Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bxvfD_ydE5xzgoUnFboj0OWr_wY.roa
File: bxvfD_ydE5xzgoUnFboj0OWr_wY.roa (raw, json)
Hash identifier: ic4Nsxmr9+qixYI6H14rjl9e7661H7ZjDzp0dJPfEkc=
Subject key identifier: 6F:1B:DF:0F:FC:9D:13:9C:73:82:85:27:15:BA:23:D0:E5:AB:FF:06
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019290DC55D3D5702D27C8C122B43D35FE66
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bxvfD_ydE5xzgoUnFboj0OWr_wY.roa
Signing time: Tue 15 Oct 2024 15:46:51 +0000
ROA not before: Tue 15 Oct 2024 15:46:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 31.58.248.0/22 maxlen: 24
31.58.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 14:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:dc:55:d3:d5:70:2d:27:c8:c1:22:b4:3d:35:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 15 15:46:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f1bdf0ffc9d139c7382852715ba23d0e5abff06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:00:ef:2b:9a:71:40:73:7c:53:47:c8:58:
8c:5e:ef:ed:e4:e0:7f:06:b1:28:a1:fe:4d:ec:4a:
9a:58:1b:27:f4:bf:59:6a:63:54:15:aa:7b:52:f5:
28:2e:8f:43:e8:20:68:47:9a:a3:00:0f:09:8f:01:
a6:cc:e5:39:98:c3:73:9f:ab:c2:23:fb:d9:9f:06:
54:90:56:ca:08:3a:67:01:7e:7b:9a:8e:23:82:6d:
50:89:f8:c4:3f:63:6d:a2:92:4e:5a:b8:8b:2e:10:
35:70:d9:23:e8:b8:cd:30:a8:d7:b0:9e:08:f9:ec:
43:39:10:bd:91:48:80:ca:d8:65:a2:f6:2a:69:54:
c1:b0:20:18:a7:27:1a:3b:c2:dc:2c:74:85:5a:a8:
ae:0f:8c:d7:2d:2f:8b:35:12:31:22:5d:64:7f:12:
2f:8c:d6:82:6e:60:9c:2e:91:c7:1f:2e:2b:ef:4f:
4a:ab:f2:0e:e7:cf:40:c7:76:7c:da:e7:0b:18:65:
2e:18:69:b4:c2:94:79:3f:4c:2c:05:4a:79:22:a1:
96:06:cf:a3:03:23:0f:c4:cf:0f:df:38:e5:a8:ff:
bc:cc:2c:dd:90:f8:a7:3d:77:61:6c:cc:4c:0e:67:
bd:20:e2:21:02:cc:7c:ae:dc:44:45:b6:45:1d:ad:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:DF:0F:FC:9D:13:9C:73:82:85:27:15:BA:23:D0:E5:AB:FF:06
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bxvfD_ydE5xzgoUnFboj0OWr_wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.248.0/22
31.58.255.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a7:0c:b8:ce:b5:fa:b8:b1:d8:61:e7:f0:b5:86:50:2c:a5:
89:c2:f9:52:39:db:55:6c:b7:e3:77:cb:1e:ec:f8:14:a1:09:
e3:bc:46:b7:b5:5f:88:82:44:95:b1:19:06:e4:ee:a7:44:5d:
9e:c8:cd:c0:ff:fe:ad:a9:fe:32:ef:68:1d:c7:c9:f9:15:59:
46:75:77:af:d2:83:32:8d:83:8f:57:83:5b:cf:80:60:51:5d:
f4:fe:d3:60:ca:60:f0:41:fa:08:43:cd:81:95:6a:98:de:ec:
57:ec:ec:69:33:54:09:77:bc:1d:e8:32:3a:44:43:94:c6:6a:
86:69:d6:f5:c4:95:47:f9:6a:94:49:2d:95:23:af:1a:30:95:
6d:c3:ec:ca:89:c2:6a:02:92:42:27:a7:9a:1d:97:02:26:a6:
0e:71:cc:02:c5:17:f5:a2:e8:13:0c:f8:0c:fe:36:98:2f:54:
3e:80:60:1a:72:17:ac:0b:6a:6b:c3:a0:09:cb:df:6e:11:7d:
51:3f:29:ae:b9:9f:41:a7:40:2c:bd:7d:65:46:e7:d4:f8:ad:
1a:ee:d0:cc:b8:c2:27:42:76:07:95:8a:fb:76:af:be:3a:80:
ae:ce:a6:87:9e:d6:ae:33:6b:41:88:7f:6b:f5:ae:8b:bd:20:
d3:e8:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 17:55:16 2024 by rpki-client on console-ams.rpki-client.org