Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yjZRRRjrZLsMWKQaww3hZJCFS3k.roa
File: yjZRRRjrZLsMWKQaww3hZJCFS3k.roa (raw, json)
Hash identifier: WGUunRwTUw1Y63cYD2j2jdrGtXzzX0ybocbtfg9k9qc=
Subject key identifier: CA:36:51:45:18:EB:64:BB:0C:58:A4:1A:C3:0D:E1:64:90:85:4B:79
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192B800419AC7979F0509E5500EA0A2BAAA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yjZRRRjrZLsMWKQaww3hZJCFS3k.roa
Signing time: Wed 23 Oct 2024 06:11:17 +0000
ROA not before: Wed 23 Oct 2024 06:11:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 31.56.5.0/24 maxlen: 24
31.56.128.0/24 maxlen: 24
31.56.129.0/24 maxlen: 24
31.56.130.0/24 maxlen: 24
31.56.131.0/24 maxlen: 24
31.56.132.0/24 maxlen: 24
31.56.133.0/24 maxlen: 24
31.56.134.0/24 maxlen: 24
31.56.135.0/24 maxlen: 24
31.56.136.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.246.0/24 maxlen: 24
31.56.247.0/24 maxlen: 24
31.56.248.0/24 maxlen: 24
31.56.249.0/24 maxlen: 24
31.56.250.0/24 maxlen: 24
31.56.251.0/24 maxlen: 24
31.56.252.0/24 maxlen: 24
31.56.253.0/24 maxlen: 24
31.56.254.0/24 maxlen: 24
31.56.255.0/24 maxlen: 24
31.57.41.0/24 maxlen: 24
31.57.42.0/24 maxlen: 24
31.57.82.0/24 maxlen: 24
31.58.72.0/22 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.108.0/22 maxlen: 24
31.58.116.0/22 maxlen: 24
31.58.124.0/22 maxlen: 24
31.59.0.0/24 maxlen: 24
31.59.1.0/24 maxlen: 24
31.59.2.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.6.0/24 maxlen: 24
31.59.7.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.246.0/24 maxlen: 24
31.59.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 17:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:00:41:9a:c7:97:9f:05:09:e5:50:0e:a0:a2:ba:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 06:11:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca36514518eb64bb0c58a41ac30de16490854b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:bb:e5:ff:99:7a:c7:22:82:d7:1c:f1:70:
61:e5:87:75:65:4e:f0:b9:c7:48:9e:cd:9c:17:1b:
0d:e0:b8:fb:13:62:7f:6f:d5:88:a3:2b:89:11:14:
4b:82:14:8e:c0:2a:b0:c0:c2:94:a6:8f:47:58:c7:
00:62:b1:aa:e6:2f:b0:35:cf:66:56:7e:9a:72:21:
1b:c2:ce:08:7a:c5:3a:d6:9e:42:37:bc:4a:13:b1:
25:11:92:b7:f6:93:9c:8d:e8:5f:37:66:f8:7b:32:
81:67:b2:90:20:34:9f:08:dd:a7:d5:e1:14:75:98:
4b:36:e7:35:8a:f4:dc:62:e6:e1:8f:98:f1:fb:ed:
1f:d1:f4:27:51:c3:d3:1d:87:c3:1b:d1:1c:ca:48:
75:a2:11:f1:3c:d9:d7:fc:cc:6d:3e:4d:2f:06:25:
81:4b:cc:f7:6d:e5:63:8e:79:96:10:e6:a6:5c:e6:
e0:c4:c8:41:91:11:d4:39:fc:01:04:80:bc:2e:a3:
f4:a2:8b:b5:c3:dc:92:7d:e9:47:e0:72:a1:27:f3:
44:42:7a:bf:ff:cb:50:55:20:3e:ec:52:ad:51:8c:
b5:57:c4:50:3c:c0:c2:54:f0:19:46:3d:fc:54:da:
71:b3:4d:9f:be:2f:a0:21:f4:45:65:b2:8a:d0:93:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:51:45:18:EB:64:BB:0C:58:A4:1A:C3:0D:E1:64:90:85:4B:79
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yjZRRRjrZLsMWKQaww3hZJCFS3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.5.0/24
31.56.128.0-31.56.137.255
31.56.246.0-31.56.255.255
31.57.41.0-31.57.42.255
31.57.82.0/24
31.58.72.0/22
31.58.96.0/22
31.58.108.0/22
31.58.116.0/22
31.58.124.0/22
31.59.0.0-31.59.9.255
31.59.52.0/22
31.59.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:82:df:87:99:e5:75:df:4c:fd:7b:04:bd:e7:51:26:fd:07:
f4:49:0b:23:68:d1:18:e5:43:95:cd:0a:d3:4e:db:00:3c:dc:
2a:a3:bc:82:1d:8f:6d:73:e5:43:3b:48:83:d6:27:16:93:5e:
66:93:4e:f6:d9:cf:78:57:90:be:c4:00:6c:9c:6e:72:a1:74:
02:15:e3:22:df:17:33:c7:85:c6:67:1e:ed:63:52:38:8a:c0:
bb:38:c6:78:59:38:9e:25:d3:b5:5b:06:8d:05:26:a5:56:dc:
c9:7a:84:0e:2e:8f:a6:62:5c:10:04:1f:a7:33:0c:e9:cb:b5:
18:7d:68:8a:63:12:93:0a:57:e3:34:c3:c3:33:4b:ba:37:bf:
29:54:69:61:d1:b5:82:c8:1e:39:c1:bb:b7:06:bf:4c:2e:d4:
dd:f6:da:cf:bd:fa:d8:2c:2c:01:3f:f8:45:dd:c4:cf:df:fb:
d9:27:cb:38:73:29:29:53:26:fd:a2:60:b8:7a:ca:2b:4a:58:
6c:65:3d:41:42:f6:11:2e:45:b8:3a:35:a4:2b:c0:72:f8:37:
13:ee:09:fe:a4:87:5a:a1:7f:4d:15:5c:d6:f8:e2:4b:e3:5e:
5a:4f:da:f5:ce:c1:8c:24:80:35:6d:b0:f8:94:68:f5:2e:a1:
4d:b7:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 19:37:37 2024 by rpki-client on console-fra.rpki-client.org