Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dAGtaUdGBYD7s3M9ey7QT0KZ4vU.roa
File: dAGtaUdGBYD7s3M9ey7QT0KZ4vU.roa (raw, json)
Hash identifier: 4Y9EFKzU4rpQUS2R5e/sousN+uJFvKC3w4dKJE8CkO4=
Subject key identifier: 74:01:AD:69:47:46:05:80:FB:B3:73:3D:7B:2E:D0:4F:42:99:E2:F5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01928B4ADCE0594D5E708CA983DDDEAEFAB6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dAGtaUdGBYD7s3M9ey7QT0KZ4vU.roa
Signing time: Mon 14 Oct 2024 13:49:52 +0000
ROA not before: Mon 14 Oct 2024 13:49:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215071
IP address blocks: 31.57.77.0/24 maxlen: 24
31.57.103.0/24 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.57.117.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.230.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 15:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:4a:dc:e0:59:4d:5e:70:8c:a9:83:dd:de:ae:fa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 13:49:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7401ad6947460580fbb3733d7b2ed04f4299e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:6d:5f:52:74:e1:01:2c:4e:14:2e:45:ab:
7b:75:70:cd:e5:d5:52:9f:f5:65:3d:b9:cd:74:8d:
cb:2f:7d:fb:96:0b:fe:b3:41:77:21:d5:7e:e8:06:
12:c2:d7:50:85:66:35:a3:92:a0:a0:10:b6:0f:4e:
54:14:34:d4:c6:cd:72:66:4b:12:f7:43:b9:7e:a1:
6b:d6:9e:85:bc:90:39:84:bd:f8:77:82:fe:47:26:
6c:02:53:20:66:5b:d0:89:60:61:db:cb:51:fe:30:
3c:ff:07:e9:42:06:59:4d:7a:59:ad:9b:fd:de:8c:
5c:9a:0c:33:31:0b:9e:73:7e:8b:17:d9:45:d8:ea:
b6:3d:34:8f:4d:71:cc:33:2e:b6:a8:b8:0e:71:39:
26:3d:c6:94:65:aa:55:6d:15:e6:81:a5:8c:a5:ae:
bb:af:a5:4a:e2:b8:34:f6:48:8a:d2:00:50:28:66:
56:cc:39:96:32:a4:44:a3:90:a1:e4:06:58:3a:66:
98:f0:12:1a:ef:9a:7f:d8:f6:f2:a9:72:bf:8f:32:
37:cc:ac:18:2a:b9:60:e1:d4:a8:e4:43:fe:f9:53:
be:be:e0:4b:c8:7c:f8:c3:0b:4b:2f:66:dd:0f:af:
1d:67:68:c7:35:be:be:9b:a6:b9:bc:f1:f5:3a:c7:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:AD:69:47:46:05:80:FB:B3:73:3D:7B:2E:D0:4F:42:99:E2:F5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dAGtaUdGBYD7s3M9ey7QT0KZ4vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.77.0/24
31.57.103.0/24
31.57.113.0-31.57.118.255
31.57.230.0/24
31.57.249.0-31.57.251.255
Signature Algorithm: sha256WithRSAEncryption
44:20:db:97:92:39:02:d0:db:6e:85:60:4a:5b:95:7f:62:d0:
1b:63:00:16:22:c0:82:a7:2c:a8:ee:dd:5d:25:d5:59:25:f1:
33:a2:20:1e:ac:e7:57:d1:81:f0:3b:d2:13:cd:c0:c6:42:1e:
27:bb:58:52:8b:8e:dd:c8:93:39:f1:dd:2f:c2:55:20:ba:21:
c0:c6:b9:d4:d1:ba:c7:17:9d:78:39:8d:b7:68:df:6b:c9:f0:
92:31:1d:b9:11:d5:8e:ce:75:d8:55:33:21:a7:91:13:57:92:
8d:dd:33:74:74:f6:35:92:85:11:19:25:a0:9c:96:1a:c9:f2:
9e:4e:87:6b:f3:fb:41:35:42:76:f4:30:dc:da:8e:29:d7:41:
c3:fe:ec:c8:ea:3e:0f:a6:05:a3:16:a1:ba:0c:19:90:a8:a7:
bb:58:e9:5a:25:70:9c:56:d0:b1:c4:fb:3b:2b:82:b3:5e:af:
33:7b:81:b5:b5:ef:7f:fe:f3:bc:5c:a7:52:29:70:a8:f8:23:
31:0e:1a:10:17:bf:86:a7:56:94:8d:72:a4:b2:54:1c:da:35:
95:5a:18:1f:0e:97:c0:f9:08:20:57:ab:f3:45:ec:cf:0c:42:
56:58:6e:05:a2:ba:31:42:01:bd:d0:ce:43:87:99:ab:52:70:
ee:f9:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 18:11:12 2024 by rpki-client on console-ams.rpki-client.org