Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_ly9bO_nNqpHe1AnvFddsYV5Dc.roa
File: M_ly9bO_nNqpHe1AnvFddsYV5Dc.roa (raw, json)
Hash identifier: CnT1T6Z/EIpfXxc5sBUf0jFYsCDqGXDAfPDB+PKnrc8=
Subject key identifier: 33:F9:72:F5:B3:BF:9C:DA:A9:1D:ED:40:9E:F1:5D:76:C6:15:E4:37
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019305A50834A3876DBB79F9304F496DE107
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_ly9bO_nNqpHe1AnvFddsYV5Dc.roa
Signing time: Thu 07 Nov 2024 08:02:01 +0000
ROA not before: Thu 07 Nov 2024 08:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200950
IP address blocks: 31.58.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 13:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:a5:08:34:a3:87:6d:bb:79:f9:30:4f:49:6d:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 08:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33f972f5b3bf9cdaa91ded409ef15d76c615e437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:db:52:2c:84:fe:2c:31:32:a3:b7:94:56:
92:e1:29:5f:a6:74:f2:9c:67:de:1e:88:69:98:b7:
4e:60:8d:f8:78:85:2e:fa:b2:73:94:12:71:cb:aa:
a4:f2:01:43:2b:72:74:02:f6:43:1d:59:c9:13:ca:
22:a6:35:63:57:a3:6d:dc:63:06:28:e4:d4:d2:4f:
44:db:e0:8c:c6:83:cb:5a:5c:b5:05:9e:8c:9d:cf:
1d:0c:26:97:58:28:9e:27:36:e6:0e:ec:8e:e3:99:
89:a2:d1:d8:99:27:c6:4c:36:1e:e9:9f:02:79:a6:
40:18:41:9d:29:15:0d:f3:ec:4d:2d:69:3c:2f:0c:
d3:d9:b9:59:57:de:66:2f:6b:07:e0:a4:ab:74:5b:
aa:46:90:34:df:4c:c0:b2:f2:f9:3b:72:c1:58:27:
0f:95:62:3b:22:07:e3:f2:60:1d:43:bb:6c:81:7d:
1d:03:23:7b:d2:23:2f:5b:b8:f4:a0:46:38:af:ca:
cd:7f:50:b0:e6:bc:ec:05:13:e2:13:f6:04:c4:8a:
95:5e:27:6e:d8:18:ff:3a:f4:fc:76:1a:93:2e:8c:
a9:c2:5c:63:c7:9f:cf:6c:59:36:f4:88:48:80:d7:
03:0f:19:48:9b:b3:50:c7:6c:78:0d:55:e8:54:ce:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:72:F5:B3:BF:9C:DA:A9:1D:ED:40:9E:F1:5D:76:C6:15:E4:37
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_ly9bO_nNqpHe1AnvFddsYV5Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b4:11:a4:4d:4c:c5:5b:6c:23:77:13:57:01:89:e3:b1:26:
ac:e5:f1:8f:c9:86:e3:c7:86:36:f0:45:b9:1e:e8:1a:dc:f8:
13:62:db:78:a9:0a:57:9c:6d:5e:6f:f2:02:64:ed:e1:0a:6f:
a4:da:92:f3:5e:a2:11:fd:82:8b:84:23:c8:23:cd:f6:b8:c6:
5e:b8:fe:57:36:b4:d0:17:c5:0a:7e:82:08:7b:54:65:77:93:
6e:c2:79:1e:bf:d8:51:22:ca:13:e2:6f:c6:ee:85:fc:9d:37:
5d:71:8f:d5:6b:9b:87:85:be:de:c4:a1:bf:49:8a:f0:7d:95:
a6:ea:b5:15:0e:9c:77:8e:44:32:15:fa:6f:5a:e5:19:95:a8:
9f:17:e4:9a:74:5c:ce:cc:e1:18:cd:ad:2f:9e:d0:6b:75:f6:
7c:ca:7c:4f:52:3c:77:ea:37:9b:f0:b6:f6:a4:04:65:2f:26:
b2:55:4e:5e:1c:ad:b5:f1:a2:75:b9:29:ce:85:ed:9b:0a:3c:
3e:22:df:f9:1b:4a:d7:9b:80:fc:4d:25:cc:4b:e7:87:05:3d:
f8:38:a3:51:a1:c3:93:07:12:73:cf:1e:67:e9:e8:94:1e:09:
00:29:ce:4a:4a:20:27:5e:01:f5:60:b9:e4:57:71:b2:4e:d9:
f4:a7:fa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:42 2025 by rpki-client