Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4equ2cXYqyuyrvxoxzMOH6HQVBI.roa
File: 4equ2cXYqyuyrvxoxzMOH6HQVBI.roa (raw, json)
Hash identifier: VVRrTvSD34XnOzWXwe8kdV+W2eN+kkRfjTHJgFgSiEI=
Subject key identifier: E1:EA:AE:D9:C5:D8:AB:2B:B2:AE:FC:68:C7:33:0E:1F:A1:D0:54:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01926C6D3FADC3109EB4BBF65373F8A991B1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4equ2cXYqyuyrvxoxzMOH6HQVBI.roa
Signing time: Tue 08 Oct 2024 13:59:12 +0000
ROA not before: Tue 08 Oct 2024 13:59:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212042
IP address blocks: 31.57.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 20:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:6d:3f:ad:c3:10:9e:b4:bb:f6:53:73:f8:a9:91:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 8 13:59:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1eaaed9c5d8ab2bb2aefc68c7330e1fa1d05412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:af:ec:46:82:33:6c:e4:b4:66:91:85:b2:
9c:0b:61:36:54:ba:ba:dd:72:1f:21:fe:1d:2c:76:
ec:a3:73:92:93:dc:95:24:63:30:17:95:7e:2e:3f:
48:a6:33:f8:e5:fa:6c:76:fd:29:95:f8:36:ad:f5:
89:52:4e:ae:fa:93:b7:b2:c0:e5:c2:da:38:f4:b3:
ac:75:10:2a:08:7c:1d:48:42:61:08:10:a8:30:10:
2a:08:79:16:6a:55:2a:e5:34:d5:6b:ae:06:dd:2a:
b8:59:bd:76:58:c8:f5:1a:50:f9:aa:0c:aa:f5:b4:
c0:17:41:2d:9f:6d:2c:a8:a8:cc:4c:f7:c1:07:92:
74:90:58:40:0b:8a:35:fd:e5:be:4c:1b:98:81:c5:
8c:4f:06:6b:2e:43:dc:85:83:fb:31:e2:50:fa:09:
a2:47:dd:a0:6e:fc:2f:e2:9a:13:8b:93:6e:02:92:
2e:30:5c:92:1e:1f:25:36:77:a3:3d:86:fe:33:f9:
e3:b8:07:7e:68:f5:bd:72:a6:c5:97:46:df:a9:cb:
66:d8:11:9e:5c:81:e5:6c:9b:4b:f7:04:ed:d6:b0:
19:57:66:2d:2e:13:e7:bb:60:75:31:90:f0:e1:43:
54:69:c3:36:cd:4f:07:d5:8e:88:68:2e:e4:cf:9c:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EA:AE:D9:C5:D8:AB:2B:B2:AE:FC:68:C7:33:0E:1F:A1:D0:54:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4equ2cXYqyuyrvxoxzMOH6HQVBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.130.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d8:42:9f:da:49:79:17:21:51:52:37:58:02:fd:cf:c0:57:
56:a5:40:3c:a7:b1:ae:ce:76:41:4b:0c:8d:47:5b:24:59:c1:
7f:09:56:7c:11:61:a7:94:36:37:2a:af:e7:b8:e0:3d:48:1d:
16:b0:3e:7e:bf:1a:03:18:94:3b:34:bd:33:1b:63:1a:8a:70:
48:49:65:e2:63:63:40:23:63:ec:12:83:74:4a:1d:f0:4c:26:
56:72:31:e6:75:54:d1:c0:9f:a9:95:df:19:92:02:89:6a:82:
36:7c:7e:d3:77:c0:aa:56:c8:5a:7c:be:4a:ac:45:67:06:67:
4a:b1:a6:a8:9a:2a:54:4e:2f:06:3d:d7:83:bd:d6:ef:16:13:
5a:29:82:82:e0:5e:ca:18:5e:d3:4e:78:ac:53:74:5b:2f:24:
0a:85:e8:38:a1:c5:cd:e7:21:bc:7b:e2:19:f3:36:dd:c7:7b:
b5:9d:a2:b8:f4:da:ea:b2:d8:3d:d1:ab:0c:0a:d2:31:69:d6:
df:e9:c1:53:64:78:60:c7:d7:d2:10:90:04:ac:6f:89:fe:e3:
f2:1e:5f:05:50:10:61:26:04:d4:4b:4f:eb:88:6a:ac:e3:89:
fa:36:57:05:4c:72:af:94:f9:ac:59:55:aa:dd:b0:1d:d5:1a:
17:68:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 00:18:33 2024 by rpki-client on console-ams.rpki-client.org