Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ofObp6Ih_Opc5OZzj7BxSjFkzc.roa
File: 3ofObp6Ih_Opc5OZzj7BxSjFkzc.roa (raw, json)
Hash identifier: bkYS3dnlnTH91X5xF2kSCZQM3m+CNpfjFsZhVwP3Pb8=
Subject key identifier: DE:87:CE:6E:9E:88:87:F3:A9:73:93:99:CE:3E:C1:C5:28:C5:93:37
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01926C6B6B1C32BEA7C21DD264DDC4189CE1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ofObp6Ih_Opc5OZzj7BxSjFkzc.roa
Signing time: Tue 08 Oct 2024 13:57:12 +0000
ROA not before: Tue 08 Oct 2024 13:57:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 13:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:6b:6b:1c:32:be:a7:c2:1d:d2:64:dd:c4:18:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 8 13:57:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de87ce6e9e8887f3a9739399ce3ec1c528c59337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:a7:90:c6:3b:9b:fe:5b:a6:1b:e7:7b:d2:
8c:06:75:84:58:45:ad:2b:dc:ea:5e:03:76:1c:bf:
30:e7:eb:13:bb:49:ea:88:81:dd:8d:65:d7:1f:a0:
de:25:47:fc:a2:96:94:a2:61:57:17:65:f0:98:b7:
0b:e3:9a:eb:fa:71:1f:6e:8b:b7:ee:a4:b0:97:19:
d2:ae:5d:97:22:fa:22:ef:67:29:2b:93:02:c5:0b:
54:10:f1:cc:a0:7d:c1:67:2b:69:dd:d3:18:3f:d3:
5d:08:71:af:0e:f1:20:92:23:4b:b2:f4:34:54:f3:
44:8a:46:f1:3a:09:c2:17:4c:e0:b3:fd:ba:3d:61:
86:8c:a7:e2:c8:93:e4:28:b5:1a:ef:cb:05:c6:7f:
7b:2b:d3:a2:a1:e4:6e:e9:d8:57:db:67:bc:25:90:
ca:70:72:91:8c:95:01:bc:4e:a6:23:23:51:8e:95:
40:6e:10:fc:3c:2c:d1:90:78:26:0b:76:1a:18:27:
86:1b:fe:65:70:5a:da:34:bc:6b:66:b7:7d:22:d7:
2d:cc:14:ca:d5:96:92:f5:a8:9e:5e:f6:4f:4a:9e:
6b:aa:96:80:f9:ae:d0:86:4a:92:91:d6:cd:d4:db:
c6:8b:35:92:c2:e5:b3:67:51:5f:e0:07:f7:27:f7:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:CE:6E:9E:88:87:F3:A9:73:93:99:CE:3E:C1:C5:28:C5:93:37
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ofObp6Ih_Opc5OZzj7BxSjFkzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.150.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0b:67:6b:28:ed:34:25:16:6e:54:a2:f9:c4:f8:b4:a4:e3:
4d:bf:d9:7c:18:20:ba:fb:30:68:9a:2d:12:c4:8b:7f:77:ff:
57:74:ab:bb:2a:04:83:44:f1:f1:7f:60:66:e3:51:06:5c:df:
eb:b5:01:e6:15:cd:e5:5e:c5:64:b0:9f:42:d3:13:b1:db:71:
ff:94:67:e4:29:11:e9:a5:18:6b:0c:5c:aa:d3:40:be:99:bd:
78:e8:c7:27:48:44:05:cf:1b:6c:1d:22:63:0f:87:44:23:40:
e8:5b:a8:40:50:36:b3:0e:40:f7:44:4b:ba:54:34:55:e0:71:
2c:4a:78:26:97:4a:7a:48:5f:bb:39:9e:1b:61:01:0d:d1:3a:
ca:f1:0e:10:5e:8c:e2:3c:dd:08:3d:11:ba:3c:57:b0:76:47:
6d:9d:45:73:45:6e:0a:bc:b9:bc:4e:48:36:6e:3b:bc:69:43:
9b:f0:d7:57:d7:6b:33:bd:ca:4b:b1:18:a8:c2:e0:f2:0b:54:
91:de:af:1f:8a:78:b1:69:75:5f:e2:04:4a:6c:24:42:5f:87:
0b:c6:60:de:a0:f0:31:af:69:30:c0:39:cd:1f:ad:10:47:98:
c6:a7:fa:2f:16:ea:27:83:e0:a9:32:c0:60:93:d0:9a:ec:c6:
ca:cc:4d:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJsa2scMr6nwh3SZN3EGJzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA4MTM1NzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTg3Y2U2ZTllODg4N2YzYTk3MzkzOTljZTNlYzFjNTI4YzU5MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjCnkMY7m/5bphvne9KMBnWEWEWt
K9zqXgN2HL8w5+sTu0nqiIHdjWXXH6DeJUf8opaUomFXF2XwmLcL45rr+nEfbou3
7qSwlxnSrl2XIvoi72cpK5MCxQtUEPHMoH3BZytp3dMYP9NdCHGvDvEgkiNLsvQ0
VPNEikbxOgnCF0zgs/26PWGGjKfiyJPkKLUa78sFxn97K9OioeRu6dhX22e8JZDK
cHKRjJUBvE6mIyNRjpVAbhD8PCzRkHgmC3YaGCeGG/5lcFraNLxrZrd9ItctzBTK
1ZaS9aieXvZPSp5rqpaA+a7QhkqSkdbN1NvGizWSwuWzZ1Ff4Af3J/cFMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN6Hzm6eiIfzqXOTmc4+wcUoxZM3MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvM29mT2JwNkloX09wYzVPWnpqN0J4U2pGa3pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzkLAwQA
HzmWMA0GCSqGSIb3DQEBCwUAA4IBAQCTC2drKO00JRZuVKL5xPi0pONNv9l8GCC6
+zBomi0SxIt/d/9XdKu7KgSDRPHxf2Bm41EGXN/rtQHmFc3lXsVksJ9C0xOx23H/
lGfkKRHppRhrDFyq00C+mb146McnSEQFzxtsHSJjD4dEI0DoW6hAUDazDkD3REu6
VDRV4HEsSngml0p6SF+7OZ4bYQEN0TrK8Q4QXoziPN0IPRG6PFewdkdtnUVzRW4K
vLm8Tkg2bju8aUOb8NdX12szvcpLsRiowuDyC1SR3q8finixaXVf4gRKbCRCX4cL
xmDeoPAxr2kwwDnNH60QR5jGp/ovFuong+CpMsBgk9Ca7MbKzE2K
-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:14 2024 by rpki-client on console-ams.rpki-client.org