Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A8-LOLLVCOkda83CLRIQbzyWud0.roa
File: A8-LOLLVCOkda83CLRIQbzyWud0.roa (raw, json)
Hash identifier: Tsa8iqLdNl1LhwL+Dwl/KFZaYi+J0mU8MXbA4O+Lol8=
Subject key identifier: 03:CF:8B:38:B2:D5:08:E9:1D:6B:CD:C2:2D:12:10:6F:3C:96:B9:DD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191F925C9CA17D80143FEAF31D4581CCDC3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A8-LOLLVCOkda83CLRIQbzyWud0.roa
Signing time: Mon 16 Sep 2024 04:44:48 +0000
ROA not before: Mon 16 Sep 2024 04:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 31.57.144.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 05:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:25:c9:ca:17:d8:01:43:fe:af:31:d4:58:1c:cd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 16 04:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03cf8b38b2d508e91d6bcdc22d12106f3c96b9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:1c:c8:4e:bd:ef:6f:c4:e5:38:88:fc:f6:
f9:dc:ec:05:a7:2a:ff:85:16:f2:00:28:f6:df:4b:
48:6d:a8:39:71:25:0f:37:a7:03:fe:27:c0:85:44:
8a:6c:7e:90:ed:68:c3:c1:f6:fa:4c:8f:d6:53:86:
8a:30:1a:bb:f9:13:8f:42:bf:46:07:5a:00:bb:5e:
c3:98:f7:58:e0:c0:f9:3e:2d:1b:a1:c8:4f:27:33:
14:e6:44:ba:25:66:cd:c0:36:70:af:92:23:a3:ea:
7f:89:fa:07:2e:1d:80:2d:34:10:ce:87:2f:d3:a7:
48:5f:7d:c8:9b:61:84:31:56:e4:bc:ef:db:da:e8:
97:1e:d1:6e:a7:1e:34:84:e0:75:b3:57:8b:fa:fa:
ff:2c:95:77:cf:24:18:b4:d7:ed:fb:48:2b:ba:fe:
e3:10:7d:04:aa:9e:63:bb:a8:97:98:75:5a:9d:be:
84:39:57:f1:b4:3c:94:61:b5:53:df:46:d5:fe:51:
60:97:6d:bc:15:d3:3e:9c:16:6f:58:cf:d8:a4:ea:
d0:59:e7:35:37:f5:e1:50:d4:2c:0b:89:7e:a1:1b:
99:50:c8:b1:91:90:18:3b:23:d2:ce:57:85:0d:b7:
ba:d5:c7:a6:62:55:41:7c:24:e0:80:32:3a:fd:6c:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:8B:38:B2:D5:08:E9:1D:6B:CD:C2:2D:12:10:6F:3C:96:B9:DD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A8-LOLLVCOkda83CLRIQbzyWud0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.144.0/24
31.57.146.0/23
Signature Algorithm: sha256WithRSAEncryption
61:65:dc:e2:79:12:29:45:f3:cc:94:05:6a:b3:f3:94:b4:3e:
26:fc:9d:8b:a0:3c:b8:bf:53:f0:04:eb:16:df:7c:b3:30:0b:
d2:5d:76:e6:0d:85:e6:19:28:ef:71:ff:4b:9b:e6:32:69:03:
cd:a5:51:29:e0:b2:7c:00:9b:06:8c:82:01:9b:66:b8:fa:35:
a1:3e:7d:42:2f:5a:cd:14:d3:41:c0:a6:c3:33:ae:fc:68:96:
21:fe:ee:7a:f7:7f:b0:8b:ab:9e:e8:ce:41:6c:33:12:b2:5b:
e4:c6:b4:c3:75:dd:31:b8:6f:94:43:ce:ba:e9:e9:4e:30:bc:
f8:b0:04:b7:bb:13:55:3d:d4:03:db:07:44:e8:00:45:57:88:
62:12:ce:b4:e2:03:d6:10:1a:e8:ea:e7:27:7a:03:c9:b6:40:
d8:6b:91:a3:9d:0e:a1:d9:b0:fc:d4:de:6d:c4:80:29:b1:29:
2d:c5:89:5d:5b:98:71:c9:e0:b3:8b:e3:2e:10:52:3d:ef:af:
ac:15:51:c3:e8:71:f7:4d:1b:41:95:d7:6e:fd:08:02:72:8d:
a3:f7:0d:ef:25:d0:7c:19:cd:65:2f:7e:d2:6f:5c:28:84:63:
89:8b:fe:70:57:36:6c:49:f8:2c:68:2d:fa:37:e1:57:55:c1:
d2:37:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 06:56:27 2024 by rpki-client on console-fra.rpki-client.org