Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Doc7Sdr8_yfb3_ZBRNeoz5MsGQg.roa
File: Doc7Sdr8_yfb3_ZBRNeoz5MsGQg.roa (raw, json)
Hash identifier: DDvOb+CmeabOv+Cy6/aIwmdcKtjQj79BUodWZNoRgno=
Subject key identifier: 0E:87:3B:49:DA:FC:FF:27:DB:DF:F6:41:44:D7:A8:CF:93:2C:19:08
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192ADD5688DA3DCD013B52B0E05CA095828
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Doc7Sdr8_yfb3_ZBRNeoz5MsGQg.roa
Signing time: Mon 21 Oct 2024 06:48:17 +0000
ROA not before: Mon 21 Oct 2024 06:48:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 10:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:d5:68:8d:a3:dc:d0:13:b5:2b:0e:05:ca:09:58:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 21 06:48:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e873b49dafcff27dbdff64144d7a8cf932c1908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:c3:5a:bf:f2:92:53:04:dd:c1:0f:21:92:
6e:6c:54:90:a4:e8:a1:99:0c:51:5b:2a:ec:04:f5:
72:bc:ce:a8:b0:ea:1d:2f:d3:96:7c:b6:51:27:f2:
f6:67:3e:c5:b8:7f:b3:9f:61:ab:bd:6e:41:13:d5:
53:4d:09:bd:ea:35:0f:e8:47:10:28:10:05:3d:6b:
d7:91:15:dd:02:88:69:ec:2d:ed:a7:8b:1f:7a:8f:
3f:c5:53:6e:ce:09:b0:29:ba:38:50:9e:c2:f6:bc:
03:26:70:9f:6d:0f:9c:58:66:0f:eb:7d:66:a3:4e:
ef:73:47:ab:a6:ea:21:f9:4a:a3:25:56:b2:33:c5:
9a:26:c9:6c:82:07:1b:0f:57:b3:ba:c2:1f:9b:38:
1b:07:f9:95:12:47:67:2c:c1:a7:68:98:da:cc:e1:
72:94:19:58:49:fc:b1:54:89:31:7c:75:21:75:6d:
fb:0a:d8:b1:e3:30:8c:56:fa:83:9a:ce:00:28:50:
7a:1f:47:61:00:7e:1f:51:77:00:57:88:fa:93:12:
5e:9a:70:29:c5:ba:dc:17:4f:d5:a1:2b:38:86:6c:
a4:5a:bb:e6:dc:80:97:8e:59:a8:4c:fc:c1:0c:7a:
5b:6e:3d:81:47:4d:b6:af:4b:b0:c7:6d:fa:33:db:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:3B:49:DA:FC:FF:27:DB:DF:F6:41:44:D7:A8:CF:93:2C:19:08
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Doc7Sdr8_yfb3_ZBRNeoz5MsGQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.58.49.0/24
31.58.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:be:c4:03:c7:0b:02:a8:ea:86:48:b9:3a:5b:68:8f:99:44:
e9:43:28:a3:9b:29:ca:61:a8:02:8a:40:7d:d6:b4:bd:2a:46:
90:cf:0a:1d:13:03:21:fc:b6:f7:e6:0f:b7:c2:58:99:45:5e:
a6:b7:c7:83:7a:8c:c2:93:e2:8a:b6:e9:b8:54:52:ee:94:34:
8f:0a:14:9a:37:c2:12:5c:14:ff:be:84:96:cd:60:cc:09:1e:
01:8d:df:84:ad:09:b0:fa:b7:18:fb:5e:ea:9c:84:a5:b4:87:
2a:28:24:9a:5d:c1:ff:9f:7d:0b:27:9c:d0:30:5a:36:5a:fc:
9d:2b:03:78:da:80:db:71:28:c0:3f:6e:72:fd:d3:25:d1:db:
61:f1:fa:eb:04:ae:cc:1f:51:8c:a3:b6:43:29:48:47:30:82:
91:cc:53:82:58:ee:db:bf:1b:da:e5:ce:dc:83:b5:e0:60:9a:
bf:95:06:bc:5d:b9:ba:1d:69:83:c9:4b:8c:e8:9f:2a:17:b4:
68:39:16:d5:a2:1f:cb:df:9f:b1:60:7e:5f:b2:c3:34:98:0d:
3a:ae:6a:6c:80:50:09:1e:9b:38:64:d1:aa:91:77:da:e5:1c:
19:6f:9c:54:2b:71:6b:18:c6:b2:4e:09:6c:ca:a3:4e:75:81:
bd:d6:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 12:49:06 2024 by rpki-client on console-ams.rpki-client.org