Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ga19QeyLYNUtaocMt90Iwe2wgjA.roa
File: Ga19QeyLYNUtaocMt90Iwe2wgjA.roa (raw, json)
Hash identifier: a05YL/6w5oi4bVean88cMDc2uzzVERfNKfk6gu3IGJU=
Subject key identifier: 19:AD:7D:41:EC:8B:60:D5:2D:6A:87:0C:B7:DD:08:C1:ED:B0:82:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192BF106A84DB963667DE4C340F50499A4C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ga19QeyLYNUtaocMt90Iwe2wgjA.roa
Signing time: Thu 24 Oct 2024 15:06:17 +0000
ROA not before: Thu 24 Oct 2024 15:06:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 06:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bf:10:6a:84:db:96:36:67:de:4c:34:0f:50:49:9a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 24 15:06:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19ad7d41ec8b60d52d6a870cb7dd08c1edb08230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:fd:fd:e4:02:d5:33:2b:2e:70:a8:ac:ba:
b8:b7:90:9d:78:b3:51:dc:f5:3e:b0:6a:48:f4:57:
59:a1:f9:23:13:b5:57:98:8a:d1:22:82:48:d8:b0:
a7:66:aa:40:bc:e5:a5:e5:3f:60:2c:55:18:49:7c:
5b:6d:76:db:3e:f0:08:7e:2d:5f:71:08:83:fb:91:
75:e4:8b:b9:11:7a:4e:6c:6c:e5:93:33:34:09:4f:
ca:48:bd:7f:ab:e7:25:82:93:31:00:25:57:61:49:
dd:50:2e:a0:c8:c4:b9:11:2a:eb:35:c3:2a:47:e2:
01:18:2e:7a:98:9e:91:b7:0f:81:84:72:24:da:91:
b4:73:79:c4:24:91:f0:9f:39:0e:72:55:76:5e:79:
15:34:04:5a:84:fe:38:a8:a1:fb:b1:b7:c5:38:4d:
c8:fb:81:80:92:9c:48:e7:ca:9a:17:2b:e5:65:67:
8e:82:3e:29:01:e9:16:22:bc:7c:59:3a:e5:f4:c1:
e9:ff:6b:44:90:35:3d:a6:f6:54:f3:88:19:72:71:
50:34:0c:b8:09:6c:0f:83:70:bb:0a:2b:d6:95:cb:
48:60:59:4f:13:7c:83:d4:cb:55:e0:1e:6c:11:b4:
ac:9e:a0:a3:33:c3:b5:e4:7f:e2:05:08:63:83:ea:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:7D:41:EC:8B:60:D5:2D:6A:87:0C:B7:DD:08:C1:ED:B0:82:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ga19QeyLYNUtaocMt90Iwe2wgjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.58.49.0/24
31.58.59.0/24
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.192.0/22
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:4d:f1:c9:30:77:ff:c3:4f:ee:ad:79:de:be:f5:1a:8b:ec:
2e:be:8a:88:2c:d2:43:90:2a:d2:c3:4d:f6:f2:34:80:de:f7:
c9:ff:2a:b4:b8:d3:94:24:ec:19:e8:24:3b:5f:6c:be:bc:8d:
2a:02:32:50:b9:a9:b9:f6:cf:6f:5f:a2:07:d7:25:b5:1e:d1:
f6:d9:19:5f:39:f7:30:c8:98:2d:f0:34:ab:06:83:8f:da:dd:
fb:8b:d1:9f:e9:0b:75:6e:14:e2:35:e3:46:ee:13:ce:13:9a:
ea:fc:eb:dd:5a:1f:6c:32:65:03:48:34:13:4f:b5:75:cc:b5:
30:ec:5d:4f:e6:e0:50:3d:d3:e1:36:08:f6:57:96:c7:63:d4:
4c:c5:ce:73:95:fc:cb:eb:74:75:ee:8b:3f:49:78:f9:63:56:
79:a7:22:54:ad:54:89:d0:d0:d9:3c:6f:77:a4:94:0a:94:3b:
87:f0:11:63:2f:74:2d:c2:c1:7d:b7:eb:1a:8f:ae:f3:c2:bb:
50:e7:48:65:44:fb:eb:a3:19:7f:d6:e9:e8:34:99:f6:75:9c:
80:ae:fa:d6:2d:0c:62:04:3c:26:f8:da:f7:b0:c8:6d:8a:60:
3a:45:dc:df:70:16:d1:f4:fb:74:d6:58:40:c4:ba:80:1a:57:
7a:2f:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 08:20:33 2024 by rpki-client on console-fra.rpki-client.org