Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UooJGCZWEqhXhqrXVyKCB-lfyFA.roa
File: UooJGCZWEqhXhqrXVyKCB-lfyFA.roa (raw, json)
Hash identifier: ZsNOZZJICwwdxjTxndR8QPTQa3xR3qGixAuJP/v+ETU=
Subject key identifier: 52:8A:09:18:26:56:12:A8:57:86:AA:D7:57:22:82:07:E9:5F:C8:50
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192152F857C0FE48FA75BE98843E45A6581
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UooJGCZWEqhXhqrXVyKCB-lfyFA.roa
Signing time: Sat 21 Sep 2024 15:24:48 +0000
ROA not before: Sat 21 Sep 2024 15:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.150.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 11:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:15:2f:85:7c:0f:e4:8f:a7:5b:e9:88:43:e4:5a:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 21 15:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=528a0918265612a85786aad757228207e95fc850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:71:f6:25:9e:16:29:47:bb:eb:ec:b4:f3:
bc:c7:89:6f:ae:fd:ea:4d:fe:4b:60:2f:e2:c7:58:
f3:6b:fb:c9:c9:09:5f:fd:d4:f4:fd:8c:d7:1e:1f:
3f:b3:02:b2:c1:13:64:bd:2d:e5:e6:e1:11:a1:58:
0e:77:87:74:65:12:f7:ad:da:44:73:d5:32:e1:11:
19:73:9e:b7:4e:1d:96:7e:f7:45:83:e5:20:fa:9b:
26:df:2a:fa:2c:3f:ed:86:3e:d3:83:b1:7d:62:33:
2b:59:ea:63:f3:49:84:63:8f:1b:1a:b8:bc:eb:32:
8e:81:b2:31:1d:bd:91:bf:ce:8a:c7:62:16:1e:64:
d7:f7:21:81:92:4d:36:8e:aa:5c:9b:1d:b8:09:b6:
da:cb:6a:91:a4:53:b7:79:b3:a5:46:e7:73:0b:c6:
e3:99:5a:f6:df:66:36:bf:9f:84:2f:a8:ed:fd:31:
93:45:6a:bb:5f:f5:48:ea:7f:dc:2f:46:61:c2:90:
89:0f:60:ce:5c:d5:c7:fa:20:d7:30:f1:25:3d:da:
83:82:71:85:8f:a6:d4:32:22:d9:e4:ee:23:4d:b9:
04:66:5b:e5:a5:10:fd:b4:18:6e:33:dd:1d:6e:9f:
04:34:52:af:67:ee:44:ae:b2:82:5c:f0:b1:48:0a:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:09:18:26:56:12:A8:57:86:AA:D7:57:22:82:07:E9:5F:C8:50
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UooJGCZWEqhXhqrXVyKCB-lfyFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.150.0/24
31.57.153.0/24
Signature Algorithm: sha256WithRSAEncryption
63:71:d6:25:b8:94:9b:8b:6b:1e:03:07:16:1d:74:23:1b:35:
c8:d7:21:c8:8b:68:18:b6:e4:be:95:86:88:70:d3:81:6a:99:
91:b1:5d:60:b0:11:ad:49:41:d2:d7:3c:0b:83:54:f5:23:26:
08:93:f7:4a:5f:f6:88:61:b1:49:12:30:c1:86:3b:39:63:29:
cf:ab:0b:f0:38:56:25:c5:0b:6b:31:92:d2:d0:f2:78:a1:f8:
91:a1:c6:9b:b8:2d:e1:a5:b4:51:bd:c0:c4:4f:a7:ba:d4:52:
ae:0e:1f:2a:10:4e:19:cb:20:45:c1:68:94:f7:71:2c:d5:47:
4f:59:d8:54:b1:70:2c:b0:c8:d1:41:79:03:08:8d:4f:ae:3e:
3a:31:f2:dc:7e:bd:ed:d3:d5:bd:61:be:f7:37:71:7a:cd:d7:
4c:b5:dd:1f:46:b7:fa:f5:34:59:73:6b:96:dc:93:21:63:b7:
25:01:ce:06:51:06:55:3f:b4:b4:40:46:e0:51:b3:28:11:ab:
8a:57:a0:ff:38:f6:c6:82:bc:3c:6c:ee:07:4c:1b:78:6d:88:
23:c4:12:d3:83:64:94:1d:64:d5:3e:13:6b:a7:07:ad:46:30:
c1:a1:b4:cc:f9:55:5b:dd:7f:87:1c:02:a7:58:9a:7d:93:8e:
b0:cb:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 14:50:25 2024 by rpki-client on console-ams.rpki-client.org