Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LRMC2iwDBTqGbeyC3GDN5Yckl64.roa
File: LRMC2iwDBTqGbeyC3GDN5Yckl64.roa (raw, json)
Hash identifier: wFDrf6w3fN8NdxG3slSksQEfH1rFxVQEqSnb4ern/KQ=
Subject key identifier: 2D:13:02:DA:2C:03:05:3A:86:6D:EC:82:DC:60:CD:E5:87:24:97:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192EBBB1EFC9481A013D2A3682B8A017C3F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LRMC2iwDBTqGbeyC3GDN5Yckl64.roa
Signing time: Sat 02 Nov 2024 07:16:01 +0000
ROA not before: Sat 02 Nov 2024 07:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.186.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.58.17.0/24 maxlen: 24
31.58.25.0/24 maxlen: 24
31.58.27.0/24 maxlen: 24
31.58.31.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
31.59.16.0/24 maxlen: 24
31.59.17.0/24 maxlen: 24
31.59.23.0/24 maxlen: 24
31.59.26.0/24 maxlen: 24
31.59.31.0/24 maxlen: 24
31.59.32.0/24 maxlen: 24
31.59.34.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 17:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:bb:1e:fc:94:81:a0:13:d2:a3:68:2b:8a:01:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 07:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d1302da2c03053a866dec82dc60cde5872497ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:b0:80:5a:70:15:6a:f2:9a:2e:fa:c2:23:
c4:4c:a4:15:b0:26:3a:d2:4b:f4:bf:fb:5a:7a:eb:
ad:fa:06:8e:8d:7c:7a:1a:ad:cc:4c:57:7b:10:c1:
7b:72:05:13:06:61:3f:ee:80:95:16:e7:a6:79:c3:
7c:e4:fb:c8:ca:7b:57:1a:db:97:f7:d6:eb:39:83:
b1:9e:46:6a:48:a3:44:f9:86:7f:6a:4a:a0:3e:e9:
e4:34:16:5a:75:73:39:9a:72:ce:dd:64:e1:ea:f5:
09:5d:a7:28:1a:34:8a:6b:34:71:80:65:9a:fa:11:
12:30:58:06:f0:47:d3:f7:4e:b1:de:8b:e9:fd:11:
64:64:72:8a:49:44:a0:c7:79:28:61:ec:f9:d2:9b:
0b:18:53:7b:9c:8b:d0:d4:dc:0b:ba:76:38:4e:f4:
44:e9:7e:9a:61:12:83:69:4b:ed:e8:96:76:27:d7:
83:3f:94:3e:73:f0:6d:d6:ca:af:ac:9f:a8:f5:99:
8a:7d:b5:cf:9b:31:ea:2c:8b:1f:1a:36:e8:40:eb:
0a:e1:ac:c2:4f:c0:10:00:01:ba:1b:b5:26:5b:e9:
33:43:94:2d:f7:5e:d5:85:d6:e7:04:91:ab:d9:d0:
39:37:66:f5:e1:29:25:35:83:6b:49:f9:1e:7e:a4:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:02:DA:2C:03:05:3A:86:6D:EC:82:DC:60:CD:E5:87:24:97:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LRMC2iwDBTqGbeyC3GDN5Yckl64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.64.0/24
31.56.160.0/21
31.57.184.0/22
31.57.202.0/23
31.58.17.0/24
31.58.25.0/24
31.58.27.0/24
31.58.31.0/24
31.59.12.0/24
31.59.16.0/23
31.59.23.0/24
31.59.26.0/24
31.59.31.0-31.59.32.255
31.59.34.0/24
31.59.116.0/22
Signature Algorithm: sha256WithRSAEncryption
16:54:70:49:3c:4e:0c:14:d6:24:2b:8a:8c:25:7c:d4:51:8c:
d3:2e:c6:84:d7:a0:1c:dd:71:45:44:5a:dc:94:95:f8:10:c6:
48:b3:5f:b3:bf:c6:26:64:38:d2:b2:88:f2:7b:d2:84:f9:d8:
df:80:f2:fe:57:e0:15:17:dd:f0:40:ca:3d:6c:2e:3b:fd:55:
d3:15:eb:45:cc:aa:e4:3a:d4:9b:ea:ef:30:d7:10:d3:f2:f0:
f0:85:3b:c7:b0:63:9e:4b:f6:0f:ab:42:ac:99:86:55:3e:79:
29:33:b6:10:92:58:2e:67:45:e4:d6:b3:87:d9:75:56:e5:2c:
ad:90:6e:a8:f8:67:a5:bc:e1:68:ea:7f:47:0a:f0:f4:01:47:
ef:93:2c:7b:d7:bb:79:ad:9c:19:ad:31:2b:55:0e:6d:6d:35:
3a:2c:73:51:53:4a:92:44:80:5a:55:2e:53:54:39:7a:39:09:
4a:d0:d5:9b:d5:1d:4c:17:e0:9d:79:93:52:e8:b2:07:71:78:
46:fc:0c:a8:fd:7e:8d:84:a8:12:db:cb:98:2d:4f:52:de:d2:
51:32:1b:97:ec:f0:37:50:5e:a1:a2:d1:3e:71:ef:78:77:f8:
f4:7a:15:de:b7:d2:aa:20:a9:19:16:76:e0:62:1f:ca:1b:7a:
50:98:e0:52
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZLrux78lIGgE9KjaCuKAXw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTAyMDcxNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDEzMDJkYTJjMDMwNTNhODY2ZGVjODJkYzYwY2RlNTg3MjQ5N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvqwgFpwFWrymi76wiPETKQVsCY6
0kv0v/taeuut+gaOjXx6Gq3MTFd7EMF7cgUTBmE/7oCVFuemecN85PvIyntXGtuX
99brOYOxnkZqSKNE+YZ/akqgPunkNBZadXM5mnLO3WTh6vUJXacoGjSKazRxgGWa
+hESMFgG8EfT906x3ovp/RFkZHKKSUSgx3koYez50psLGFN7nIvQ1NwLunY4TvRE
6X6aYRKDaUvt6JZ2J9eDP5Q+c/Bt1sqvrJ+o9ZmKfbXPmzHqLIsfGjboQOsK4azC
T8AQAAG6G7UmW+kzQ5Qt917VhdbnBJGr2dA5N2b14SklNYNrSfkefqR3AQIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFC0TAtosAwU6hm3sgtxgzeWHJJeuMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTFJNQzJpd0RCVHFHYmV5QzNHRE41WWNrbDY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAB84IQME
AB84QAMEAx84oAMEAh85uAMEAR85ygMEAB86EQMEAB86GQMEAB86GwMEAB86HwME
AB87DAMEAR87EAMEAB87FwMEAB87GjAMAwQAHzsfAwQAHzsgAwQAHzsiAwQCHzt0
MA0GCSqGSIb3DQEBCwUAA4IBAQAWVHBJPE4MFNYkK4qMJXzUUYzTLsaE16Ac3XFF
RFrclJX4EMZIs1+zv8YmZDjSsojye9KE+djfgPL+V+AVF93wQMo9bC47/VXTFetF
zKrkOtSb6u8w1xDT8vDwhTvHsGOeS/YPq0KsmYZVPnkpM7YQklguZ0Xk1rOH2XVW
5SytkG6o+GelvOFo6n9HCvD0AUfvkyx717t5rZwZrTErVQ5tbTU6LHNRU0qSRIBa
VS5TVDl6OQlK0NWb1R1MF+CdeZNS6LIHcXhG/Ayo/X6NhKgS28uYLU9S3tJRMhuX
7PA3UF6hotE+ce94d/j0ehXet9KqIKkZFnbgYh/KG3pQmOBS
-----END CERTIFICATE-----
Generated at Mon Nov 18 20:59:20 2024 by rpki-client on console-fra.rpki-client.org