Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ACcKwrjgMgmpBZPaLr6h9fVOTiQ.roa
File: ACcKwrjgMgmpBZPaLr6h9fVOTiQ.roa (raw, json)
Hash identifier: Gn4wsCavk2vyPm6uSkyyxRrRRsqir+HXoB++AmbPN+g=
Subject key identifier: 00:27:0A:C2:B8:E0:32:09:A9:05:93:DA:2E:BE:A1:F5:F5:4E:4E:24
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01930C291F29EF6349D6F2D89B7122FC10B9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ACcKwrjgMgmpBZPaLr6h9fVOTiQ.roa
Signing time: Fri 08 Nov 2024 14:24:01 +0000
ROA not before: Fri 08 Nov 2024 14:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214240
IP address blocks: 31.57.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 12:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:29:1f:29:ef:63:49:d6:f2:d8:9b:71:22:fc:10:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 8 14:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00270ac2b8e03209a90593da2ebea1f5f54e4e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:b4:f4:66:1a:f3:36:1f:4b:c8:dd:a5:26:
37:c5:9b:6b:26:52:b7:0e:19:86:03:37:e0:38:80:
90:af:0b:68:df:94:df:74:b4:a6:ca:89:db:5a:a9:
2c:cc:d7:f2:f1:7d:b0:96:59:68:f6:65:37:73:95:
c1:19:25:67:13:07:37:70:29:fe:14:db:f1:ff:0a:
69:b6:21:23:e7:11:ef:b4:38:e6:70:75:4c:43:cd:
3d:86:61:4e:ff:0d:f0:a2:b7:0d:43:d7:e9:39:ef:
c0:3b:57:e3:a9:d6:de:cc:ef:1a:55:4f:3a:da:6b:
7f:52:65:f0:69:b8:0c:95:98:1c:b6:72:37:59:ed:
86:2c:b6:3c:0d:72:97:03:a0:91:f6:1e:ab:03:d5:
37:10:69:1c:d3:89:a1:46:f8:6d:72:26:da:05:e0:
29:2f:7a:db:df:b9:47:23:04:f6:6f:d8:e1:79:80:
b1:2f:31:14:a7:8d:66:62:09:b1:e5:fe:2c:e9:ad:
37:6c:8d:29:ba:64:36:2d:59:e8:8f:6d:48:bd:12:
b5:60:bb:4a:9a:a3:dc:74:32:ee:82:a3:5f:5c:67:
5c:19:3a:b4:66:df:7d:7c:1d:c9:e0:bd:48:6b:b3:
f7:7b:ad:2c:a8:ef:ff:60:5e:bb:ff:21:23:23:cb:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:27:0A:C2:B8:E0:32:09:A9:05:93:DA:2E:BE:A1:F5:F5:4E:4E:24
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ACcKwrjgMgmpBZPaLr6h9fVOTiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:59:8e:4a:e1:32:4d:f4:4a:ba:c7:bb:ef:0c:9d:ae:c8:fa:
bf:c4:71:ee:11:b6:f8:3e:a4:31:a5:f9:a1:22:0a:4d:eb:49:
17:94:4c:ed:27:7e:7d:88:08:26:e7:6a:22:c9:38:fa:95:5c:
58:a1:59:62:25:42:ed:81:94:ff:9b:7b:af:ca:d6:e3:b0:dc:
ab:ee:e0:4d:40:81:64:6a:18:dd:cc:e5:16:a3:12:79:2b:31:
03:ac:0c:5e:f6:f4:3d:a5:2c:cf:7f:ee:d6:4e:47:a4:76:36:
8c:46:19:61:4f:7d:93:23:9c:dc:c4:79:ca:69:65:16:68:43:
2e:ab:20:15:ed:44:2a:5e:14:7d:13:56:9b:a7:c6:38:67:ed:
27:7f:bc:a6:ce:4e:a5:37:f3:66:44:e1:85:5f:b9:37:59:07:
7c:50:31:01:82:03:80:8c:99:1f:ae:6e:22:8d:84:ca:3d:d5:
a9:d4:be:50:79:55:30:f8:9a:39:50:36:d9:a0:cf:8f:8c:cd:
4d:f6:68:69:fa:cb:cd:d6:e1:46:3a:93:f9:a4:59:71:e0:4c:
f8:47:98:50:2c:77:f3:e5:e0:96:9d:35:73:4b:c3:78:0e:27:
4a:f7:31:0e:77:95:d5:5c:f4:1a:ac:f6:54:4d:b5:4e:c8:23:
a6:0e:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 17:00:40 2024 by rpki-client on console-fra.rpki-client.org