Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5tp8o7e77t30lIMYg128iSHhOI4.roa
File: 5tp8o7e77t30lIMYg128iSHhOI4.roa (raw, json)
Hash identifier: cDzq9kVINusdn9CR9Sr29kbW2o7bs/pUtQotjPVMgvE=
Subject key identifier: E6:DA:7C:A3:B7:BB:EE:DD:F4:94:83:18:83:5D:BC:89:21:E1:38:8E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0190CA6CFDF90AB7D2C70E2327A7E934B0D3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5tp8o7e77t30lIMYg128iSHhOI4.roa
Signing time: Fri 19 Jul 2024 09:57:38 +0000
ROA not before: Fri 19 Jul 2024 09:57:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.57.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 09:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:6c:fd:f9:0a:b7:d2:c7:0e:23:27:a7:e9:34:b0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 19 09:57:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6da7ca3b7bbeeddf4948318835dbc8921e1388e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:2c:27:31:77:91:15:df:e7:f1:3a:d9:a1:
02:be:d9:19:a2:23:2c:6b:09:e6:22:86:d1:4f:cf:
57:ad:5a:b9:4e:e8:f2:6a:c2:e2:84:24:a5:62:de:
d0:30:6b:71:71:d2:70:58:43:75:be:d0:55:08:83:
6d:05:f0:48:fa:6f:e4:63:cb:52:b6:6f:50:58:56:
8f:cc:93:c9:63:51:6e:b7:a4:bd:5e:41:81:3c:96:
19:6e:81:66:ee:c9:56:f4:71:b6:19:be:00:e0:a1:
77:7d:1d:a9:73:a3:e5:7e:cf:f6:e9:e5:81:27:b7:
91:c8:6b:a0:b6:c7:4b:7a:8d:1e:33:a6:e5:5d:e9:
d6:ad:09:f3:a9:4e:19:9f:de:b2:f3:2c:55:5f:a3:
86:7e:f0:a9:89:ff:71:b4:80:09:01:1a:06:54:2f:
0a:70:75:3b:0b:f7:9c:53:ec:fb:b6:a5:f2:db:f4:
ca:38:88:7e:7b:a6:15:84:f8:38:7a:7a:57:78:89:
ee:12:3b:81:a1:c1:a8:04:d9:29:68:2f:40:06:0e:
b0:53:74:8b:b2:d2:f8:da:00:cf:cf:52:30:b8:67:
7a:18:8e:8c:d2:15:66:7d:ac:f1:db:11:f7:7a:85:
ca:6f:94:7a:d0:37:cb:b6:4e:71:43:98:e9:03:d9:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:7C:A3:B7:BB:EE:DD:F4:94:83:18:83:5D:BC:89:21:E1:38:8E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5tp8o7e77t30lIMYg128iSHhOI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:66:24:3e:08:c0:d9:9b:e6:4e:9b:d1:0e:c5:c6:d8:67:14:
4c:b6:00:a2:fb:2f:b6:96:61:34:53:86:f8:7f:31:82:b7:15:
13:77:20:87:9e:eb:5d:80:00:a5:fd:b7:27:c5:8c:f4:18:f5:
4e:49:61:3b:8a:9f:82:d6:be:d0:44:55:99:d2:27:cc:03:02:
52:66:1d:a7:33:06:6b:90:91:e3:b1:ff:5e:92:97:48:b3:8c:
b4:d1:51:db:9d:f9:24:7e:fb:49:98:f7:20:04:ca:ef:84:21:
ec:69:b7:a5:03:c4:0a:06:8f:48:f5:ff:9c:e7:41:65:37:8b:
48:9c:91:09:a8:05:12:17:71:33:45:3a:1e:a8:f8:a4:e3:8b:
95:f8:83:e1:32:0f:c1:91:e2:62:d7:47:4e:8e:ef:0b:13:9a:
ec:2e:0c:cd:ec:4d:48:67:7e:1d:c6:14:33:91:c2:b8:41:61:
e1:e7:4f:e4:ac:c3:e9:d6:4b:71:1e:cf:36:9a:de:ab:51:0e:
73:32:3a:0e:9b:b8:c5:a0:48:e0:fe:61:d8:50:b2:ed:20:ea:
0f:d0:3a:f7:09:c6:95:b2:2c:36:f8:90:b2:5c:45:67:71:7a:
07:d1:03:80:5e:ec:4e:78:d3:3b:6d:48:02:e9:5f:81:28:b8:
42:d2:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:25 2024 by rpki-client on console-ams.rpki-client.org