Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/4CM2cvDQTM8TomT703PzBwKsWuw.roa
File: 4CM2cvDQTM8TomT703PzBwKsWuw.roa (raw, json)
Hash identifier: Gu+Qxw2HvJH0ClSF8ZIjmtN3wXC0j4epemztvXsP5k0=
Subject key identifier: E0:23:36:72:F0:D0:4C:CF:13:A2:64:FB:D3:73:F3:07:02:AC:5A:EC
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01927774BC73BD5D3FF820157BB076D016DB
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/4CM2cvDQTM8TomT703PzBwKsWuw.roa
Signing time: Thu 10 Oct 2024 17:23:12 +0000
ROA not before: Thu 10 Oct 2024 17:23:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 31.133.88.0/24 maxlen: 24
31.133.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:74:bc:73:bd:5d:3f:f8:20:15:7b:b0:76:d0:16:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Oct 10 17:23:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0233672f0d04ccf13a264fbd373f30702ac5aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:08:00:c3:9f:7b:b1:92:50:ab:4f:ce:30:
0e:81:1b:18:05:47:47:6f:1f:b3:aa:69:29:01:4d:
24:90:e6:27:c2:81:01:1c:87:f4:61:4c:59:3e:07:
e3:d0:33:c8:49:0a:fa:21:1a:12:79:c1:52:47:fd:
e9:58:55:6c:20:75:22:2e:b7:08:db:87:f8:68:b9:
c7:19:72:df:a3:da:cf:d3:75:3c:85:ec:15:f0:7f:
33:fe:f6:a5:a7:df:bf:dc:ca:43:97:0b:44:61:a3:
99:1b:5e:8f:db:0a:6d:05:eb:fe:af:64:be:ca:33:
b8:bf:3f:9d:5e:33:90:51:e3:81:c1:bd:04:f2:54:
2d:0b:8d:30:9c:cb:d0:6a:16:09:b0:54:81:82:c5:
16:05:bd:c3:9e:a8:54:43:55:12:0e:20:f7:d0:69:
06:0b:81:7f:f6:dd:8c:22:05:10:d2:08:3d:04:f0:
f5:32:5b:53:b7:e8:ec:9c:b3:17:80:f8:49:25:c0:
34:81:2b:a6:90:76:a7:ae:1b:51:39:de:71:bd:eb:
81:a6:b2:06:7e:a9:49:3c:e8:b5:ce:04:f2:7b:33:
e2:92:66:9b:a0:30:4b:13:a4:80:1c:12:3e:e4:7b:
f8:c5:05:5f:32:62:74:64:61:4e:d8:7d:04:ab:5b:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:36:72:F0:D0:4C:CF:13:A2:64:FB:D3:73:F3:07:02:AC:5A:EC
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/4CM2cvDQTM8TomT703PzBwKsWuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.88.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:91:a8:e4:6d:07:b0:71:0e:95:d8:d9:84:ec:76:94:63:74:
ef:88:c4:0a:2d:79:04:49:df:10:9d:39:f7:0c:25:54:da:e3:
4b:6a:3b:98:d5:84:ac:a4:f5:22:52:4b:a6:55:ea:13:f4:82:
de:bd:41:f6:d3:86:c0:bc:97:a5:03:50:4d:6d:b9:91:18:fc:
39:c4:92:67:54:44:1a:6e:b8:38:16:06:e0:3b:a4:6b:69:7f:
d7:de:30:81:49:47:8e:89:74:53:3b:97:1f:67:09:e5:5c:f7:
eb:17:c4:70:d8:a4:86:d5:66:23:82:1f:86:f2:c8:c0:29:36:
56:cc:9e:f1:55:c5:45:a8:f1:c9:f6:ba:bf:d0:98:8a:9b:7d:
53:8e:5e:4a:78:83:7d:9b:3d:0c:08:c7:aa:03:40:e3:5c:a0:
35:52:05:3d:a1:0c:78:34:03:29:7a:42:b7:0a:fa:d7:60:74:
d0:44:76:d2:dd:d4:49:dc:77:a1:05:5a:ac:3f:42:b5:81:14:
60:f0:e9:71:96:e9:08:9b:49:72:f4:23:8f:5b:73:21:8a:8e:
04:6d:69:5c:65:3b:6e:d6:90:13:8a:89:71:70:f8:37:e5:56:
01:56:a5:13:21:c5:ed:a8:a3:53:36:f0:f8:c0:6a:4e:27:c5:
07:cc:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:03:35 2024 by rpki-client on console-fra.rpki-client.org