Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dRjcGLd1fDSj-RpOVGj1YhEKkX0.roa
File: dRjcGLd1fDSj-RpOVGj1YhEKkX0.roa (raw, json)
Hash identifier: Yx4UqLxxpkydGhwiiSiNwxrGdxXbp80SOXZlAx+tMtc=
Subject key identifier: 75:18:DC:18:B7:75:7C:34:A3:F9:1A:4E:54:68:F5:62:11:0A:91:7D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192C498BD8CD1B5442E89861FEF21126B84
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dRjcGLd1fDSj-RpOVGj1YhEKkX0.roa
Signing time: Fri 25 Oct 2024 16:53:17 +0000
ROA not before: Fri 25 Oct 2024 16:53:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 07:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:98:bd:8c:d1:b5:44:2e:89:86:1f:ef:21:12:6b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 25 16:53:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7518dc18b7757c34a3f91a4e5468f562110a917d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:71:47:75:54:e9:b8:26:66:28:ae:2e:55:
c3:21:bb:9e:0e:31:20:be:c4:42:8f:9f:7f:18:3d:
29:0b:c9:6f:25:32:cf:0d:e8:21:fa:de:41:92:15:
ec:80:ad:38:50:75:6c:d5:f3:d4:0c:1a:4c:24:d2:
7d:9c:fe:b6:02:59:ae:f6:21:14:0c:1e:91:15:ea:
cc:ca:c6:a7:b1:7a:2f:ef:09:3a:61:2d:fe:7f:a6:
56:f6:c4:dc:5e:49:25:6d:cb:e6:35:cb:0d:48:94:
4e:fb:fa:3e:f0:be:e0:6c:7a:96:51:96:ba:c4:3b:
be:90:5e:4f:71:c8:32:cc:c5:8d:39:31:64:c7:81:
d7:88:a2:fd:e2:1a:23:b0:74:5a:62:02:e3:b7:b0:
4a:05:d0:ad:5a:1e:85:ca:8d:9b:87:fa:68:ef:36:
59:cd:99:ed:fc:28:02:cc:b2:53:23:29:04:6f:b2:
56:c4:1c:b7:53:a5:58:1b:27:8f:cb:cd:ec:97:69:
07:8f:be:e8:36:ba:af:67:50:8c:12:05:e7:1f:c9:
31:d3:85:9d:5f:c2:fd:e0:f4:e6:83:75:48:36:b3:
15:4c:9c:8d:a4:4d:5e:02:ab:80:37:ea:e0:b5:f4:
99:d1:f0:26:9f:14:6e:24:27:41:c1:8d:fa:92:1d:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:18:DC:18:B7:75:7C:34:A3:F9:1A:4E:54:68:F5:62:11:0A:91:7D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dRjcGLd1fDSj-RpOVGj1YhEKkX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
Signature Algorithm: sha256WithRSAEncryption
27:cb:ca:a8:5e:af:85:2f:52:89:77:aa:9b:8d:27:68:a2:30:
94:6a:44:8a:9b:31:12:df:fb:ed:96:2e:5d:b6:9e:b7:1d:ae:
60:34:46:c4:d9:da:26:29:bf:d9:67:7b:34:ba:10:c0:38:76:
8c:65:d9:00:14:1b:fe:07:93:76:f1:7c:1a:eb:9d:06:d5:32:
05:9b:6f:fc:42:6a:f5:e7:6b:71:9d:3a:f6:11:4d:b6:52:e5:
2e:2e:21:99:78:d6:d1:9a:b0:22:8e:7f:b3:3b:2c:91:23:61:
74:ba:b5:a5:40:b3:1c:97:ec:2a:d6:61:fc:76:02:14:da:51:
8c:60:7f:40:97:5e:7f:1d:99:4b:d9:57:07:d2:9a:66:bb:a3:
a9:93:4a:23:e3:85:22:b7:b1:92:64:0a:a7:3c:42:61:66:ae:
90:f0:a9:e5:4e:36:ff:9f:da:da:cd:ef:71:35:a9:11:70:de:
bf:62:94:65:70:57:2e:d6:e0:af:89:9a:f9:3c:54:fc:be:ac:
f6:af:ba:3f:db:d2:26:c5:c8:a3:e8:e2:74:ee:02:9c:2c:6f:
ba:05:d0:2e:e4:50:28:4a:26:e0:c2:60:41:d8:da:ea:14:a7:
ae:80:88:da:05:0c:5d:90:f6:cb:22:c7:41:3e:81:ce:5a:31:
97:1d:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 08:56:18 2024 by rpki-client on console-fra.rpki-client.org