Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JaYrSPNEVL-Ag1JBTKuLuWlm0AU.roa
File: JaYrSPNEVL-Ag1JBTKuLuWlm0AU.roa (raw, json)
Hash identifier: w7pON4AXm4oYzR9ESnmL9lwm9+4rEtHjv30fl7nAy5g=
Subject key identifier: 25:A6:2B:48:F3:44:54:BF:80:83:52:41:4C:AB:8B:B9:69:66:D0:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0190E6277843E1990226B376250139D09A34
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JaYrSPNEVL-Ag1JBTKuLuWlm0AU.roa
Signing time: Wed 24 Jul 2024 19:11:04 +0000
ROA not before: Wed 24 Jul 2024 19:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 31.57.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 10:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e6:27:78:43:e1:99:02:26:b3:76:25:01:39:d0:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 19:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25a62b48f34454bf808352414cab8bb96966d005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:3c:30:0a:ba:20:55:e5:ca:95:e4:33:36:
03:15:c3:f0:bf:a8:55:6d:22:3e:0e:6e:bf:a8:92:
43:ae:d5:d0:8c:06:2a:6a:06:94:1e:e1:8d:7f:43:
19:c5:29:2e:e2:0f:b2:91:59:3b:ec:36:2b:08:74:
af:73:4d:18:84:4f:6d:af:5d:7a:dd:20:f7:1c:04:
12:40:89:16:56:d5:d7:b9:67:0d:df:c4:03:9b:e2:
2d:9f:89:19:72:7d:ab:50:21:d2:a0:75:4f:74:d8:
dc:c7:8d:d3:e2:a0:fe:59:16:9e:bd:0f:53:b8:d7:
88:95:eb:23:e5:ac:e3:13:11:97:0d:db:a7:7d:0c:
f0:ff:2b:c8:21:3d:b7:a5:ee:5d:30:e4:f4:7a:ab:
ae:a3:96:f4:d3:ee:42:36:49:5b:2b:ab:f1:6c:f3:
56:b8:ce:5b:a6:13:f4:43:9d:ef:07:3b:ea:42:25:
e8:f9:9b:cc:c3:de:4b:5f:c4:81:19:5a:18:8f:2a:
4e:03:71:65:5e:2f:e0:31:46:cd:3a:72:41:19:45:
74:41:a1:a5:0f:49:3b:d0:39:29:bb:d3:b9:38:c4:
6b:d5:71:bd:e1:a0:dd:b3:2a:67:84:62:25:8a:90:
64:1f:5b:a1:7d:0c:88:ff:ec:7d:80:97:f1:f3:d3:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:2B:48:F3:44:54:BF:80:83:52:41:4C:AB:8B:B9:69:66:D0:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JaYrSPNEVL-Ag1JBTKuLuWlm0AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.128.0/17
Signature Algorithm: sha256WithRSAEncryption
08:92:71:1c:2c:1d:8c:fd:30:97:a1:76:bb:3c:ce:41:51:21:
87:00:06:4c:13:8e:d4:88:d8:35:94:10:95:e0:3d:28:a9:98:
80:47:8b:8a:3a:b9:5c:72:53:d4:c7:72:78:29:a9:3e:51:d9:
59:95:33:53:34:18:ea:e1:fe:e7:e8:7b:b7:b6:6d:13:ba:07:
8c:bb:14:38:a8:81:92:15:5a:70:1a:a3:c6:3b:50:74:99:b7:
72:a3:74:63:7c:09:f4:b8:65:87:7f:b5:71:b1:bb:20:11:40:
1b:ea:18:de:e0:d3:e4:d5:44:cd:d8:5e:b9:f7:1e:60:a3:b9:
be:b9:8a:b2:45:15:e1:41:00:3c:b8:d9:26:f2:be:24:68:ed:
02:b9:1b:bd:17:b9:c5:a3:7d:5f:d4:1d:6d:8f:6b:13:d2:24:
ac:5d:a4:a1:ba:93:25:07:86:28:37:5b:94:ac:07:29:e3:f6:
dc:fe:ad:d0:c1:37:d2:45:95:4a:10:4d:be:8f:a3:7c:57:a4:
42:93:6c:c4:75:17:62:41:71:de:c9:c0:60:54:5b:21:00:71:
51:81:f3:35:58:50:e7:21:58:9f:5f:14:9b:c1:78:91:62:33:
64:c5:82:b3:fb:cc:69:62:fa:4e:06:af:9d:d8:10:4a:f4:4e:
e2:ef:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:14 2024 by rpki-client on console-fra.rpki-client.org