Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2IB9XDtttkXKjgV-We0CRWYMIa4.roa
File: 2IB9XDtttkXKjgV-We0CRWYMIa4.roa (raw, json)
Hash identifier: Ps1xVQxILL3/V3+6I7cCeNiIsuApPzbpmVN+rmIJQQc=
Subject key identifier: D8:80:7D:5C:3B:6D:B6:45:CA:8E:05:7E:59:ED:02:45:66:0C:21:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192E344FB26749E8ABA85B696F2DF95C378
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2IB9XDtttkXKjgV-We0CRWYMIa4.roa
Signing time: Thu 31 Oct 2024 15:50:01 +0000
ROA not before: Thu 31 Oct 2024 15:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.142.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 22
31.58.176.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.216.0/22 maxlen: 22
31.58.240.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 17:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:44:fb:26:74:9e:8a:ba:85:b6:96:f2:df:95:c3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 15:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8807d5c3b6db645ca8e057e59ed0245660c21ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:b1:33:84:7b:a5:7d:1c:d0:58:42:6c:33:
66:c1:08:29:ef:a1:f6:ba:74:0b:04:b2:c3:ce:aa:
eb:fd:49:76:7f:f4:7d:92:57:47:0f:98:93:83:99:
be:92:bb:bb:b3:82:fb:38:6e:0c:82:44:ff:ed:59:
40:44:cc:f4:08:5c:26:7a:0c:17:df:aa:17:fa:95:
df:23:f5:6b:b4:d4:68:91:08:e5:05:2c:0a:3b:12:
4d:38:27:15:ad:81:0b:f1:e6:38:05:4a:74:58:2f:
2d:83:95:ff:e1:0e:7e:42:70:17:19:82:3b:3a:b0:
c6:34:8a:5b:74:e6:6d:22:a5:3c:43:5d:e9:8a:cf:
dd:15:43:ad:8e:0d:3c:03:a8:ca:17:00:a3:7c:08:
ff:d5:18:bd:ef:1f:ae:2d:8d:45:c3:a8:ab:cf:ed:
bd:9b:50:3b:da:e9:8e:91:5b:17:ac:82:45:d2:e8:
f6:3d:68:cf:33:f3:b0:51:a2:da:e8:25:f5:47:19:
e4:f4:fc:26:68:0d:5e:39:33:46:1a:23:10:59:ee:
ed:a2:f0:4e:8a:57:ad:2b:26:bc:37:a6:6a:9a:b0:
35:95:af:0d:90:8b:0e:6f:0c:b5:6b:2b:be:3b:ef:
44:1d:84:5e:43:5f:db:62:e6:80:4f:39:4a:55:01:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:7D:5C:3B:6D:B6:45:CA:8E:05:7E:59:ED:02:45:66:0C:21:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2IB9XDtttkXKjgV-We0CRWYMIa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.58.49.0/24
31.58.59.0/24
31.58.129.0/24
31.58.142.0/24
31.58.146.0/24
31.58.152.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0/22
31.58.252.0/22
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
76:57:96:da:2f:4a:df:d5:f5:54:84:8b:a2:b9:d6:85:94:d0:
7e:d2:26:51:f9:14:74:65:6e:36:e8:6f:3c:a7:7d:18:37:0a:
c2:eb:df:f1:34:1e:91:f0:6f:71:cf:ae:4c:30:4b:3f:f2:d2:
ee:c7:d7:e2:91:29:0b:d7:09:a9:c5:6c:61:0e:d3:21:7d:e1:
7a:00:96:8a:4a:63:fb:05:39:9e:73:76:8b:85:8a:42:3a:b5:
68:28:69:f3:37:73:a0:f2:69:49:88:64:a5:f3:ab:bf:56:b5:
0e:b5:6d:5e:e0:02:ce:c4:43:ad:76:47:c9:2a:69:be:f8:90:
c0:cd:72:4a:42:1b:93:83:c9:2b:b1:b6:00:98:d1:1e:03:44:
62:e3:72:5a:4b:14:79:dc:e6:39:74:26:76:99:2b:23:e1:93:
9b:ff:59:e8:ac:2a:c5:a0:69:0f:dc:43:83:2c:88:6e:07:f9:
3d:ca:68:19:28:80:f1:61:5d:d4:6e:2f:ce:a4:2f:44:97:92:
6a:83:8c:78:d6:71:13:2d:ae:5c:50:7a:63:e4:05:44:c2:ec:
42:da:dc:5e:0b:35:7d:ad:02:67:be:68:8a:7c:d4:ae:36:c3:
67:ce:51:6d:f5:bd:36:d7:16:53:13:83:86:a8:42:63:22:0e:
2f:f2:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:22 2024 by rpki-client on console-fra.rpki-client.org