Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wuugnr4UvCd7y3fSpoJ4qpK5dZQ.roa
File: Wuugnr4UvCd7y3fSpoJ4qpK5dZQ.roa (raw, json)
Hash identifier: Isn9JdKNGRTD7UK2aW974WkekkwGEC0BvGzqnTww8JE=
Subject key identifier: 5A:EB:A0:9E:BE:14:BC:27:7B:CB:77:D2:A6:82:78:AA:92:B9:75:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019294EA8B4CC34295598491EDFD9B17CB5E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wuugnr4UvCd7y3fSpoJ4qpK5dZQ.roa
Signing time: Wed 16 Oct 2024 10:40:51 +0000
ROA not before: Wed 16 Oct 2024 10:40:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:ea:8b:4c:c3:42:95:59:84:91:ed:fd:9b:17:cb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 10:40:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aeba09ebe14bc277bcb77d2a68278aa92b97594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:d6:1d:28:70:58:84:4b:39:d0:f0:6b:66:
4a:04:09:71:6d:37:e8:18:22:d3:e9:15:02:3b:49:
24:90:2c:fa:a6:82:41:50:fb:c8:00:c5:59:b4:60:
e9:57:9e:4a:b6:41:57:6c:36:3d:6c:c1:85:1a:35:
ce:63:c3:0c:f3:3f:c4:78:44:b2:d6:9e:b3:93:ae:
52:76:1e:69:1d:86:f1:82:7c:41:04:75:14:fc:0c:
87:8b:43:cb:47:b2:92:f6:64:36:51:eb:b9:a5:6c:
01:09:35:20:54:be:11:34:25:f8:c0:6a:f5:ad:60:
2f:d1:7a:cb:63:06:dd:8a:d8:f1:01:77:44:cb:93:
56:c7:a8:a4:0e:68:a9:47:7b:2c:ee:af:8f:59:06:
53:bb:0c:41:f9:d8:12:4f:ad:70:38:a7:02:17:a9:
73:52:3d:75:0f:90:d6:73:8f:32:74:b9:d6:3a:f1:
1a:64:4b:fc:db:20:97:6c:7a:c7:f7:10:41:9d:04:
b4:55:e3:4f:73:9a:40:fa:b6:6c:a4:a5:fa:ac:57:
e7:d1:5f:48:79:57:aa:b0:9d:13:3f:93:31:53:54:
a7:bd:b6:c1:dd:24:c9:97:fe:6e:fd:c4:ea:b2:e6:
24:3c:7a:d9:9c:a6:f3:11:94:f0:b8:72:11:09:81:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:A0:9E:BE:14:BC:27:7B:CB:77:D2:A6:82:78:AA:92:B9:75:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wuugnr4UvCd7y3fSpoJ4qpK5dZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
25:2f:20:96:eb:f9:a7:9b:43:de:b3:00:00:25:4a:92:6e:66:
0c:d3:9d:62:a6:5b:7d:6d:e2:a4:31:98:09:fb:03:5e:d1:85:
f4:e4:be:44:87:62:5d:99:1d:a0:1f:3a:3f:ea:4d:9a:21:68:
21:3e:5e:83:ce:3f:c3:81:e5:a5:ec:fe:f6:ce:52:99:71:7d:
da:c2:cc:77:07:7d:84:d3:ac:8e:d1:a8:32:bc:3f:07:7a:4b:
33:59:a8:b9:a4:69:a5:14:2d:29:b4:48:cb:3d:fa:ee:8c:25:
3d:31:07:91:d3:f9:d6:76:7b:a8:47:f7:ca:f1:b2:f0:11:a1:
80:65:2d:75:bf:ce:09:24:9e:67:bf:97:ac:e9:19:81:99:59:
65:ff:d0:84:88:17:74:66:df:00:2a:42:1a:25:9a:e3:13:ca:
2b:50:7e:7f:b6:e4:ed:19:d4:d6:a0:cd:05:16:45:03:b7:b6:
10:ec:7d:fa:a3:86:3d:64:9b:12:5b:5e:d3:a1:00:45:90:42:
5a:39:6a:59:67:3d:73:49:c5:d3:f4:dc:a8:78:91:74:05:d6:
d8:35:88:b0:49:03:a3:83:25:cd:8a:53:e7:e5:20:93:01:56:
b4:75:3c:de:7c:1f:5b:52:86:32:fb:7f:5f:fe:32:43:f9:e1:
77:cc:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 21:37:28 2024 by rpki-client on console-fra.rpki-client.org