35:9f:80:1e:d5:63:73:2c:a1:1c:62:cf:16:2c:
22:e8:97:7e:d8:7e:3e:6a:48:73:98:20:2b:c1:7d:
98:c3:8a:ef:72:60:a6:45:c7:e9:a5:b7:d2:50:3d:
2d:61:13:69:73:84:79:56:90:ff:49:ce:d4:d5:dc:
01:00:8b:f1:0b:bc:c5:65:62:87:75:c7:82:83:3c:
9b:97:61:70:f2:d6:38:70:b4:1f:c3:bf:d7:b5:82:
0e:43:82:3a:bd:ff:0e:dd:38:b8:b7:80:48:9d:c6:
a2:7f:5f:83:6d:7a:4a:a3:23:db:92:8a:fb:5c:70:
b5:92:c1:83:b6:d4:57:07:6b:fc:bf:6c:e7:d8:da:
af:30:4d:02:44:5a:0f:56:d6:1e:36:d6:75:40:a6:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:0E:2C:FD:C3:9B:66:82:E0:1C:97:53:15:5C:57:1B:34:75:A3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xIYOLP3Dm2aC4ByXUxVcVxs0daM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:67:36:44:af:f5:f0:51:c6:a7:3d:75:83:a6:37:5d:62:27:
51:40:bc:44:6d:c8:b6:d8:a4:29:94:18:19:c3:ec:80:33:80:
e6:de:c7:b0:39:60:1f:af:d8:27:0d:c5:1e:99:51:f3:ff:22:
cc:9b:75:55:ee:1a:b2:49:c7:16:d1:39:2e:c7:3b:1d:d4:41:
c3:fe:b6:10:f4:76:4c:51:cb:ac:a3:3d:46:68:78:48:a2:1c:
ae:dd:ad:27:71:35:ba:df:c8:74:ca:64:67:6a:93:d6:5a:cb:
dc:2d:0f:da:8a:cb:4f:f8:32:d6:55:c5:6e:94:10:ee:02:58:
16:60:b2:20:82:e7:82:fc:c1:ff:47:69:e4:5b:3d:dc:39:54:
ab:28:5a:da:c5:46:a4:aa:10:81:b1:e2:9c:99:30:e3:5a:b6:
60:28:7a:42:22:8e:87:7f:14:3d:64:56:d6:85:fb:80:f3:77:
f0:9a:1a:54:e6:df:06:2a:a8:ce:2b:69:99:33:41:97:28:4f:
03:66:b6:52:43:51:76:19:f6:e2:ab:86:50:ce:d0:36:e9:93:
cf:67:8f:af:d3:c7:e5:a1:7a:3d:b1:54:e5:18:b8:03:03:dc:
e5:36:01:1c:8e:99:6f:4b:f9:16:78:86:43:76:1f:ec:2d:e1:
de:f2:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:55 2024 by rpki-client on console-ams.rpki-client.org