Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YikCB5CjAJ61Z8hta_89P_ia_ls.roa
File: YikCB5CjAJ61Z8hta_89P_ia_ls.roa (raw, json)
Hash identifier: EBup1Xsmd1jkQ2YzIhKyrbU76nCEDaEIr31CUZECHbo=
Subject key identifier: 62:29:02:07:90:A3:00:9E:B5:67:C8:6D:6B:FF:3D:3F:F8:9A:FE:5B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192C810CF05BCC9CEE0C9E063DC58A4FD4A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YikCB5CjAJ61Z8hta_89P_ia_ls.roa
Signing time: Sat 26 Oct 2024 09:03:17 +0000
ROA not before: Sat 26 Oct 2024 09:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215238
IP address blocks: 31.59.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 08:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:10:cf:05:bc:c9:ce:e0:c9:e0:63:dc:58:a4:fd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 26 09:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6229020790a3009eb567c86d6bff3d3ff89afe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:45:4c:66:8d:9a:48:4a:8a:de:ae:64:13:
82:4d:6a:4f:f1:5e:ef:00:a8:67:eb:cc:b2:2b:36:
45:d2:a8:55:8b:ec:06:f0:d4:b8:5f:77:f5:8a:d3:
5c:6c:84:ad:99:25:ac:4a:fe:a6:d4:5a:67:71:6b:
e3:e3:a2:72:84:83:fb:03:28:5c:84:f8:a4:66:fb:
f5:ab:6d:ef:8a:7f:93:26:bd:a3:a3:37:8c:95:01:
3b:bf:d7:c7:ec:bb:ef:6a:6b:cb:b9:b6:0a:ad:95:
f9:bc:9d:82:a9:bc:70:46:e8:9a:e6:24:72:ef:0c:
82:d9:39:01:70:e4:8a:53:1e:a8:a7:6e:42:d8:3e:
e6:23:86:65:e1:58:1b:87:98:87:60:0c:3c:e1:3f:
1b:9f:cd:7a:46:b7:c7:87:3e:d2:c2:92:d4:0a:22:
32:4e:87:6f:27:62:94:47:fa:52:b2:08:9d:bb:45:
96:47:7d:de:7c:d5:00:30:e1:44:01:73:5f:1a:5d:
c4:fe:7e:3e:e9:7d:e8:7d:40:3a:4f:40:21:49:e0:
1c:63:45:f3:50:2e:26:05:0d:0b:d6:23:c2:32:d6:
8e:2f:b9:1d:b0:33:c7:53:54:98:62:f1:d8:e9:c6:
a9:7b:56:d9:c5:9f:79:25:ae:39:03:88:53:11:8a:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:02:07:90:A3:00:9E:B5:67:C8:6D:6B:FF:3D:3F:F8:9A:FE:5B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YikCB5CjAJ61Z8hta_89P_ia_ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.131.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:b1:c3:63:3e:94:e0:71:37:a1:5e:ed:a7:c0:e8:ab:1b:cb:
cc:44:0b:c1:3e:82:c9:51:5f:ef:71:71:3b:e7:61:0a:03:d2:
a0:fd:c6:cc:ca:fe:27:aa:42:06:0e:ee:20:9d:0c:e0:e3:ab:
fe:e0:9d:91:72:16:a4:a9:92:f0:64:e8:54:4d:af:22:46:b2:
ce:4b:20:a9:d8:0f:7e:06:06:ce:2d:5d:8f:de:12:f7:4b:e0:
eb:76:1d:1f:c0:16:55:53:dc:64:fa:f6:d0:81:2f:81:ca:0e:
45:f5:1b:f1:a2:31:97:dc:5e:ef:90:38:eb:35:5b:01:ff:55:
96:3f:45:f6:7f:f6:57:26:93:52:4d:e9:d0:d5:ad:cb:67:66:
ce:b4:2c:3b:27:84:9f:33:bd:dc:c0:8b:ce:5a:82:86:29:02:
fe:a3:54:3e:01:41:d8:6f:78:ec:5b:6b:eb:9e:52:7e:1f:ff:
25:29:e1:c9:37:1e:45:16:94:e7:e7:c6:bb:bb:34:17:0a:e4:
87:31:e1:b5:8f:99:0f:73:25:23:6f:fa:b2:a1:76:e5:09:cd:
be:93:02:68:88:87:05:62:02:7c:88:91:f4:7d:8a:e8:1c:d5:
29:92:8f:e2:e6:7d:24:75:66:dd:7d:ac:18:2a:18:ca:a3:52:
12:f4:14:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLIEM8FvMnO4MngY9xYpP1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDI2MDkwMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjI5MDIwNzkwYTMwMDllYjU2N2M4NmQ2YmZmM2QzZmY4OWFmZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEFFTGaNmkhKit6uZBOCTWpP8V7v
AKhn68yyKzZF0qhVi+wG8NS4X3f1itNcbIStmSWsSv6m1FpncWvj46JyhIP7Ayhc
hPikZvv1q23vin+TJr2jozeMlQE7v9fH7LvvamvLubYKrZX5vJ2CqbxwRuia5iRy
7wyC2TkBcOSKUx6op25C2D7mI4Zl4Vgbh5iHYAw84T8bn816RrfHhz7SwpLUCiIy
TodvJ2KUR/pSsgidu0WWR33efNUAMOFEAXNfGl3E/n4+6X3ofUA6T0AhSeAcY0Xz
UC4mBQ0L1iPCMtaOL7kdsDPHU1SYYvHY6cape1bZxZ95Ja45A4hTEYopjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIpAgeQowCetWfIbWv/PT/4mv5bMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWWlrQ0I1Q2pBSjYxWjhodGFfODlQX2lhX2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzuDMA0G
CSqGSIb3DQEBCwUAA4IBAQDAscNjPpTgcTehXu2nwOirG8vMRAvBPoLJUV/vcXE7
52EKA9Kg/cbMyv4nqkIGDu4gnQzg46v+4J2RchakqZLwZOhUTa8iRrLOSyCp2A9+
BgbOLV2P3hL3S+Drdh0fwBZVU9xk+vbQgS+Byg5F9RvxojGX3F7vkDjrNVsB/1WW
P0X2f/ZXJpNSTenQ1a3LZ2bOtCw7J4SfM73cwIvOWoKGKQL+o1Q+AUHYb3jsW2vr
nlJ+H/8lKeHJNx5FFpTn58a7uzQXCuSHMeG1j5kPcyUjb/qyoXblCc2+kwJoiIcF
YgJ8iJH0fYroHNUpko/i5n0kdWbdfawYKhjKo1IS9BSW
-----END CERTIFICATE-----
Generated at Sun Nov 3 09:10:18 2024 by rpki-client on console-ams.rpki-client.org