Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cxfN83jy6xt_ZInIzX4sT-J1wfE.roa
File: cxfN83jy6xt_ZInIzX4sT-J1wfE.roa (raw, json)
Hash identifier: 3qdSdOM1ZRW740tKEkl3y0JcW8ZJwXPsdwGGSxTVAY0=
Subject key identifier: 73:17:CD:F3:78:F2:EB:1B:7F:64:89:C8:CD:7E:2C:4F:E2:75:C1:F1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191D34A87DE8543B22838093ED4FA7265EA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cxfN83jy6xt_ZInIzX4sT-J1wfE.roa
Signing time: Sun 08 Sep 2024 20:19:22 +0000
ROA not before: Sun 08 Sep 2024 20:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.57.130.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 08 Oct 2024 09:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d3:4a:87:de:85:43:b2:28:38:09:3e:d4:fa:72:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 8 20:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7317cdf378f2eb1b7f6489c8cd7e2c4fe275c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:3d:5b:ca:23:a2:cc:18:a0:82:65:96:ff:
c5:eb:38:17:72:76:be:91:33:1b:11:ab:35:6b:9d:
0a:ae:08:8a:1e:23:48:d8:9e:28:45:c0:69:57:66:
66:ed:97:15:72:06:3a:91:17:ea:ab:97:56:a0:04:
f8:22:98:73:e1:fd:61:78:02:15:52:46:03:27:53:
eb:8a:a2:76:20:a5:da:3e:d1:a0:19:25:e8:41:4b:
2a:d4:f8:fe:d7:5b:8b:83:bf:e7:5a:07:81:7f:79:
3c:4a:83:77:5c:46:5b:44:90:05:8e:b9:0f:53:e1:
ce:35:c9:ed:29:ca:96:b7:1d:32:3c:65:b0:76:47:
a0:0e:71:a1:bb:6d:33:55:47:08:76:70:2b:d7:ee:
81:3b:35:22:7b:4a:aa:ac:c1:7d:ac:87:80:6c:69:
6b:15:60:3b:09:78:a9:bd:6b:c6:20:40:d1:3c:82:
80:cf:dc:59:c2:1d:6a:93:74:d7:5f:eb:92:f6:c2:
d8:53:ae:4a:bf:69:7f:83:fe:e4:82:a9:cc:77:16:
07:6d:21:f1:b2:87:43:c4:ce:7b:6e:9f:51:45:88:
70:df:17:43:dd:06:a6:93:9d:cd:bd:68:44:71:f3:
26:78:fa:1c:70:50:b0:88:0e:1e:0c:4b:b2:88:b0:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:CD:F3:78:F2:EB:1B:7F:64:89:C8:CD:7E:2C:4F:E2:75:C1:F1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cxfN83jy6xt_ZInIzX4sT-J1wfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.130.0-31.57.133.255
Signature Algorithm: sha256WithRSAEncryption
8d:d5:71:ad:b1:8a:b7:22:7f:29:31:8f:4f:ab:b2:bb:4a:43:
34:60:59:7f:76:c3:39:ab:9f:02:3b:94:fa:16:97:b4:06:3f:
52:8d:26:06:cd:8b:fd:80:5d:c3:ab:c6:44:46:be:25:23:be:
bd:f7:12:3f:e6:56:5e:1e:bb:86:64:b8:72:22:be:8d:7d:e6:
ee:72:88:ef:e6:dd:6a:53:39:19:67:b5:8d:ac:25:90:69:07:
0e:23:30:89:17:87:d7:26:5a:4a:05:30:43:0a:9c:31:4f:5c:
77:28:86:2a:86:b5:c8:2b:23:39:64:65:60:66:00:c1:05:ab:
b1:46:8c:d0:f1:bc:e7:3c:c7:75:c4:94:04:00:2a:81:47:bb:
36:e4:b3:8e:2d:22:19:a5:ad:fb:8b:0b:d1:52:3d:eb:48:ee:
78:e0:59:62:5a:0a:08:ae:05:eb:43:53:98:0f:bb:b7:f9:e6:
03:a9:88:9e:de:28:a4:c8:50:a6:bc:c2:77:1d:e7:79:a1:5f:
f9:af:76:43:ee:2f:6f:e3:de:cf:b4:0d:35:85:bd:df:cf:22:
92:1a:11:53:0c:d7:bf:b0:8d:a1:9a:15:e1:57:34:c8:d6:02:
4a:82:cb:3c:13:91:b4:d4:8f:42:10:02:52:22:0e:a5:87:b1:
b7:8f:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 13:32:52 2024 by rpki-client on console-fra.rpki-client.org