Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FlnmSL9oliQ_EzKdVDya1V3Uz9A.roa
File: FlnmSL9oliQ_EzKdVDya1V3Uz9A.roa (raw, json)
Hash identifier: wsQH91iB1GORN8etT6HYJpmoAIykMW9kCtVo0tqoQ1g=
Subject key identifier: 16:59:E6:48:BF:68:96:24:3F:13:32:9D:54:3C:9A:D5:5D:D4:CF:D0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192959DFD15E8E5A5D1E868D2586D9CEA00
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FlnmSL9oliQ_EzKdVDya1V3Uz9A.roa
Signing time: Wed 16 Oct 2024 13:56:51 +0000
ROA not before: Wed 16 Oct 2024 13:56:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 19:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:9d:fd:15:e8:e5:a5:d1:e8:68:d2:58:6d:9c:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 13:56:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1659e648bf6896243f13329d543c9ad55dd4cfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:2d:4f:67:36:51:0f:2c:24:75:7f:14:f1:
39:bc:a4:1d:e8:59:35:1c:f9:63:2b:7a:a9:5a:02:
b3:89:5b:ef:0a:2b:06:14:58:89:82:f8:50:72:36:
18:d8:05:38:4c:22:f3:d7:6a:bf:2c:38:af:73:35:
f8:33:8f:99:99:5b:b5:88:32:5d:aa:bd:b3:fb:50:
b1:4e:70:7e:28:0d:4d:4b:a7:4f:1c:9a:c6:bf:47:
4e:ac:5a:42:3d:78:16:c5:f2:d9:95:60:68:18:0a:
8b:64:cd:5f:f0:3b:95:ec:78:f3:4d:39:13:fd:e3:
4c:78:fd:69:d6:c1:71:08:d5:72:43:b5:a4:1d:72:
be:65:6d:76:97:95:65:85:43:59:dc:aa:cf:e6:38:
27:84:d1:1c:bc:23:f5:d6:ff:4f:40:f6:53:4c:73:
a5:1a:9e:e6:86:69:40:7d:08:72:65:fd:bb:22:fe:
b7:20:20:12:68:e6:e2:65:7a:3b:50:8f:b1:b2:92:
2c:82:92:88:e1:6d:b1:87:41:fe:17:0d:9e:66:7e:
94:6e:21:6e:a0:46:78:f6:63:b0:8a:4e:30:7f:31:
09:f1:60:5d:4a:cd:a5:38:98:00:e2:1e:eb:3d:14:
17:a3:96:be:f9:58:15:06:0b:14:a9:31:65:69:14:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:59:E6:48:BF:68:96:24:3F:13:32:9D:54:3C:9A:D5:5D:D4:CF:D0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FlnmSL9oliQ_EzKdVDya1V3Uz9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.153.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
Signature Algorithm: sha256WithRSAEncryption
3e:c2:71:9c:9f:96:9b:ea:e4:4f:40:e7:ae:c1:e0:29:5c:69:
54:31:8f:bd:7c:a0:5a:00:53:76:24:f2:77:58:7d:0f:5b:46:
08:ee:b7:91:43:19:5c:94:f9:65:d1:42:1f:4c:55:ba:ba:44:
af:aa:e8:f0:d1:8d:93:50:64:1a:9e:4c:ec:e1:ec:e3:2b:72:
dc:37:31:04:fc:75:f4:f6:cc:c8:38:44:f7:68:3c:97:38:b6:
9a:dc:af:e9:3b:52:e0:d7:26:5d:b8:a4:98:c5:55:11:fd:dc:
ed:2b:32:dd:27:72:9a:cb:47:bb:02:d8:92:56:b2:7d:ae:c4:
7c:0e:8f:c5:f7:b4:08:4c:7c:a0:71:e7:63:25:b1:4c:85:07:
55:c6:39:55:e6:78:2e:75:cb:e3:d0:be:94:a1:90:6f:9e:c6:
e5:68:04:b5:5f:6e:67:ad:98:1f:8c:7e:43:30:18:57:f4:ed:
27:82:aa:cc:73:3b:7e:fb:c2:71:db:b7:91:71:6b:93:be:ec:
dd:16:f1:cf:e3:3d:48:dc:3c:e7:25:49:8f:46:e4:73:61:09:
32:4b:55:a2:34:92:39:80:ec:69:ad:25:4d:d4:f1:ac:29:ca:
35:5c:c8:41:bf:41:dd:0f:21:7b:77:67:e4:d7:67:34:8a:2d:
de:09:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:10 2024 by rpki-client on console-fra.rpki-client.org