Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FYgkKyxqBIKe9XkIVim0kT6vrcc.roa
File: FYgkKyxqBIKe9XkIVim0kT6vrcc.roa (raw, json)
Hash identifier: /Mil2UhxgjzjfJCTYy2dRjKC6fNzdImWeuCiYjseN5g=
Subject key identifier: 15:88:24:2B:2C:6A:04:82:9E:F5:79:08:56:29:B4:91:3E:AF:AD:C7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192C984823527299357A55DA06BF525C5AA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FYgkKyxqBIKe9XkIVim0kT6vrcc.roa
Signing time: Sat 26 Oct 2024 15:49:17 +0000
ROA not before: Sat 26 Oct 2024 15:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.57.196.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 10:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:84:82:35:27:29:93:57:a5:5d:a0:6b:f5:25:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 26 15:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1588242b2c6a04829ef579085629b4913eafadc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:15:85:43:86:41:5e:68:48:d4:b5:f5:d8:
0e:93:a3:78:da:28:c2:59:c0:ec:c7:de:1d:9d:5a:
b8:66:b9:72:ee:95:7f:58:ee:f6:f5:6c:14:35:a2:
c0:e7:f6:23:e2:9a:75:83:10:ac:33:65:76:7e:32:
5f:db:26:ec:8c:78:e8:59:d2:6a:79:b3:7c:13:cb:
de:e9:2e:8f:5d:26:57:2d:e7:08:92:d5:40:72:d1:
5e:47:76:52:01:20:a5:ab:21:fa:94:0c:fc:19:6a:
fc:fa:7c:ac:3e:59:f3:99:51:55:08:a0:e3:83:c5:
84:2d:73:b2:dd:0a:a9:8e:dc:f7:cb:2b:95:a8:60:
44:be:f8:e2:ae:fa:94:3c:f9:0d:7f:4e:f6:4f:5e:
ce:12:67:96:ee:ae:6b:e9:11:10:cf:dc:d1:23:a7:
d4:d2:37:84:88:2e:6e:d7:71:9a:32:e3:3c:f4:3e:
a0:a5:a8:6a:b4:2e:c5:10:08:98:6a:ef:b8:a3:47:
d6:8c:b8:c1:85:ee:27:20:39:95:71:59:a1:f7:eb:
61:1a:5b:29:62:2a:92:04:87:18:34:52:0a:23:e1:
00:bb:8d:e1:ad:24:23:fe:1e:c1:e7:dc:e5:54:f8:
6d:c8:6a:5f:51:98:46:03:f7:ae:3f:b9:0d:80:6a:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:24:2B:2C:6A:04:82:9E:F5:79:08:56:29:B4:91:3E:AF:AD:C7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FYgkKyxqBIKe9XkIVim0kT6vrcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.57.196.0/23
31.57.238.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f2:a8:be:7b:29:75:30:65:76:f7:ff:be:f5:3a:f6:46:96:
d7:d8:d3:a9:2b:64:e3:ec:45:62:2d:8e:d6:ae:b7:eb:b7:8b:
f8:15:6e:49:b2:bd:f0:b6:5e:e7:b4:34:00:f1:8e:fe:d8:7d:
bc:b0:eb:07:fa:78:b4:93:98:bd:83:b1:de:bc:68:34:c2:07:
9e:68:c1:8f:e6:de:4c:d2:42:b8:37:c0:e4:fe:9a:1a:88:56:
a8:cf:26:81:76:98:0c:f1:9b:03:ac:52:a5:ba:e1:b6:53:8c:
fc:80:2f:16:40:ba:77:35:0d:87:67:c4:60:25:75:77:2a:38:
0f:fb:ca:97:71:26:11:5b:a3:62:45:74:1e:f0:4c:bf:b1:95:
91:c4:fd:00:78:8a:86:8f:3d:d4:b4:a0:1b:b8:6f:3b:75:cb:
c4:f7:57:c2:67:c7:d4:cd:1f:5f:78:81:50:cc:fd:3e:33:cb:
37:80:d4:e9:c3:f9:20:34:54:b1:4a:74:34:b9:69:63:af:7c:
23:52:54:f5:63:b2:55:79:31:28:82:c9:eb:b8:e2:56:12:20:
4b:8e:3c:36:b2:93:ea:61:da:4c:a5:98:42:13:42:14:a8:e8:
ea:d7:c9:35:48:80:63:8a:6f:e8:3c:e3:e1:11:34:6c:0e:c2:
69:be:18:82
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZLJhII1JymTV6VdoGv1JcWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDI2MTU0OTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTg4MjQyYjJjNmEwNDgyOWVmNTc5MDg1NjI5YjQ5MTNlYWZhZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo08VhUOGQV5oSNS19dgOk6N42ijC
WcDsx94dnVq4Zrly7pV/WO729WwUNaLA5/Yj4pp1gxCsM2V2fjJf2ybsjHjoWdJq
ebN8E8ve6S6PXSZXLecIktVActFeR3ZSASClqyH6lAz8GWr8+nysPlnzmVFVCKDj
g8WELXOy3Qqpjtz3yyuVqGBEvvjirvqUPPkNf072T17OEmeW7q5r6REQz9zRI6fU
0jeEiC5u13GaMuM89D6gpahqtC7FEAiYau+4o0fWjLjBhe4nIDmVcVmh9+thGlsp
YiqSBIcYNFIKI+EAu43hrSQj/h7B59zlVPhtyGpfUZhGA/euP7kNgGpJFQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBWIJCssagSCnvV5CFYptJE+r63HMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRllna0t5eHFCSUtlOVhrSVZpbTBrVDZ2cmNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHzg0AwQB
HznEAwQAHznuMA0GCSqGSIb3DQEBCwUAA4IBAQC78qi+eyl1MGV29/++9Tr2RpbX
2NOpK2Tj7EViLY7Wrrfrt4v4FW5Jsr3wtl7ntDQA8Y7+2H28sOsH+ni0k5i9g7He
vGg0wgeeaMGP5t5M0kK4N8Dk/poaiFaozyaBdpgM8ZsDrFKluuG2U4z8gC8WQLp3
NQ2HZ8RgJXV3KjgP+8qXcSYRW6NiRXQe8Ey/sZWRxP0AeIqGjz3UtKAbuG87dcvE
91fCZ8fUzR9feIFQzP0+M8s3gNTpw/kgNFSxSnQ0uWljr3wjUlT1Y7JVeTEogsnr
uOJWEiBLjjw2spPqYdpMpZhCE0IUqOjq18k1SIBjim/oPOPhETRsDsJpvhiC
-----END CERTIFICATE-----
Generated at Tue Oct 29 14:33:54 2024 by rpki-client on console-ams.rpki-client.org