Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9B4cSiZ-9FDDWCt_QR6aTN3D_HQ.roa
File: 9B4cSiZ-9FDDWCt_QR6aTN3D_HQ.roa (raw, json)
Hash identifier: iRlwwPACP3ByJqqPMZv+OCY4taAzLvN3sEyxw/Qz8qA=
Subject key identifier: F4:1E:1C:4A:26:7E:F4:50:C3:58:2B:7F:41:1E:9A:4C:DD:C3:FC:74
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192564AB31AB738E9D2D59AB100DB173640
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9B4cSiZ-9FDDWCt_QR6aTN3D_HQ.roa
Signing time: Fri 04 Oct 2024 06:49:48 +0000
ROA not before: Fri 04 Oct 2024 06:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 07 Oct 2024 07:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:4a:b3:1a:b7:38:e9:d2:d5:9a:b1:00:db:17:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 4 06:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f41e1c4a267ef450c3582b7f411e9a4cddc3fc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:04:f5:aa:42:37:eb:37:9c:f3:56:45:d5:
85:c9:be:2b:c2:a2:15:fb:02:4b:8a:db:52:96:ba:
fa:f1:3e:4e:0e:9c:c8:9a:e4:7e:2e:30:9c:d1:95:
53:a5:fa:8d:b1:36:da:98:91:5a:2d:2c:54:d5:f9:
0a:cc:d3:23:78:f7:dd:28:14:3d:76:9f:73:ab:80:
c7:5a:3b:13:75:b2:50:db:2f:0f:ff:9f:77:db:55:
c1:06:42:00:86:7f:76:67:4e:b8:51:13:ba:b9:f7:
16:ed:44:73:5e:50:ed:3b:59:57:f8:98:5d:db:aa:
1a:e1:52:d1:36:ec:61:e7:c8:f3:5c:20:47:bb:02:
ed:42:21:a3:ae:7f:7d:66:33:0c:77:a2:a7:b2:d2:
9d:4a:00:5e:b3:2e:58:35:01:49:65:da:fa:7d:f8:
4c:f7:f2:6b:d0:af:9e:db:1a:f8:f7:84:ed:1b:f8:
23:f2:10:a6:04:a6:65:fc:a3:e6:d7:60:e0:0e:28:
8b:dd:8e:c1:94:6b:25:c1:28:61:bf:3e:71:6f:f3:
96:0c:70:ac:87:e6:67:28:3c:0d:2c:08:ea:5d:66:
03:9a:ec:26:79:4b:c4:f3:ea:bb:bc:df:04:d6:0e:
98:10:bf:3d:32:7c:ee:ff:5a:4d:2e:bf:11:b5:70:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:1C:4A:26:7E:F4:50:C3:58:2B:7F:41:1E:9A:4C:DD:C3:FC:74
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9B4cSiZ-9FDDWCt_QR6aTN3D_HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.162.0-31.57.165.255
Signature Algorithm: sha256WithRSAEncryption
3d:89:c1:be:aa:26:27:c2:b2:8f:13:0b:6d:ef:44:bd:4a:42:
ba:b9:47:5e:dd:b8:14:ab:25:d0:14:94:ce:d6:7e:2a:f2:8c:
61:a0:6d:57:0c:a2:8e:24:09:75:d6:2a:b8:90:9c:de:60:db:
18:86:e2:e1:b1:45:b3:8d:e0:e4:3c:e2:ee:00:32:c3:2e:56:
00:8b:2e:ec:23:3a:13:cb:d4:ae:c7:c4:c4:d1:3b:7d:7f:b9:
6c:6c:a8:a7:66:c2:bd:91:dc:79:4a:51:97:5f:f4:85:d5:8a:
a2:70:08:b1:54:3c:0f:23:3a:9b:bf:72:ef:25:91:a7:c4:be:
62:14:32:13:56:a8:0d:0b:78:b2:19:67:30:4b:30:61:57:ff:
ac:06:03:68:b5:3d:56:f7:e0:63:25:33:62:16:8f:aa:72:42:
3b:59:52:63:89:b5:6c:7b:8b:a4:14:01:75:fb:d8:75:73:30:
87:c2:71:d7:91:8e:c8:78:74:4b:91:ea:04:b6:95:69:e3:5a:
b8:32:9e:6f:30:4f:69:42:21:37:67:fc:fc:0f:3d:9b:57:20:
b1:13:64:43:ed:4b:57:48:8b:18:d7:04:84:6c:c0:de:04:5b:
bd:33:6b:c6:f7:65:8c:3f:60:a6:c1:f0:5e:95:93:42:81:2c:
1b:66:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 10:52:31 2024 by rpki-client on console-ams.rpki-client.org