Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7hSmdnrS7FQ-gpfHPq127RtrZ10.roa
File: 7hSmdnrS7FQ-gpfHPq127RtrZ10.roa (raw, json)
Hash identifier: Wdf7crqGhlDdA14a15M1mY+dNn//y09Fyj0BWkc5C4Y=
Subject key identifier: EE:14:A6:76:7A:D2:EC:54:3E:82:97:C7:3E:AD:76:ED:1B:6B:67:5D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019189213E01C101B25073B621F477BA343F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7hSmdnrS7FQ-gpfHPq127RtrZ10.roa
Signing time: Sun 25 Aug 2024 10:42:22 +0000
ROA not before: Sun 25 Aug 2024 10:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 10:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:89:21:3e:01:c1:01:b2:50:73:b6:21:f4:77:ba:34:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 10:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee14a6767ad2ec543e8297c73ead76ed1b6b675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:55:05:bf:cf:d3:25:d3:5e:26:27:7b:16:
0b:41:1d:bc:8a:47:3b:87:e5:69:61:48:fb:d0:13:
a3:41:de:c0:2c:04:7a:cd:80:a0:67:c0:11:ba:a0:
b7:af:4a:f4:e0:58:5c:af:e1:ed:7c:54:fe:ed:43:
69:72:cd:ab:37:27:ea:89:de:6a:e0:c1:56:9e:c4:
a3:07:2b:19:80:1e:e3:6c:58:4f:6c:20:1e:84:9c:
89:ed:e7:db:e9:fc:63:2a:1f:60:fa:0d:9f:b5:50:
4a:ff:b7:43:7b:af:f2:a5:86:be:21:67:2d:d6:d5:
3c:8b:03:cc:31:e2:b1:50:dc:b8:9a:f3:98:47:03:
fa:d7:00:03:22:9c:84:91:63:da:72:0d:f6:28:5c:
33:f1:b0:97:e5:2d:ec:a1:16:41:b0:52:38:68:22:
e9:8b:8e:06:26:64:7f:35:80:60:30:d4:18:87:15:
6b:da:d2:37:7e:f2:a8:99:33:d7:4f:22:31:fe:91:
b5:ef:92:a7:cc:dc:bd:84:48:a9:08:e5:1f:88:c6:
ed:73:f3:26:27:d6:64:f3:6a:fe:99:08:22:41:e6:
e5:c3:c9:75:82:e6:f8:3a:8c:64:23:3f:a8:99:90:
26:bb:88:a7:44:59:78:d6:f1:79:81:5f:19:a8:5d:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:A6:76:7A:D2:EC:54:3E:82:97:C7:3E:AD:76:ED:1B:6B:67:5D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7hSmdnrS7FQ-gpfHPq127RtrZ10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7e:50:d0:35:7d:14:cc:75:d0:bb:72:7d:bb:b7:d2:7c:a2:
0e:0d:4e:8b:85:4a:80:4b:de:bf:12:f8:eb:be:54:10:d1:b3:
f4:56:63:34:9d:5a:64:6b:59:ab:ec:52:52:60:56:ab:d9:c2:
48:26:14:03:e4:c1:8c:f7:1e:9a:ca:18:9a:c0:0a:5d:0f:a9:
e5:b3:a2:36:ef:49:a2:95:82:b0:de:6d:f2:9f:97:0d:91:d7:
60:e0:07:e3:cd:f1:cb:65:5b:8b:0c:6e:ff:00:da:ec:76:26:
a3:06:50:77:d0:37:56:fb:b2:a9:19:af:1c:1d:be:c9:96:0d:
de:79:e8:cd:ab:59:23:55:d1:ef:57:c4:58:b9:86:34:eb:1f:
91:c4:a8:92:ba:df:5e:b7:84:fe:61:8e:e5:c9:05:f1:ff:8a:
a9:0c:30:1a:6d:d9:37:fb:41:8d:ec:62:29:d0:78:04:71:41:
df:a3:2f:2f:e4:cc:67:3d:fc:2b:60:91:5f:6d:3f:47:2b:a9:
08:0b:a1:64:38:47:cd:1d:0d:8d:ee:cd:95:00:9d:11:95:51:
0c:de:9b:4c:d9:e4:f1:39:b5:6d:d7:22:86:22:71:01:8f:39:
99:ad:8f:9c:cd:95:34:73:82:85:a6:de:fb:d7:1e:7f:f8:ac:
6b:86:84:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGJIT4BwQGyUHO2IfR3ujQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwODI1MTA0MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTE0YTY3NjdhZDJlYzU0M2U4Mjk3YzczZWFkNzZlZDFiNmI2NzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RVVBb/P0yXTXiYnexYLQR28ikc7
h+VpYUj70BOjQd7ALAR6zYCgZ8ARuqC3r0r04Fhcr+HtfFT+7UNpcs2rNyfqid5q
4MFWnsSjBysZgB7jbFhPbCAehJyJ7efb6fxjKh9g+g2ftVBK/7dDe6/ypYa+IWct
1tU8iwPMMeKxUNy4mvOYRwP61wADIpyEkWPacg32KFwz8bCX5S3soRZBsFI4aCLp
i44GJmR/NYBgMNQYhxVr2tI3fvKomTPXTyIx/pG175KnzNy9hEipCOUfiMbtc/Mm
J9Zk82r+mQgiQeblw8l1gub4OoxkIz+omZAmu4inRFl41vF5gV8ZqF1u4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4UpnZ60uxUPoKXxz6tdu0ba2ddMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvN2hTbWRuclM3RlEtZ3BmSFBxMTI3UnRyWjEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzghMA0G
CSqGSIb3DQEBCwUAA4IBAQCcflDQNX0UzHXQu3J9u7fSfKIODU6LhUqAS96/Evjr
vlQQ0bP0VmM0nVpka1mr7FJSYFar2cJIJhQD5MGM9x6ayhiawApdD6nls6I270mi
lYKw3m3yn5cNkddg4AfjzfHLZVuLDG7/ANrsdiajBlB30DdW+7KpGa8cHb7Jlg3e
eejNq1kjVdHvV8RYuYY06x+RxKiSut9et4T+YY7lyQXx/4qpDDAabdk3+0GN7GIp
0HgEcUHfoy8v5MxnPfwrYJFfbT9HK6kIC6FkOEfNHQ2N7s2VAJ0RlVEM3ptM2eTx
ObVt1yKGInEBjzmZrY+czZU0c4KFpt771x5/+KxrhoRi
-----END CERTIFICATE-----
Generated at Thu Sep 5 12:31:35 2024 by rpki-client on console-ams.rpki-client.org