Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6A2IURb0Ktxg29nk8Y64J32YCk.roa
File: W6A2IURb0Ktxg29nk8Y64J32YCk.roa (raw, json)
Hash identifier: 1vGNe+OZg8xrarrwmJm93Jb0Cuapps5IQaeC+V9+wgg=
Subject key identifier: 5B:A0:36:21:44:5B:D0:AB:71:83:6F:67:93:C6:3A:E0:9D:F6:60:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019209A6F1CFF8B8492866080358208327D2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6A2IURb0Ktxg29nk8Y64J32YCk.roa
Signing time: Thu 19 Sep 2024 09:39:48 +0000
ROA not before: Thu 19 Sep 2024 09:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56655
IP address blocks: 31.57.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 15:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:a6:f1:cf:f8:b8:49:28:66:08:03:58:20:83:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 19 09:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba03621445bd0ab71836f6793c63ae09df66029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:94:46:91:d4:e6:93:bf:58:e2:39:fc:60:
a1:11:99:6e:9c:b1:e8:41:6c:2c:82:13:ec:ac:83:
f7:75:4f:95:ed:e8:0f:2b:d5:dd:aa:a4:d4:01:c3:
6d:e0:5b:62:f8:79:a7:88:18:ae:28:a6:57:42:f2:
d3:38:fa:b7:44:4b:2d:22:69:9c:62:b6:d5:2f:2c:
10:8b:7b:e8:3a:b9:d1:a5:6d:bc:65:76:24:38:f2:
30:fd:62:c7:23:cf:7a:43:ce:79:21:87:93:ea:1c:
73:14:f3:48:75:bb:53:7d:a3:93:38:f8:85:d4:af:
2b:19:5f:90:20:63:40:b2:d1:e1:35:fd:a0:53:44:
f0:63:e9:c3:2e:4f:94:6f:35:ee:22:e2:9c:a1:b6:
c3:ea:17:9b:a6:9f:d6:94:59:c9:63:a8:12:c8:74:
d4:e6:d1:65:b0:4b:dc:e6:ea:ad:9a:3d:15:43:fc:
bb:a2:26:d6:1a:b2:a6:09:52:1e:29:36:fe:2e:73:
4d:dd:8b:67:5f:db:3d:37:4b:8a:e7:f2:c6:8d:fa:
33:f8:bf:5d:82:40:8a:4d:19:bb:f3:83:ee:a9:dc:
2d:46:4f:98:98:04:0a:40:bb:c4:a1:ab:cf:71:a2:
e8:dc:51:d6:36:9c:28:03:d8:5b:70:c0:c0:55:ee:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A0:36:21:44:5B:D0:AB:71:83:6F:67:93:C6:3A:E0:9D:F6:60:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W6A2IURb0Ktxg29nk8Y64J32YCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.151.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e4:b8:d5:8b:45:40:55:c4:30:e7:6c:38:54:29:79:00:22:
83:fb:92:2b:31:f1:93:7a:45:ac:6b:c7:2e:25:8f:65:6c:7c:
f5:d6:98:bb:2f:f8:4c:33:dc:62:cd:0f:c8:d6:59:6e:a8:05:
05:ab:c5:44:b8:a3:1c:05:f3:6c:25:53:73:a5:b0:e9:8f:d4:
95:09:4a:8b:1c:ee:9e:b4:72:65:ce:21:70:f0:f8:24:55:fb:
a9:de:64:a6:28:88:98:83:be:91:6b:45:e0:94:aa:67:41:94:
83:d4:8e:4a:76:05:e6:b7:da:d8:57:e9:65:ec:e7:1f:60:fa:
d6:76:e1:13:d6:92:2e:35:d7:66:c5:a4:84:39:41:9c:fc:a3:
bb:e4:52:75:e3:3f:32:65:04:dd:ec:97:9d:75:a5:27:0f:fe:
85:a0:4f:54:38:01:17:dc:ca:a0:d2:70:af:09:b6:e2:2f:78:
a1:98:6a:9b:05:7a:4e:aa:b1:66:67:26:70:85:25:c4:4f:d8:
d5:bd:0a:d0:fb:f8:e2:5b:e5:41:d1:2c:4c:b0:d1:d9:88:df:
01:0f:66:7e:ec:40:4b:76:61:5c:f4:68:2f:08:2d:91:c3:ab:
40:80:59:c8:ae:ca:ad:fd:8f:03:c1:ba:ad:79:90:b5:40:c3:
61:44:9d:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIJpvHP+LhJKGYIA1gggyfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTE5MDkzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmEwMzYyMTQ0NWJkMGFiNzE4MzZmNjc5M2M2M2FlMDlkZjY2MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V+URpHU5pO/WOI5/GChEZlunLHo
QWwsghPsrIP3dU+V7egPK9XdqqTUAcNt4Fti+HmniBiuKKZXQvLTOPq3REstImmc
YrbVLywQi3voOrnRpW28ZXYkOPIw/WLHI896Q855IYeT6hxzFPNIdbtTfaOTOPiF
1K8rGV+QIGNAstHhNf2gU0TwY+nDLk+UbzXuIuKcobbD6hebpp/WlFnJY6gSyHTU
5tFlsEvc5uqtmj0VQ/y7oibWGrKmCVIeKTb+LnNN3YtnX9s9N0uK5/LGjfoz+L9d
gkCKTRm784PuqdwtRk+YmAQKQLvEoavPcaLo3FHWNpwoA9hbcMDAVe5DOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFugNiFEW9CrcYNvZ5PGOuCd9mApMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVzZBMklVUmIwS3R4ZzI5bms4WTY0SjMyWUNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmXMA0G
CSqGSIb3DQEBCwUAA4IBAQBz5LjVi0VAVcQw52w4VCl5ACKD+5IrMfGTekWsa8cu
JY9lbHz11pi7L/hMM9xizQ/I1lluqAUFq8VEuKMcBfNsJVNzpbDpj9SVCUqLHO6e
tHJlziFw8PgkVfup3mSmKIiYg76Ra0XglKpnQZSD1I5KdgXmt9rYV+ll7OcfYPrW
duET1pIuNddmxaSEOUGc/KO75FJ14z8yZQTd7JeddaUnD/6FoE9UOAEX3Mqg0nCv
CbbiL3ihmGqbBXpOqrFmZyZwhSXET9jVvQrQ+/jiW+VB0SxMsNHZiN8BD2Z+7EBL
dmFc9GgvCC2Rw6tAgFnIrsqt/Y8DwbqteZC1QMNhRJ1n
-----END CERTIFICATE-----
Generated at Sun Oct 20 18:11:12 2024 by rpki-client on console-ams.rpki-client.org