Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XDlI-ZzHjXjPkia4nuXiX301jR0.roa
File: XDlI-ZzHjXjPkia4nuXiX301jR0.roa (raw, json)
Hash identifier: wUq1ug1TTp+lFoZwipsR18T4JRfJS0HT1AYw2j5IE9g=
Subject key identifier: 5C:39:48:F9:9C:C7:8D:78:CF:92:26:B8:9E:E5:E2:5F:7D:35:8D:1D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019299B03E879AB2CE0FE74CBCAF3F941615
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XDlI-ZzHjXjPkia4nuXiX301jR0.roa
Signing time: Thu 17 Oct 2024 08:55:17 +0000
ROA not before: Thu 17 Oct 2024 08:55:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 31.59.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 09:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:b0:3e:87:9a:b2:ce:0f:e7:4c:bc:af:3f:94:16:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 08:55:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c3948f99cc78d78cf9226b89ee5e25f7d358d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:fb:4d:b5:2b:a9:10:77:60:62:a5:53:a7:
38:88:5b:58:f4:6a:60:fc:d2:15:6f:51:75:31:75:
a3:c6:d7:81:16:16:37:28:8d:28:84:1b:f8:80:23:
1f:a7:24:76:1e:07:8d:23:67:a7:8a:23:19:07:c7:
e9:c8:13:1e:f9:50:a6:ed:d4:29:07:95:6a:7e:e4:
86:39:4e:a5:71:36:61:82:81:b3:60:d6:29:a1:69:
4f:35:9b:06:50:60:e6:2e:2f:87:d5:68:fc:fa:00:
b6:f2:2a:4b:4b:20:7b:5d:95:57:a6:87:99:1f:6f:
de:e5:8a:3b:bf:49:f6:c6:d4:f9:30:e0:e8:27:41:
f8:cf:e6:56:d1:70:e8:f7:b7:4f:b7:cf:3b:ad:06:
c6:54:64:94:73:94:9f:fa:18:37:1e:8a:d3:db:92:
37:1c:be:5d:5b:d7:fe:81:39:d1:e9:f4:2f:ac:25:
f9:28:9a:ea:7f:28:02:31:ce:a6:10:0d:17:bf:36:
a4:23:26:dd:b9:38:43:0c:51:d6:05:2b:0b:38:02:
5f:f0:d7:8a:88:74:5e:f1:19:ff:91:cc:f6:d3:ce:
99:7b:8e:e6:a3:39:15:b5:73:0e:50:a6:eb:57:b8:
fa:b1:26:e2:fd:ff:2d:8a:a3:c6:d3:e3:ee:d4:08:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:48:F9:9C:C7:8D:78:CF:92:26:B8:9E:E5:E2:5F:7D:35:8D:1D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XDlI-ZzHjXjPkia4nuXiX301jR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.35.0/24
Signature Algorithm: sha256WithRSAEncryption
83:90:a7:b8:29:0e:b3:4f:7c:4f:4b:3d:da:b5:f4:62:30:d0:
1f:1d:26:e1:8f:96:da:f0:d1:1d:e3:2f:ee:b6:bb:9b:1e:4a:
d5:da:37:c8:d6:9b:0c:b8:3d:33:7a:fb:4e:08:0a:a8:59:5e:
dc:8d:bc:70:59:72:75:ea:0d:de:85:18:75:4d:94:72:e3:13:
13:d6:21:1d:62:98:b6:83:c2:56:91:c2:67:cf:ac:3b:c2:b2:
8a:d2:1d:f8:d9:03:0e:fc:46:d9:b8:84:84:53:d5:c4:a3:26:
1a:e6:cc:66:71:f4:db:4d:ef:2c:47:ac:31:42:a5:f6:07:ad:
3a:6f:f0:cd:0b:c7:fe:12:23:4c:98:4f:95:4a:57:e0:c3:a4:
41:5b:6d:82:3b:1b:17:a0:36:e0:2e:0b:32:02:f9:dc:89:61:
f6:ad:ca:b8:c0:61:9b:3d:2e:9b:01:2e:45:5b:f3:19:29:91:
dd:24:7d:eb:ca:b5:15:73:88:79:17:5c:a2:c9:8d:63:dc:86:
e0:e1:4b:39:13:0e:13:eb:c4:46:fa:fc:1d:71:e0:50:9d:1d:
0c:b3:33:72:0f:94:5e:bb:be:9f:32:79:19:b5:61:2e:89:54:
8b:0c:ce:b7:4f:34:be:1f:b0:a0:e8:95:f9:ca:65:5c:36:38:
6f:4d:11:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKZsD6HmrLOD+dMvK8/lBYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE3MDg1NTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzM5NDhmOTljYzc4ZDc4Y2Y5MjI2Yjg5ZWU1ZTI1ZjdkMzU4ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfz7TbUrqRB3YGKlU6c4iFtY9Gpg
/NIVb1F1MXWjxteBFhY3KI0ohBv4gCMfpyR2HgeNI2eniiMZB8fpyBMe+VCm7dQp
B5VqfuSGOU6lcTZhgoGzYNYpoWlPNZsGUGDmLi+H1Wj8+gC28ipLSyB7XZVXpoeZ
H2/e5Yo7v0n2xtT5MODoJ0H4z+ZW0XDo97dPt887rQbGVGSUc5Sf+hg3HorT25I3
HL5dW9f+gTnR6fQvrCX5KJrqfygCMc6mEA0XvzakIybduThDDFHWBSsLOAJf8NeK
iHRe8Rn/kcz2086Ze47mozkVtXMOUKbrV7j6sSbi/f8tiqPG0+Pu1AidUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFw5SPmcx414z5ImuJ7l4l99NY0dMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWERsSS1aekhqWGpQa2lhNG51WGlYMzAxalIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzsjMA0G
CSqGSIb3DQEBCwUAA4IBAQCDkKe4KQ6zT3xPSz3atfRiMNAfHSbhj5ba8NEd4y/u
trubHkrV2jfI1psMuD0zevtOCAqoWV7cjbxwWXJ16g3ehRh1TZRy4xMT1iEdYpi2
g8JWkcJnz6w7wrKK0h342QMO/EbZuISEU9XEoyYa5sxmcfTbTe8sR6wxQqX2B606
b/DNC8f+EiNMmE+VSlfgw6RBW22COxsXoDbgLgsyAvnciWH2rcq4wGGbPS6bAS5F
W/MZKZHdJH3ryrUVc4h5F1yiyY1j3Ibg4Us5Ew4T68RG+vwdceBQnR0MszNyD5Re
u76fMnkZtWEuiVSLDM63TzS+H7Cg6JX5ymVcNjhvTRGA
-----END CERTIFICATE-----
Generated at Tue Nov 12 13:08:38 2024 by rpki-client on console-fra.rpki-client.org