Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d5a7gezV80OshtDET89T23vqFVQ.roa
File: d5a7gezV80OshtDET89T23vqFVQ.roa (raw, json)
Hash identifier: PgKcrRpXcXkJRVDwTZwcyOYKNtMC0natRTR+nPNyyng=
Subject key identifier: 77:96:BB:81:EC:D5:F3:43:AC:86:D0:C4:4F:CF:53:DB:7B:EA:15:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019253C8EB460F5F502B32C7E39DA24D7AC6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d5a7gezV80OshtDET89T23vqFVQ.roa
Signing time: Thu 03 Oct 2024 19:08:49 +0000
ROA not before: Thu 03 Oct 2024 19:08:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 31.57.189.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.204.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 16:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:c8:eb:46:0f:5f:50:2b:32:c7:e3:9d:a2:4d:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 19:08:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7796bb81ecd5f343ac86d0c44fcf53db7bea1554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:4a:9a:37:12:3b:7e:2e:9f:80:2f:6a:d4:
73:a8:78:6e:84:70:9c:df:ec:59:ae:28:ae:e1:1b:
29:81:4a:5b:67:09:2c:b0:c8:71:7f:56:15:27:03:
5f:b2:07:6e:4b:db:38:eb:96:dd:bb:37:95:d6:4f:
0a:89:15:48:12:b9:be:7f:66:2e:c5:5a:29:78:6a:
7d:fb:73:e9:68:b2:d1:01:73:62:ab:00:10:32:31:
06:ee:8a:d9:45:ac:19:49:da:4f:86:cc:c1:33:67:
91:8a:28:38:c2:93:d6:7b:3d:eb:d3:96:99:0e:22:
23:8c:b0:09:54:3c:cd:b3:7f:6c:5b:1b:56:1d:dc:
fe:8b:77:11:2b:bd:04:89:44:f1:4c:ef:ae:87:11:
50:c1:04:e5:0d:73:ca:73:7f:a4:3c:d8:d0:72:61:
c2:0d:5d:42:a5:2b:07:25:fd:ef:43:9e:82:20:3c:
87:ab:80:a8:61:d5:4b:56:f7:ac:ca:a5:97:f6:98:
79:72:d9:e6:8e:a3:20:d7:1e:a8:7d:0d:9b:e1:a6:
28:a1:16:69:e6:d9:c6:6f:c2:75:06:51:01:76:b8:
4f:e8:6e:f5:5a:e5:6e:e5:c7:ba:ff:19:06:b9:e1:
a5:b7:3e:de:23:15:2f:b6:9e:37:e1:33:cc:cd:6d:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:BB:81:EC:D5:F3:43:AC:86:D0:C4:4F:CF:53:DB:7B:EA:15:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d5a7gezV80OshtDET89T23vqFVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.189.0/24
31.57.191.0/24
31.57.204.0/24
31.57.228.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e2:ba:cf:a0:00:9a:b2:de:43:8d:eb:59:f7:af:9b:aa:c1:
c2:0b:bd:2f:31:bc:39:40:1f:4a:a8:12:f4:cc:ac:a4:f0:3e:
ad:48:61:b3:ca:1b:68:42:86:cf:4c:a7:49:1b:78:77:78:b4:
69:5b:93:b8:5f:85:dd:96:60:0e:6c:44:8d:bf:91:7b:d9:de:
a8:14:0c:f2:24:50:57:78:78:b6:aa:32:26:19:90:6f:48:32:
c9:0f:a9:d2:94:28:c9:97:65:96:68:bd:6f:44:a5:b7:14:b8:
d5:d9:44:ff:66:c8:7f:48:ca:f1:c8:8b:64:57:b3:e3:4c:99:
b9:15:00:4f:a7:d4:8d:e0:84:e1:c5:6b:2e:f2:35:81:c1:c8:
50:05:12:e3:08:aa:27:df:32:a5:55:b4:d7:88:7a:fa:b5:6d:
88:00:14:c6:05:69:49:8b:09:a0:93:18:c7:a9:af:a3:02:31:
95:4b:20:92:13:99:c4:8d:47:c5:49:c5:ea:77:ea:76:a7:90:
fc:06:97:39:a5:cd:fc:d7:50:3a:82:4b:cd:f1:9f:2b:40:91:
53:12:0f:5a:30:32:9f:ad:46:4d:3a:49:84:66:0f:52:f0:12:
10:c5:cc:bb:03:2e:3c:90:2a:e5:60:eb:e3:be:5e:5b:8f:cb:
42:19:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 23:07:56 2024 by rpki-client on console-ams.rpki-client.org