Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M5VdOt8nUgN4I1GXape52GKq7Jw.roa
File: M5VdOt8nUgN4I1GXape52GKq7Jw.roa (raw, json)
Hash identifier: MFgsFSNp4v6QFnwaDR8KlV84D8JXubRLfKv7ew+XaFg=
Subject key identifier: 33:95:5D:3A:DF:27:52:03:78:23:51:97:6A:97:B9:D8:62:AA:EC:9C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019306EDB44AF5AD19C2F7F09788B08E4024
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M5VdOt8nUgN4I1GXape52GKq7Jw.roa
Signing time: Thu 07 Nov 2024 14:01:01 +0000
ROA not before: Thu 07 Nov 2024 14:01:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.57.246.0/23 maxlen: 23
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.59.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 17 Nov 2024 15:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:ed:b4:4a:f5:ad:19:c2:f7:f0:97:88:b0:8e:40:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 14:01:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33955d3adf275203782351976a97b9d862aaec9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:c5:5b:b2:43:1d:72:a8:62:98:e5:4f:d6:
15:50:47:19:84:f5:25:ae:40:e4:48:d8:c8:39:6f:
1e:a5:d7:10:b3:c8:1b:01:78:f9:af:49:20:43:18:
01:b4:1c:ef:c2:f8:9f:38:18:c1:d0:c5:0d:93:3d:
3b:76:e6:06:6a:b7:8e:f2:f0:99:55:33:e5:63:ab:
5a:a8:5d:7c:52:97:50:3c:c8:db:52:c3:4d:a3:69:
14:3f:c4:e1:85:c9:09:28:7c:9e:bb:7a:e4:f5:10:
6f:97:eb:0a:d8:63:08:33:d4:22:8c:c3:0c:74:e3:
2b:44:3b:b9:36:74:78:04:f9:df:7c:84:bb:66:7c:
48:c2:ec:1c:ca:8a:f6:4e:d3:e0:01:db:66:d4:5d:
38:46:30:51:00:0d:95:e5:77:0a:5f:cf:ee:e5:a2:
30:38:9a:aa:98:31:e0:4d:3c:a4:df:c6:6f:2f:3e:
e2:59:19:d1:07:78:5a:9b:61:e7:72:5c:0d:6f:47:
6b:1c:e7:c3:0d:29:56:a9:fa:0d:cf:5a:a7:49:20:
ac:2a:08:6c:46:16:9e:18:44:6e:70:cd:be:50:b9:
37:a2:8c:cb:e7:5f:d6:87:9a:78:28:9a:9c:1c:fd:
fc:98:42:82:b9:a2:ac:78:5c:11:2a:0b:af:d1:85:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:5D:3A:DF:27:52:03:78:23:51:97:6A:97:B9:D8:62:AA:EC:9C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M5VdOt8nUgN4I1GXape52GKq7Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.246.0/23
31.58.90.0/24
31.58.168.0/24
31.59.120.0/22
Signature Algorithm: sha256WithRSAEncryption
41:37:d4:f6:74:bf:93:98:ac:ea:bc:16:59:89:b9:cb:1a:2d:
1b:18:b1:7b:f5:c5:7e:4a:a4:27:77:51:7d:79:3f:40:9a:7b:
e6:09:97:1b:b5:f4:6e:d7:65:58:2a:9a:99:13:3b:aa:ea:ea:
06:76:91:c5:32:87:38:3c:7f:bf:f8:fc:db:d8:7a:46:8d:d6:
97:cd:0c:94:ea:5c:df:39:4e:f8:b7:03:11:1f:94:35:75:ab:
1d:c3:80:e1:d9:37:0b:1c:fd:2e:b8:e1:5d:98:91:85:9d:dd:
dc:cd:c2:e5:7f:be:97:df:24:13:e8:9a:87:02:53:6d:8a:65:
b8:71:29:2e:6d:ec:97:6d:04:48:67:5d:53:43:27:d7:18:e7:
16:01:4d:57:3a:4b:32:19:bb:c5:ec:b4:d0:a3:69:95:74:da:
46:b1:06:60:41:cd:88:81:83:f0:9a:4c:0d:c4:c8:b8:a3:58:
3d:c6:5f:33:38:99:4d:92:fd:69:72:6d:c9:0a:4b:a9:62:6e:
c0:8d:70:9a:57:35:7b:d5:59:ef:6c:7f:76:1d:7f:d7:3b:98:
34:64:52:c1:c3:58:1a:f9:88:17:84:b2:c6:ed:a2:cf:d0:1f:
90:7c:e6:e2:4c:d8:69:93:83:fd:48:14:e4:fb:bc:d0:fa:70:
20:e8:27:bc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZMG7bRK9a0Zwvfwl4iwjkAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTA3MTQwMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzk1NWQzYWRmMjc1MjAzNzgyMzUxOTc2YTk3YjlkODYyYWFlYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKPFW7JDHXKoYpjlT9YVUEcZhPUl
rkDkSNjIOW8epdcQs8gbAXj5r0kgQxgBtBzvwvifOBjB0MUNkz07duYGareO8vCZ
VTPlY6taqF18UpdQPMjbUsNNo2kUP8ThhckJKHyeu3rk9RBvl+sK2GMIM9QijMMM
dOMrRDu5NnR4BPnffIS7ZnxIwuwcyor2TtPgAdtm1F04RjBRAA2V5XcKX8/u5aIw
OJqqmDHgTTyk38ZvLz7iWRnRB3ham2HnclwNb0drHOfDDSlWqfoNz1qnSSCsKghs
RhaeGERucM2+ULk3oozL51/Wh5p4KJqcHP38mEKCuaKseFwRKguv0YV4oQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDOVXTrfJ1IDeCNRl2qXudhiquycMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTTVWZE90OG5VZ040STFHWGFwZTUyR0txN0p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBHzn2AwQA
HzpaAwQAHzqoAwQCHzt4MA0GCSqGSIb3DQEBCwUAA4IBAQBBN9T2dL+TmKzqvBZZ
ibnLGi0bGLF79cV+SqQnd1F9eT9AmnvmCZcbtfRu12VYKpqZEzuq6uoGdpHFMoc4
PH+/+Pzb2HpGjdaXzQyU6lzfOU74twMRH5Q1dasdw4Dh2TcLHP0uuOFdmJGFnd3c
zcLlf76X3yQT6JqHAlNtimW4cSkubeyXbQRIZ11TQyfXGOcWAU1XOksyGbvF7LTQ
o2mVdNpGsQZgQc2IgYPwmkwNxMi4o1g9xl8zOJlNkv1pcm3JCkupYm7AjXCaVzV7
1VnvbH92HX/XO5g0ZFLBw1ga+YgXhLLG7aLP0B+QfObiTNhpk4P9SBTk+7zQ+nAg
6Ce8
-----END CERTIFICATE-----
Generated at Sun Nov 17 17:26:27 2024 by rpki-client on console-ams.rpki-client.org