Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kvx45R-qfXCdPEH_tz2r9kdvbgU.roa
File: Kvx45R-qfXCdPEH_tz2r9kdvbgU.roa (raw, json)
Hash identifier: Fwf0/tJej9eqHFEKEDBhgVARtm2576BfWWQoOTDDD/A=
Subject key identifier: 2A:FC:78:E5:1F:AA:7D:70:9D:3C:41:FF:B7:3D:AB:F6:47:6F:6E:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191F925C92E7B159A4F5F61E9E59D19FC55
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kvx45R-qfXCdPEH_tz2r9kdvbgU.roa
Signing time: Mon 16 Sep 2024 04:44:48 +0000
ROA not before: Mon 16 Sep 2024 04:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.57.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 13:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:25:c9:2e:7b:15:9a:4f:5f:61:e9:e5:9d:19:fc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 16 04:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2afc78e51faa7d709d3c41ffb73dabf6476f6e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:a1:a8:41:42:7c:13:49:e4:e6:70:c6:fd:
b9:60:11:af:40:63:cc:8f:ad:f6:c7:93:85:27:46:
a6:90:0d:d0:37:fd:f8:57:14:43:26:f6:b1:86:72:
8e:2e:89:03:9f:f7:61:a8:34:f7:a1:b1:13:f3:b1:
a9:26:d5:04:2a:52:bc:ac:fc:05:47:17:a0:bd:4c:
1a:de:1d:9d:05:dd:24:bd:1b:20:98:34:0b:91:55:
c7:3d:61:f7:2c:42:38:57:6c:89:5d:ee:25:aa:7b:
9a:be:15:c0:f7:43:7a:cb:d0:d2:29:c5:a2:f7:af:
83:0c:0b:37:89:f4:b2:f9:ab:97:e3:06:28:fa:d2:
07:9b:f0:04:20:10:94:ce:9b:53:75:25:7c:e5:7f:
e9:37:71:1d:80:ea:df:74:2a:67:95:5d:a4:05:97:
09:eb:fa:dd:4f:10:f3:0f:7e:10:9c:16:6c:c5:c8:
e2:07:7a:d6:37:5a:44:da:5a:6f:17:0a:ae:be:47:
1f:6d:38:fe:e4:e7:50:8e:5f:a2:91:8d:fe:2c:c3:
7f:19:cc:a4:5b:bb:69:ec:fb:19:8e:5e:45:3e:d3:
55:02:bd:47:3d:6c:f6:d0:ec:e5:b6:60:10:44:51:
cc:38:89:2d:96:e3:41:79:56:62:96:17:75:5a:47:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:78:E5:1F:AA:7D:70:9D:3C:41:FF:B7:3D:AB:F6:47:6F:6E:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kvx45R-qfXCdPEH_tz2r9kdvbgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:bb:72:99:89:77:a4:79:70:ae:94:68:18:60:47:f3:34:fa:
6c:ce:15:42:b6:f8:0e:d6:be:33:97:62:01:c7:78:c8:45:c4:
08:30:35:f3:b4:0f:d0:5d:f2:14:c3:07:9b:7a:1c:d3:2d:47:
9f:17:67:a3:af:71:f9:21:1e:1c:53:21:ee:d2:78:68:52:c0:
bf:bc:05:68:3f:d3:74:1b:4b:94:9f:6c:12:89:35:53:d9:95:
d4:c7:1a:b7:29:74:e6:b1:b7:49:ea:6c:51:c5:d3:84:69:94:
75:d2:82:62:a2:13:75:d2:8d:a8:1e:52:13:4e:99:4c:0e:fa:
b9:7a:55:d1:68:e8:77:4b:b8:8e:a3:e1:8f:b8:45:07:ff:06:
b7:a1:59:9c:45:63:68:40:31:75:22:8d:82:5f:8c:c9:fc:fa:
df:1d:72:fc:69:10:c0:c3:e7:5b:ab:a6:b2:12:c3:b4:8e:19:
2b:da:ed:fb:3a:bd:04:c2:6d:7b:05:b1:46:0e:38:87:93:e3:
5b:80:a2:5e:ee:d4:b5:5b:d5:30:ac:6b:48:dc:95:35:4a:48:
90:08:24:32:f2:e5:5a:89:3e:dd:ec:25:b7:06:29:c1:6f:da:
1f:03:5c:f9:e7:a5:d2:5a:37:d8:65:50:39:d5:86:3b:ae:b0:
9d:a3:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 17:32:36 2024 by rpki-client on console-ams.rpki-client.org