Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0KGDLVzyc3kJckl8ZaCKjnhKJxg.roa
File: 0KGDLVzyc3kJckl8ZaCKjnhKJxg.roa (raw, json)
Hash identifier: odHEe11j2vejml8NFhjotmfAyRapZZotA8rClczmm/c=
Subject key identifier: D0:A1:83:2D:5C:F2:73:79:09:72:49:7C:65:A0:8A:8E:78:4A:27:18
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019246A36E9881165F0BCEDFFECF24E1D4AF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0KGDLVzyc3kJckl8ZaCKjnhKJxg.roa
Signing time: Tue 01 Oct 2024 05:52:48 +0000
ROA not before: Tue 01 Oct 2024 05:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 31.57.144.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 07:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:46:a3:6e:98:81:16:5f:0b:ce:df:fe:cf:24:e1:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 1 05:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0a1832d5cf273790972497c65a08a8e784a2718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:30:36:b3:14:0c:6c:08:7e:ad:06:f8:2f:
46:6a:d3:e9:96:d1:f7:19:b3:87:7f:c0:2f:e2:27:
40:9f:c7:36:be:a5:cd:70:50:22:61:ea:23:91:4c:
87:bf:95:da:db:1b:27:db:eb:7d:7f:7a:ef:5f:e4:
1d:a5:9d:d1:af:47:0b:72:d4:33:fa:79:29:88:a2:
cc:10:86:99:a0:9f:89:3d:19:93:a6:54:fb:fa:c6:
ee:32:23:04:7e:db:03:f4:bd:4d:75:b1:c1:57:a3:
ea:00:f2:a2:e0:87:68:68:f6:b1:c7:5c:01:b1:d7:
80:73:bc:3d:30:dd:ef:ce:d1:ad:48:c3:93:3d:b5:
64:7c:36:b9:0b:f1:a4:d6:10:4a:10:83:47:1d:46:
28:51:34:70:ba:5a:8e:cc:b2:65:47:da:3b:f7:06:
68:ef:e8:82:a2:de:4e:ed:59:22:45:46:7c:79:7e:
79:24:6b:27:b0:77:a7:c3:64:5d:dc:90:d7:5d:f8:
c2:db:dd:69:5b:e1:c9:50:ce:ce:79:0d:3d:54:d9:
64:ca:0f:c9:3c:fd:9a:30:5c:43:d5:0c:82:84:6c:
b2:ea:77:df:30:a2:47:94:e3:6c:c7:41:b1:c6:e0:
e6:83:20:c3:54:e1:44:d3:5f:23:c5:76:15:fe:11:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:83:2D:5C:F2:73:79:09:72:49:7C:65:A0:8A:8E:78:4A:27:18
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0KGDLVzyc3kJckl8ZaCKjnhKJxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.144.0/24
31.57.146.0/23
31.57.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a9:f8:16:de:c9:79:e2:05:22:a6:0c:59:41:79:a2:2b:68:
fd:0d:cb:12:92:3c:5f:b7:54:f1:66:c8:0a:78:bc:5a:2b:ff:
f1:80:78:f2:6a:19:d9:ab:82:7c:ce:d3:26:f0:f9:1d:d4:2c:
50:10:28:13:4a:cc:82:91:f3:13:23:35:32:23:32:c8:c4:51:
02:9a:36:6b:88:b4:9f:b3:cd:5b:10:8f:cf:7b:db:09:a5:74:
21:6d:0c:ec:52:6b:3a:97:9c:e4:6c:83:ff:d3:af:78:a3:22:
a7:5e:11:cf:25:d1:7c:a8:b0:1f:94:a3:21:77:11:db:45:a9:
9e:d6:9a:a8:d8:d8:b6:43:97:b6:99:47:13:52:f6:02:ec:82:
e3:64:5c:38:5e:f3:77:81:03:98:11:ff:43:f3:92:20:fc:13:
cd:9d:79:6e:1b:85:15:0c:77:cf:97:79:6b:e8:e1:61:46:9f:
73:d4:a0:fa:ad:3a:ce:fe:d0:e1:4f:78:60:e4:f8:94:83:ab:
56:98:6c:55:51:c2:09:d2:dc:6d:f0:08:9b:de:69:f6:12:13:
1d:44:43:09:4c:99:64:c9:4f:8b:2f:0c:e9:12:ed:74:ae:ef:
46:d2:45:e1:01:0d:4b:02:63:18:87:84:5b:47:b9:74:04:d4:
00:b2:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 10:52:31 2024 by rpki-client on console-ams.rpki-client.org