Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_b7_cZDoyMsaW3E1L4Hs9wg-QWA.roa
File: _b7_cZDoyMsaW3E1L4Hs9wg-QWA.roa (raw, json)
Hash identifier: i4Y9hEB0GnMgpBBOB75ujujcgf5ZCjh6adNhdKxGuzQ=
Subject key identifier: FD:BE:FF:71:90:E8:C8:CB:1A:5B:71:35:2F:81:EC:F7:08:3E:41:60
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192BE09A9F12B2584A3DBC099471D7ED4CC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_b7_cZDoyMsaW3E1L4Hs9wg-QWA.roa
Signing time: Thu 24 Oct 2024 10:19:17 +0000
ROA not before: Thu 24 Oct 2024 10:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.59.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 24 Oct 2024 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:09:a9:f1:2b:25:84:a3:db:c0:99:47:1d:7e:d4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 24 10:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdbeff7190e8c8cb1a5b71352f81ecf7083e4160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:ce:05:29:e9:e9:a4:78:8c:30:50:74:d4:
1d:2e:bb:78:36:8b:12:1c:f6:65:64:87:87:59:8e:
1e:9c:0b:0b:e7:b4:34:07:e4:a8:8c:4f:14:1d:3b:
6c:09:a1:3a:a5:cc:a5:2b:3f:f0:a8:a4:65:a0:07:
4c:98:c8:39:0c:23:80:cd:d3:92:9f:e3:c7:22:64:
b6:34:26:5d:df:4f:12:8a:ae:da:c4:7b:a7:f8:93:
72:ed:0c:d2:a4:23:ac:bb:24:13:32:9b:33:af:74:
ae:93:f3:db:27:c1:aa:7d:80:b5:6b:60:07:d0:46:
6d:fe:93:4b:9f:d1:08:c0:9f:6e:ec:b8:26:b4:ae:
5e:7d:c3:09:bf:a1:07:1d:94:f7:a2:6d:d8:58:6f:
0d:ba:e8:f4:74:3e:d2:f4:12:a8:53:99:8b:8e:d1:
ff:f1:31:6a:e8:3f:e0:31:40:de:71:54:e2:2d:f9:
99:ac:68:3d:37:ad:7f:b4:60:5c:7a:88:52:52:50:
bf:99:d0:0e:5d:96:13:bc:d8:e1:fb:53:fc:df:8c:
67:76:62:ee:de:77:80:7c:be:53:99:8e:d7:e6:c3:
b2:51:f3:f2:c0:7f:25:77:9a:a6:55:08:67:ee:d3:
54:aa:fe:86:9c:20:d8:7d:fa:98:b9:d4:78:b9:97:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BE:FF:71:90:E8:C8:CB:1A:5B:71:35:2F:81:EC:F7:08:3E:41:60
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_b7_cZDoyMsaW3E1L4Hs9wg-QWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.58.49.0/24
31.58.59.0/24
31.59.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:a0:98:f5:4a:4a:45:18:34:97:3e:a2:89:aa:d4:66:16:6f:
68:1a:9f:40:bf:f6:be:01:4c:31:27:9d:81:df:f4:9b:b3:d1:
23:4f:5f:f5:29:11:ac:91:ab:6c:de:26:82:92:61:9f:23:7e:
22:e6:c1:21:a9:82:b9:45:30:59:1a:4d:cb:89:af:e4:b2:c4:
47:9a:f1:f3:ce:1c:2d:69:8e:a8:46:c8:32:0e:92:4d:bb:d7:
15:82:e6:6e:b4:a0:16:18:6e:65:44:17:ac:96:a7:3d:d5:d3:
f8:44:c6:fb:2f:f5:79:d3:1d:4c:41:e3:dc:6b:3a:a5:13:79:
d5:38:ea:e2:ec:15:92:c4:e8:48:5a:24:c6:37:96:c3:a8:80:
67:93:3d:c7:6b:3d:34:49:45:d9:80:09:2e:f7:a3:95:b8:bd:
fd:37:66:40:7c:41:5f:9f:51:20:0d:23:64:8f:26:83:22:c9:
8c:6c:29:e4:74:5b:4c:04:50:02:ae:90:a5:a1:54:f4:66:49:
2b:cf:40:ed:01:ac:c5:23:aa:0b:5a:dd:0c:a3:4b:ff:bb:91:
ff:d4:0d:ea:e0:08:fe:ae:41:dc:cc:7d:9f:f2:4b:44:80:53:
a6:84:eb:ca:bc:02:38:77:66:6f:7d:38:8c:e6:fd:b8:2d:d8:
65:e9:7e:e0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZK+CanxKyWEo9vAmUcdftTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDI0MTAxOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGJlZmY3MTkwZThjOGNiMWE1YjcxMzUyZjgxZWNmNzA4M2U0MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW3OBSnp6aR4jDBQdNQdLrt4NosS
HPZlZIeHWY4enAsL57Q0B+SojE8UHTtsCaE6pcylKz/wqKRloAdMmMg5DCOAzdOS
n+PHImS2NCZd308Siq7axHun+JNy7QzSpCOsuyQTMpszr3Suk/PbJ8GqfYC1a2AH
0EZt/pNLn9EIwJ9u7LgmtK5efcMJv6EHHZT3om3YWG8Nuuj0dD7S9BKoU5mLjtH/
8TFq6D/gMUDecVTiLfmZrGg9N61/tGBceohSUlC/mdAOXZYTvNjh+1P834xndmLu
3neAfL5TmY7X5sOyUfPywH8ld5qmVQhn7tNUqv6GnCDYffqYudR4uZfneQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFP2+/3GQ6MjLGltxNS+B7PcIPkFgMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvX2I3X2NaRG95TXNhVzNFMUw0SHM5d2ctUVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAHzkLAwQA
HzmDAwQAHzmWAwQAHzmwAwQBHzmyMAwDBAAfObUDBAMfObADBAAfOjEDBAAfOjsD
BAIfO8AwDQYJKoZIhvcNAQELBQADggEBAB6gmPVKSkUYNJc+oomq1GYWb2gan0C/
9r4BTDEnnYHf9Juz0SNPX/UpEayRq2zeJoKSYZ8jfiLmwSGpgrlFMFkaTcuJr+Sy
xEea8fPOHC1pjqhGyDIOkk271xWC5m60oBYYbmVEF6yWpz3V0/hExvsv9XnTHUxB
49xrOqUTedU46uLsFZLE6EhaJMY3lsOogGeTPcdrPTRJRdmACS73o5W4vf03ZkB8
QV+fUSANI2SPJoMiyYxsKeR0W0wEUAKukKWhVPRmSSvPQO0BrMUjqgta3QyjS/+7
kf/UDergCP6uQdzMfZ/yS0SAU6aE68q8Ajh3Zm99OIzm/bgt2GXpfuA=
-----END CERTIFICATE-----
Generated at Thu Oct 24 19:18:19 2024 by rpki-client on console-ams.rpki-client.org