Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PcCXp0LKJrj2iyTF_-Q2bdbZfkU.roa
File: PcCXp0LKJrj2iyTF_-Q2bdbZfkU.roa (raw, json)
Hash identifier: nrMWejEC5gmImXbj+jg/3lrIphzo8IenT1TWdGjtKzM=
Subject key identifier: 3D:C0:97:A7:42:CA:26:B8:F6:8B:24:C5:FF:E4:36:6D:D6:D9:7E:45
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01920E26AEB65B07A5147F29BA29BC4060FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PcCXp0LKJrj2iyTF_-Q2bdbZfkU.roa
Signing time: Fri 20 Sep 2024 06:37:48 +0000
ROA not before: Fri 20 Sep 2024 06:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 31.57.129.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 03:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:26:ae:b6:5b:07:a5:14:7f:29:ba:29:bc:40:60:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 20 06:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc097a742ca26b8f68b24c5ffe4366dd6d97e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:c3:37:32:cf:a1:fe:d3:63:d2:19:72:47:
04:aa:30:09:f1:df:09:72:27:4a:fe:ac:44:64:64:
ab:1a:e8:fa:4a:08:68:c4:27:83:36:2c:92:49:d1:
c7:24:b1:c9:15:f1:2b:3d:83:70:4b:02:92:a8:52:
b8:de:7f:a8:dd:5b:16:9e:dd:47:97:5b:20:0a:2d:
32:c0:0e:ec:c0:42:ee:e1:9f:a3:27:39:3f:f0:df:
fe:f7:cd:f0:28:bf:9b:47:c7:b4:46:52:b6:d4:69:
50:5e:0f:cf:22:18:c3:9c:22:1c:0b:f3:a7:98:fd:
db:61:e0:85:e7:cb:a7:87:a1:f8:0d:2b:0b:13:31:
23:e4:52:f9:dc:5f:bf:73:c2:db:f7:4b:e7:d3:8f:
83:3c:f0:b3:da:b0:be:e7:04:94:9b:b9:37:bf:f5:
c8:f5:fb:97:f4:52:09:e1:17:58:d5:3f:5e:f5:dd:
c1:d2:87:10:9e:7a:fb:ee:69:0f:4f:40:42:97:6f:
bb:79:ee:b9:d3:3b:47:64:62:e2:b3:fb:56:e5:b9:
ca:05:27:0f:ec:42:d7:a4:8f:f0:62:50:e8:0e:5f:
44:7a:3c:b5:52:11:b7:a7:a5:8c:ec:be:3c:77:70:
15:85:36:9e:7a:50:84:22:bb:48:16:09:a6:07:1a:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:97:A7:42:CA:26:B8:F6:8B:24:C5:FF:E4:36:6D:D6:D9:7E:45
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PcCXp0LKJrj2iyTF_-Q2bdbZfkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.129.0/24
31.57.152.0/24
Signature Algorithm: sha256WithRSAEncryption
82:00:8a:a1:8f:6e:4d:09:e5:e2:b3:d5:5f:06:e7:b2:7d:f4:
c2:40:0a:30:30:ca:21:02:36:a6:47:43:c1:90:48:e2:7c:81:
ec:bb:26:48:7e:54:1f:90:3c:af:6f:81:24:12:68:0d:37:d9:
1d:d1:de:60:ee:49:91:48:b0:fe:ee:bf:05:82:28:61:ee:e6:
f8:7f:4e:1f:11:7b:98:07:1a:fa:ae:5e:76:1f:08:72:f3:61:
0e:5b:f6:32:5f:e1:e8:68:4d:a9:2b:72:b3:6c:e7:ed:4c:e5:
46:25:57:83:a0:27:1d:8b:2b:32:dd:ce:59:e0:28:69:a7:a6:
ac:29:3e:88:fc:0e:15:d1:f1:bd:52:1b:1c:bb:12:19:50:00:
fc:c5:37:7c:60:b7:72:d5:3c:f8:d0:4d:67:e3:2c:51:02:4f:
12:66:bd:c9:08:2a:32:88:05:b4:4c:53:22:d7:f9:fa:25:3d:
e0:97:ff:4a:db:87:81:8c:8a:07:04:2e:ed:4a:bc:23:f8:15:
4d:79:7a:5c:0c:20:7b:fb:bd:fa:42:55:de:f2:5c:fd:1b:04:
c6:46:a0:93:54:fa:60:5b:51:72:35:7a:eb:ee:5c:55:0a:38:
cf:ea:64:f0:9b:09:76:c9:2c:ea:72:c4:10:ea:71:f5:d9:5e:
cd:65:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 06:53:55 2024 by rpki-client on console-ams.rpki-client.org