Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07MieX51lS1lVvH5IRt8-hASSJs.roa
File: 07MieX51lS1lVvH5IRt8-hASSJs.roa (raw, json)
Hash identifier: j9NTM1TO4ztap3SmwGx4BKQl9ipOkgtDOIymAgPnXbI=
Subject key identifier: D3:B3:22:79:7E:75:95:2D:65:56:F1:F9:21:1B:7C:FA:10:12:48:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192564D7202D15FCF47D1FD6F5D895BDF57
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07MieX51lS1lVvH5IRt8-hASSJs.roa
Signing time: Fri 04 Oct 2024 06:52:48 +0000
ROA not before: Fri 04 Oct 2024 06:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216022
IP address blocks: 31.56.241.0/24 maxlen: 24
31.57.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 10:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:4d:72:02:d1:5f:cf:47:d1:fd:6f:5d:89:5b:df:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 4 06:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3b322797e75952d6556f1f9211b7cfa1012489b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:99:4b:be:80:9d:39:7e:ab:cf:0f:ee:11:dd:
8e:ca:a5:4a:63:d0:30:e0:c4:76:de:3d:02:9c:b5:
9e:19:38:af:84:9c:57:cf:d2:40:cb:e7:d0:13:d6:
c4:08:45:7b:4a:44:95:48:6e:ae:d5:23:6b:f4:08:
91:09:b2:c7:99:f0:7d:43:97:20:c1:bb:20:1f:9c:
d7:2d:d9:25:e9:b6:84:d4:75:89:3f:ce:bc:93:1b:
b7:96:45:93:d9:ce:17:7b:5b:4b:94:e6:1c:d6:00:
f3:eb:01:09:0d:38:7e:2a:a0:3f:63:9e:41:9a:91:
68:27:16:78:af:bc:57:66:fc:07:a9:a4:0e:06:ae:
1f:75:4c:a0:d3:76:1f:c6:b7:8f:ca:21:51:3d:55:
3c:b5:3d:96:f3:09:6e:f7:08:4a:9d:c5:28:17:0c:
bc:39:1d:1b:a3:d2:21:08:36:38:e3:df:b0:13:82:
17:02:8d:0b:ea:02:e3:17:e3:05:e4:d6:b5:73:a3:
24:d0:90:a8:fd:07:24:8f:e2:d7:ba:9b:2f:c0:b3:
5f:24:ac:23:7d:bb:eb:1d:81:74:6d:6f:60:cc:02:
be:fd:4b:4d:39:5f:44:a6:a7:f9:d9:2f:ce:38:a5:
70:64:76:91:44:cf:58:2b:80:c2:de:8e:27:54:ad:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B3:22:79:7E:75:95:2D:65:56:F1:F9:21:1B:7C:FA:10:12:48:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07MieX51lS1lVvH5IRt8-hASSJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.241.0/24
31.57.40.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9d:94:bc:0e:3d:c2:7e:f5:79:91:cc:67:a4:8b:f1:27:ad:
dc:b5:48:17:2e:81:ec:06:16:e5:99:a2:c6:13:00:5f:58:b3:
2c:2d:dd:98:7f:19:33:52:fc:03:8b:42:3d:c0:c8:46:6d:20:
fe:83:2c:ba:d9:d3:b2:17:cb:98:30:ce:80:46:72:21:0b:71:
b8:56:e2:32:6f:69:a0:8c:6d:c2:98:b0:18:4b:3e:97:0b:6d:
2e:17:00:4a:ee:61:b4:77:88:eb:e6:18:8d:8d:d2:9e:7e:e1:
ab:c8:af:e6:c1:75:b1:ef:31:48:a5:cc:48:bb:1c:b6:48:c9:
31:6c:42:c3:49:f3:89:94:92:62:70:8b:84:42:79:6a:9b:1d:
f6:68:cd:c4:9f:8f:8c:23:4c:50:20:55:8b:97:ab:97:83:40:
67:f1:fe:df:7f:81:ac:46:4c:65:86:62:23:c1:27:4b:b0:d3:
cd:9a:49:19:24:ae:dd:94:4e:f0:d4:f7:b8:e5:26:7a:5f:07:
8c:ca:62:22:00:3c:bb:a0:28:36:9e:a7:f7:08:54:c9:76:18:
d4:8a:c0:59:2a:8f:59:ea:42:5d:f9:2b:e7:be:d2:f4:cd:af:
50:44:e3:0d:91:61:58:5b:76:d7:f4:ab:c0:b1:9d:01:d9:4c:
33:6d:54:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJWTXIC0V/PR9H9b12JW99XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA0MDY1MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2IzMjI3OTdlNzU5NTJkNjU1NmYxZjkyMTFiN2NmYTEwMTI0ODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZlLvoCdOX6rzw/uEd2OyqVKY9Aw
4MR23j0CnLWeGTivhJxXz9JAy+fQE9bECEV7SkSVSG6u1SNr9AiRCbLHmfB9Q5cg
wbsgH5zXLdkl6baE1HWJP868kxu3lkWT2c4Xe1tLlOYc1gDz6wEJDTh+KqA/Y55B
mpFoJxZ4r7xXZvwHqaQOBq4fdUyg03YfxrePyiFRPVU8tT2W8wlu9whKncUoFwy8
OR0bo9IhCDY449+wE4IXAo0L6gLjF+MF5Na1c6Mk0JCo/Qckj+LXupsvwLNfJKwj
fbvrHYF0bW9gzAK+/UtNOV9Epqf52S/OOKVwZHaRRM9YK4DC3o4nVK3aKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNOzInl+dZUtZVbx+SEbfPoQEkibMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMDdNaWVYNTFsUzFsVnZINUlSdDgtaEFTU0pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjxAwQA
HzkoMA0GCSqGSIb3DQEBCwUAA4IBAQB4nZS8Dj3CfvV5kcxnpIvxJ63ctUgXLoHs
BhblmaLGEwBfWLMsLd2YfxkzUvwDi0I9wMhGbSD+gyy62dOyF8uYMM6ARnIhC3G4
VuIyb2mgjG3CmLAYSz6XC20uFwBK7mG0d4jr5hiNjdKefuGryK/mwXWx7zFIpcxI
uxy2SMkxbELDSfOJlJJicIuEQnlqmx32aM3En4+MI0xQIFWLl6uXg0Bn8f7ff4Gs
RkxlhmIjwSdLsNPNmkkZJK7dlE7w1Pe45SZ6XweMymIiADy7oCg2nqf3CFTJdhjU
isBZKo9Z6kJd+SvnvtL0za9QROMNkWFYW3bX9KvAsZ0B2UwzbVSM
-----END CERTIFICATE-----
Generated at Tue Oct 29 14:33:54 2024 by rpki-client on console-ams.rpki-client.org