Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dnOKOIlJhz_f3JDkrmwtHFC6mAU.roa
File: dnOKOIlJhz_f3JDkrmwtHFC6mAU.roa (raw, json)
Hash identifier: 2xpoBcqIe6L3jfourYXyxQQAXHOCPdHsanskCqiJIVw=
Subject key identifier: 76:73:8A:38:89:49:87:3F:DF:DC:90:E4:AE:6C:2D:1C:50:BA:98:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019272EA05412BC9FB3CD3044FB8C94AAF17
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dnOKOIlJhz_f3JDkrmwtHFC6mAU.roa
Signing time: Wed 09 Oct 2024 20:13:12 +0000
ROA not before: Wed 09 Oct 2024 20:13:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 31.56.35.0/24 maxlen: 24
31.57.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 06:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:72:ea:05:41:2b:c9:fb:3c:d3:04:4f:b8:c9:4a:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 9 20:13:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76738a388949873fdfdc90e4ae6c2d1c50ba9805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:6d:fc:3b:83:2f:0c:56:07:4e:2f:06:d0:
6d:17:71:e6:b3:df:af:52:bc:41:87:25:05:aa:2e:
ee:e2:1d:38:07:61:70:9b:94:cb:fb:57:b1:78:11:
e8:63:ad:59:2e:73:af:85:3f:f5:77:f7:c1:8b:bb:
c0:d2:bd:d7:77:f5:75:8e:17:51:13:cc:e1:9d:2b:
cf:a4:c3:67:c4:53:5e:a1:53:ac:7a:01:26:42:97:
2a:e6:c4:ee:02:35:5f:e9:d3:44:01:a5:10:86:d5:
6b:0f:54:9c:74:82:a8:ec:e4:24:e9:a7:70:ee:e5:
69:29:68:50:58:18:c1:c2:d1:01:14:74:43:8e:22:
c6:98:44:af:88:1e:4a:55:58:8e:e1:b6:d1:0f:12:
63:67:c9:7b:c8:c5:b2:60:00:e8:fb:d4:30:0d:38:
e7:b4:93:07:38:97:07:39:7c:f5:25:ef:a1:cd:51:
d4:cd:b3:6e:8d:3a:33:11:34:d1:d3:d3:61:e6:c0:
2d:4a:e3:f6:48:d6:7b:a1:07:63:ae:46:91:5d:05:
d1:ee:2e:46:50:99:c7:60:f2:00:93:87:fc:63:f0:
02:17:62:1d:ac:af:69:bb:30:2c:b6:bf:73:a1:ef:
b2:07:89:ec:8d:df:8f:5f:9a:85:03:cc:fd:9c:8b:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:8A:38:89:49:87:3F:DF:DC:90:E4:AE:6C:2D:1C:50:BA:98:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dnOKOIlJhz_f3JDkrmwtHFC6mAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.57.205.0/24
Signature Algorithm: sha256WithRSAEncryption
24:56:69:cd:9c:64:7e:1c:e4:c5:2d:d9:46:c3:09:4c:5f:0b:
99:b1:d8:39:36:3a:9e:a2:ed:14:af:b1:58:de:32:9d:5c:16:
39:fa:46:db:e3:08:0d:8c:44:b6:1b:55:17:b2:17:c9:72:15:
81:f2:8f:03:a3:60:41:16:b8:af:5e:e4:65:63:17:74:c1:2c:
ee:95:93:e1:d2:2d:3d:55:35:4b:25:f9:de:85:f2:d1:a4:bd:
74:79:72:c0:53:81:59:a2:ae:9a:54:87:c0:2a:53:31:92:13:
54:97:3e:67:e0:09:60:29:0d:10:66:2b:ab:1e:2a:9b:45:08:
e4:7d:f3:53:01:8d:14:32:5f:75:ab:c1:2b:8f:cb:0c:92:56:
a7:03:6b:28:c8:d0:6c:93:54:06:ea:4b:cc:78:28:da:f1:dc:
1e:a2:4b:41:74:0d:54:ae:08:54:37:eb:04:dc:c4:d2:33:6c:
cb:09:60:d8:bc:b4:46:e7:2d:8e:6a:ea:75:95:14:aa:e4:ca:
b4:a7:47:ee:2a:52:ef:14:97:27:cb:2f:08:0b:9d:68:1a:a6:
d8:bc:cc:70:ef:55:04:76:f5:38:4d:42:66:c1:57:44:5c:b2:
25:db:96:6c:1b:d0:07:e9:77:06:b8:f9:83:01:e6:7a:b7:b1:
3a:94:f5:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJy6gVBK8n7PNMET7jJSq8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA5MjAxMzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjczOGEzODg5NDk4NzNmZGZkYzkwZTRhZTZjMmQxYzUwYmE5ODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRZt/DuDLwxWB04vBtBtF3Hms9+v
UrxBhyUFqi7u4h04B2Fwm5TL+1exeBHoY61ZLnOvhT/1d/fBi7vA0r3Xd/V1jhdR
E8zhnSvPpMNnxFNeoVOsegEmQpcq5sTuAjVf6dNEAaUQhtVrD1ScdIKo7OQk6adw
7uVpKWhQWBjBwtEBFHRDjiLGmESviB5KVViO4bbRDxJjZ8l7yMWyYADo+9QwDTjn
tJMHOJcHOXz1Je+hzVHUzbNujTozETTR09Nh5sAtSuP2SNZ7oQdjrkaRXQXR7i5G
UJnHYPIAk4f8Y/ACF2IdrK9puzAstr9zoe+yB4nsjd+PX5qFA8z9nItONQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHZzijiJSYc/39yQ5K5sLRxQupgFMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZG5PS09JbEpoel9mM0pEa3Jtd3RIRkM2bUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgjAwQA
HznNMA0GCSqGSIb3DQEBCwUAA4IBAQAkVmnNnGR+HOTFLdlGwwlMXwuZsdg5Njqe
ou0Ur7FY3jKdXBY5+kbb4wgNjES2G1UXshfJchWB8o8Do2BBFrivXuRlYxd0wSzu
lZPh0i09VTVLJfnehfLRpL10eXLAU4FZoq6aVIfAKlMxkhNUlz5n4AlgKQ0QZiur
HiqbRQjkffNTAY0UMl91q8Erj8sMklanA2soyNBsk1QG6kvMeCja8dweoktBdA1U
rghUN+sE3MTSM2zLCWDYvLRG5y2Oaup1lRSq5Mq0p0fuKlLvFJcnyy8IC51oGqbY
vMxw71UEdvU4TUJmwVdEXLIl25ZsG9AH6XcGuPmDAeZ6t7E6lPUL
-----END CERTIFICATE-----
Generated at Mon Oct 14 09:16:08 2024 by rpki-client on console-ams.rpki-client.org