Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xOI8fBpBPTad0LmXlBy6laMjrJQ.roa
File: xOI8fBpBPTad0LmXlBy6laMjrJQ.roa (raw, json)
Hash identifier: kaGS7n0ZRlDUqfM94JVvyXCH2Yq3BreT55kRmPgOs8A=
Subject key identifier: C4:E2:3C:7C:1A:41:3D:36:9D:D0:B9:97:94:1C:BA:95:A3:23:AC:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192ED8B4AB4F858D8CDBA8EBB05DAB152C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xOI8fBpBPTad0LmXlBy6laMjrJQ.roa
Signing time: Sat 02 Nov 2024 15:43:01 +0000
ROA not before: Sat 02 Nov 2024 15:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150770
IP address blocks: 31.56.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ed:8b:4a:b4:f8:58:d8:cd:ba:8e:bb:05:da:b1:52:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 15:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4e23c7c1a413d369dd0b997941cba95a323ac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:d7:84:ce:de:bf:a1:ed:ec:91:96:0c:e5:
5e:a1:71:f9:4a:5c:5b:de:ad:c5:8b:98:7c:de:33:
00:35:e5:c4:d1:48:55:3c:cc:dc:29:78:fc:d3:95:
0f:88:5d:ce:44:47:26:e7:91:d7:c2:d4:97:e6:0b:
1a:ed:40:46:9d:cf:f4:84:9a:21:46:1d:9e:a7:68:
07:32:78:71:75:ee:89:c3:2e:0c:55:15:a7:69:4f:
65:ed:31:d4:99:ff:f2:33:d6:1f:b4:7e:ee:23:8f:
af:bc:67:7f:f7:1d:a7:b7:3f:3f:f5:29:5c:af:c8:
ef:7a:e0:77:5a:a3:79:a0:b8:b6:f7:65:42:34:a2:
1e:4f:63:b1:10:a7:ed:65:6c:ba:94:19:a8:61:e7:
80:03:1b:36:68:9a:09:68:aa:45:04:13:30:42:9e:
5f:8d:f3:ce:b0:2e:bc:c0:44:b3:34:aa:a4:51:73:
2a:b3:82:b5:97:b4:05:a1:e7:e2:41:12:ad:db:fa:
76:ae:a5:32:b3:66:d5:ed:99:7a:9f:a6:46:16:b7:
b9:2d:a0:8b:40:79:04:51:3b:95:93:be:8f:ed:95:
ae:94:63:83:20:27:4d:61:5e:29:51:b6:9d:fb:a3:
23:8a:cd:71:0b:16:60:69:4c:2f:00:b4:13:91:83:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:3C:7C:1A:41:3D:36:9D:D0:B9:97:94:1C:BA:95:A3:23:AC:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xOI8fBpBPTad0LmXlBy6laMjrJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.37.0/24
Signature Algorithm: sha256WithRSAEncryption
06:12:72:1a:62:a9:94:ab:a6:6c:35:76:e6:d8:06:0a:a5:c1:
ec:04:42:ee:0c:78:3a:ca:eb:19:0c:b7:17:45:f7:07:e9:7b:
72:91:ae:90:09:86:7f:69:49:2c:8e:f7:71:bf:72:dc:c1:1a:
83:0e:9e:37:45:60:43:ca:49:66:b4:73:30:a6:c3:49:f8:cb:
97:c7:69:b1:d7:8d:9e:0c:de:da:7c:10:e2:78:17:83:3a:ae:
9f:7e:51:37:c3:89:19:2b:d3:3c:0f:ef:f5:00:d5:d3:4b:31:
14:25:99:41:f3:93:4c:37:e2:06:42:7f:0a:e1:97:49:cc:84:
91:81:6d:a7:85:17:66:80:99:00:e5:a7:1b:20:a1:a5:d9:0f:
93:5b:f8:d2:40:13:06:11:41:49:b2:f8:a5:9c:20:30:eb:f2:
1c:21:64:2a:6b:d3:a6:d3:c4:5d:88:f8:23:73:5d:67:c8:95:
b4:49:f8:56:4d:a6:de:c0:ff:bb:90:80:82:c3:6d:a1:8e:6d:
66:70:20:79:1f:e2:60:67:4e:9e:45:da:d2:9e:bb:bd:db:5c:
7e:08:4f:f9:4e:88:4f:22:ed:be:57:5f:93:3c:de:8e:39:35:
c2:82:5b:bf:81:8c:a4:af:61:54:1d:40:19:df:bd:1d:a6:0f:
52:40:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:15 2025 by rpki-client