Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gn_T6zBT_DS1XKxjU6z0ZurRpB4.roa
File: Gn_T6zBT_DS1XKxjU6z0ZurRpB4.roa (raw, json)
Hash identifier: N57CdYRE01UR7aqtjUZHnHhOJYJREgspQi4zSD2w84E=
Subject key identifier: 1A:7F:D3:EB:30:53:FC:34:B5:5C:AC:63:53:AC:F4:66:EA:D1:A4:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192D1F6FAE808FE635676FF3F88AEB19BC8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gn_T6zBT_DS1XKxjU6z0ZurRpB4.roa
Signing time: Mon 28 Oct 2024 07:11:17 +0000
ROA not before: Mon 28 Oct 2024 07:11:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 17:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:f6:fa:e8:08:fe:63:56:76:ff:3f:88:ae:b1:9b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 28 07:11:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a7fd3eb3053fc34b55cac6353acf466ead1a41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:53:c0:eb:58:05:30:0a:13:51:e3:ea:90:
e8:75:dc:47:32:70:57:74:e9:db:38:79:60:3c:01:
0f:2f:d7:a7:fe:c5:9c:01:f1:80:5d:5a:a6:a2:72:
63:4a:ab:49:b5:da:72:48:5a:56:38:24:96:4b:0c:
8e:cc:f8:87:e6:a1:16:9b:20:b6:ea:8f:65:41:20:
1d:f5:ef:fe:8b:e7:e6:86:2d:05:4d:e2:f6:6c:8e:
eb:9d:1f:2e:b2:c5:df:7b:f7:86:5e:fa:a3:b8:28:
f7:de:27:3e:cf:4d:cc:68:2a:7b:a4:89:e9:dd:ec:
5b:a2:3a:d8:7f:e3:a7:a7:68:ce:11:49:e3:fe:53:
4c:65:59:11:62:68:a2:23:9e:45:3b:d1:a2:66:b3:
83:1e:03:ab:9a:af:2a:e9:7c:e9:9a:f7:16:e2:e7:
5d:ca:40:20:2c:02:71:34:55:ff:ff:04:e7:34:d6:
d1:ad:2d:4e:80:07:93:8b:e9:c7:55:79:0e:26:26:
85:4c:bc:8b:bf:6c:64:68:78:5d:fe:e1:77:e3:40:
40:b5:06:5b:c3:26:a2:04:32:61:82:e5:1e:99:7c:
8d:81:c4:d7:0f:a9:2b:cb:72:47:30:0f:2c:77:19:
30:5d:31:4a:57:27:01:6d:36:56:36:ad:70:74:9e:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:D3:EB:30:53:FC:34:B5:5C:AC:63:53:AC:F4:66:EA:D1:A4:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gn_T6zBT_DS1XKxjU6z0ZurRpB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d1:64:6e:a6:95:43:a6:5a:63:7a:54:a2:96:73:fb:e8:af:
2f:56:f4:67:7c:8b:c7:1d:36:ea:f9:4c:39:7e:0f:d8:9f:79:
02:75:1f:29:8f:5f:c1:35:12:fd:98:90:94:75:43:07:db:c6:
34:0c:e9:44:47:4a:4a:94:2a:e2:05:5d:66:0c:c3:3b:4f:f2:
3e:51:c4:81:dc:62:b3:dd:02:c3:80:d0:ed:a6:15:6c:d2:f6:
7c:ed:d2:a4:5e:d2:58:8e:5e:1e:78:d2:b6:f2:7f:74:a0:67:
f9:5c:05:21:47:4d:ad:a4:33:b7:7c:2c:55:d1:a5:b7:42:27:
51:98:f1:f4:e9:45:fd:d8:24:b0:2e:3d:83:91:31:30:5b:7a:
7f:ca:3c:0f:71:61:15:64:58:96:92:6e:d8:9d:74:6a:77:0a:
55:4d:9e:09:23:f4:06:22:ef:00:1f:fd:ea:33:2d:74:c3:22:
46:3b:82:cb:6c:34:62:da:1e:3b:e9:f5:4d:0d:c0:65:ff:7b:
5e:4d:4b:0b:3c:0e:a8:00:58:45:31:6f:01:65:ee:08:ef:bc:
9c:53:29:56:2e:81:17:04:15:9d:56:e2:75:bb:e3:51:f7:05:
1a:14:ff:94:8e:f3:b4:ec:f9:40:2e:dd:3a:dc:92:27:bd:70:
4d:df:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 21:35:35 2024 by rpki-client on console-fra.rpki-client.org