Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L-_tXT-EyHbjEdvVwQZexizlnA4.roa
File: L-_tXT-EyHbjEdvVwQZexizlnA4.roa (raw, json)
Hash identifier: Y28Fhd2su1Z86rZ/7bu/sx6Irxm5Uw2rBHwJxhK8J7w=
Subject key identifier: 2F:EF:ED:5D:3F:84:C8:76:E3:11:DB:D5:C1:06:5E:C6:2C:E5:9C:0E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01929C052A0F0978D74C1626C7C76D497AAE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L-_tXT-EyHbjEdvVwQZexizlnA4.roa
Signing time: Thu 17 Oct 2024 19:47:17 +0000
ROA not before: Thu 17 Oct 2024 19:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 16:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:05:2a:0f:09:78:d7:4c:16:26:c7:c7:6d:49:7a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 19:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fefed5d3f84c876e311dbd5c1065ec62ce59c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:1d:39:4d:bd:b4:92:72:20:05:3c:46:96:
ec:ce:d5:aa:21:50:22:ac:dd:25:49:23:4e:dd:16:
e9:33:61:67:6e:08:5b:c4:e3:15:ad:da:94:12:37:
8a:79:18:5b:4b:e9:53:00:ae:17:5c:45:ed:55:b9:
c0:d2:b0:a8:9a:e7:5a:1c:a4:1d:95:16:fb:43:c1:
eb:16:93:68:04:5d:b8:bd:c4:7f:51:e8:c8:c9:90:
77:93:ed:d2:ba:42:ae:c3:48:23:62:2c:d0:c4:d1:
1c:03:03:61:f8:eb:c6:4e:4c:45:ad:f2:01:92:12:
df:15:cf:de:7a:05:45:46:9c:cd:4f:3c:b1:10:32:
1a:6f:78:c5:74:fb:9f:02:cd:4a:36:ba:de:b0:52:
96:33:78:3e:0a:e0:26:dc:fc:62:7a:b9:cd:5c:1d:
29:e1:0c:f2:63:76:f6:94:c2:0a:7e:5a:34:62:c1:
c5:35:16:bd:3f:40:f6:da:03:7d:30:07:7c:60:c6:
53:5e:e8:34:42:a0:4f:74:c4:4f:b8:35:bd:f0:0a:
76:f4:b7:69:79:51:03:27:bf:75:64:49:19:90:f9:
48:82:ed:ff:e5:1d:06:9a:3b:08:b6:f6:84:d4:49:
2d:64:45:dd:ae:23:02:d5:c4:4c:aa:02:8c:9b:c6:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:ED:5D:3F:84:C8:76:E3:11:DB:D5:C1:06:5E:C6:2C:E5:9C:0E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/L-_tXT-EyHbjEdvVwQZexizlnA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.236.0/24
31.58.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fc:41:e8:a5:14:06:1b:1e:07:fd:46:48:0b:ba:2c:42:b9:
6f:b4:2e:3f:9f:9e:c8:e6:35:74:98:0a:4f:22:c7:be:2d:1f:
5e:88:41:b7:69:15:2c:f4:f0:73:54:a0:67:1b:a2:10:71:8d:
93:e9:3b:30:53:d0:3b:a6:30:c9:28:d7:39:5b:fe:c5:09:af:
2a:c7:f2:28:e2:f2:96:22:f5:70:da:2a:c2:ff:81:e7:71:fd:
2b:17:6b:46:3f:b2:4b:05:d1:b7:c8:3e:80:1e:fc:1b:07:be:
38:fd:e9:cc:06:83:69:f4:66:70:36:32:c8:a5:9c:9f:a9:8b:
a0:ba:ce:d4:b7:99:1f:27:80:2e:30:d1:9e:03:c9:e3:3d:15:
0b:1f:fd:81:ed:fb:57:1b:6f:4d:b6:ce:ed:ac:59:7f:6e:e7:
b4:40:97:69:17:f8:14:e6:8c:5e:01:8a:83:d6:7a:c3:ac:09:
d9:e7:ed:ff:01:92:73:72:d6:9b:3f:6b:c6:29:53:5b:e6:12:
52:eb:3f:fe:86:85:36:07:6f:82:9f:4a:3d:df:d2:42:2a:ec:
52:23:87:b6:3a:64:c9:03:18:1b:28:48:5b:c0:e6:aa:5a:ce:
aa:b5:34:12:6f:31:d3:2e:57:cb:d3:b9:a5:b5:e6:6b:fd:21:
f7:b3:a8:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKcBSoPCXjXTBYmx8dtSXquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE3MTk0NzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmVmZWQ1ZDNmODRjODc2ZTMxMWRiZDVjMTA2NWVjNjJjZTU5YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXEdOU29tJJyIAU8RpbsztWqIVAi
rN0lSSNO3RbpM2FnbghbxOMVrdqUEjeKeRhbS+lTAK4XXEXtVbnA0rComudaHKQd
lRb7Q8HrFpNoBF24vcR/UejIyZB3k+3SukKuw0gjYizQxNEcAwNh+OvGTkxFrfIB
khLfFc/eegVFRpzNTzyxEDIab3jFdPufAs1KNrresFKWM3g+CuAm3PxiernNXB0p
4QzyY3b2lMIKflo0YsHFNRa9P0D22gN9MAd8YMZTXug0QqBPdMRPuDW98Ap29Ldp
eVEDJ791ZEkZkPlIgu3/5R0GmjsItvaE1EktZEXdriMC1cRMqgKMm8YKRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC/v7V0/hMh24xHb1cEGXsYs5ZwOMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTC1fdFhULUV5SGJqRWR2VndRWmV4aXpsbkE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHznsAwQA
HzorMA0GCSqGSIb3DQEBCwUAA4IBAQBN/EHopRQGGx4H/UZIC7osQrlvtC4/n57I
5jV0mApPIse+LR9eiEG3aRUs9PBzVKBnG6IQcY2T6TswU9A7pjDJKNc5W/7FCa8q
x/Io4vKWIvVw2irC/4Hncf0rF2tGP7JLBdG3yD6AHvwbB744/enMBoNp9GZwNjLI
pZyfqYugus7Ut5kfJ4AuMNGeA8njPRULH/2B7ftXG29Nts7trFl/bue0QJdpF/gU
5oxeAYqD1nrDrAnZ5+3/AZJzctabP2vGKVNb5hJS6z/+hoU2B2+Cn0o939JCKuxS
I4e2OmTJAxgbKEhbwOaqWs6qtTQSbzHTLlfL07mlteZr/SH3s6hw
-----END CERTIFICATE-----
Generated at Fri Oct 25 19:19:23 2024 by rpki-client on console-fra.rpki-client.org