Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dpY6LFq2g0Di0NW1a3G5KfqddBs.roa
File: dpY6LFq2g0Di0NW1a3G5KfqddBs.roa (raw, json)
Hash identifier: rs4C2JFB7E+U1dwZ9KNAp2jorrNz+fHHzOsdBFvCWYU=
Subject key identifier: 76:96:3A:2C:5A:B6:83:40:E2:D0:D5:B5:6B:71:B9:29:FA:9D:74:1B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019271095DD26DEE7414DAC7B2377DFA80C6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dpY6LFq2g0Di0NW1a3G5KfqddBs.roa
Signing time: Wed 09 Oct 2024 11:28:12 +0000
ROA not before: Wed 09 Oct 2024 11:28:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 15:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:09:5d:d2:6d:ee:74:14:da:c7:b2:37:7d:fa:80:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 9 11:28:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76963a2c5ab68340e2d0d5b56b71b929fa9d741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:13:f6:e7:b5:84:a3:6a:6d:a5:e4:8b:9d:
27:80:00:29:80:ab:90:be:8a:87:18:6b:11:57:fc:
65:1d:5c:2e:91:6c:07:00:d4:a1:c4:68:47:ab:2c:
0a:75:46:c9:e6:a8:62:cc:33:e8:88:42:83:49:47:
d4:be:e2:01:5e:1b:c4:bf:1e:01:53:94:63:3a:8c:
1f:dd:43:3d:0b:8a:01:83:b9:72:80:92:27:cd:8c:
a4:fb:6d:83:08:79:bc:77:f2:da:9d:2b:0a:73:ba:
af:8c:0b:12:9a:69:4c:96:c0:1f:89:50:be:5b:69:
39:d1:6e:4e:d3:bf:95:c8:62:18:e4:48:94:b0:fd:
23:b3:4d:73:ce:2e:77:52:48:4a:a9:6b:b8:7d:6e:
27:98:ec:6b:f7:9d:43:05:76:a6:83:8c:39:a8:8e:
cf:e8:1d:57:b9:35:b6:01:69:0b:04:40:73:a5:32:
1b:d7:f4:6d:48:d0:52:9c:41:1d:2e:bc:cc:1e:e7:
84:e3:ed:62:0a:7b:d1:63:93:51:4a:12:eb:36:3a:
23:97:cb:02:83:34:74:8f:61:9c:27:c8:cf:2c:5f:
91:28:4a:b4:f2:16:6a:a2:e1:8e:84:aa:c8:3b:09:
5e:19:b9:c8:6e:3e:22:c9:93:4c:c9:8e:ad:2a:02:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:3A:2C:5A:B6:83:40:E2:D0:D5:B5:6B:71:B9:29:FA:9D:74:1B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dpY6LFq2g0Di0NW1a3G5KfqddBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.131.0/24
31.57.150.0/24
31.57.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8c:68:02:e9:ca:9e:96:41:fa:b9:61:d3:09:8d:2b:0b:1d:
b3:ac:e1:e4:9c:3f:de:8a:93:17:b0:f8:ea:5c:5f:4d:11:0a:
e8:44:67:7d:15:9b:41:74:f9:4f:43:76:c4:cd:b8:1e:f0:80:
a1:59:e3:29:5b:7d:1e:27:0e:9f:9c:06:19:47:09:84:bb:02:
55:9c:fe:cb:cc:87:f9:b6:e2:56:af:5d:d8:88:a1:5b:1b:2b:
73:6a:ca:41:d5:fe:4e:ba:f3:3f:9e:a6:58:70:8e:ee:06:6c:
a9:59:48:81:4a:ad:36:fd:1e:3d:ec:4a:ff:4b:88:05:08:9b:
a6:5d:96:4f:0a:9b:71:7f:ba:0e:3b:59:34:ee:36:70:49:8f:
be:8c:bf:67:de:6e:fa:54:b3:2f:e9:59:40:25:f0:2a:cd:1b:
9e:4d:c4:41:1b:d6:87:89:9b:b3:1f:5f:8f:80:03:e5:4e:64:
5f:30:66:36:d3:e0:d0:48:3b:ec:77:07:82:a9:08:d9:b6:13:
75:d5:d6:a1:a4:07:3e:5f:72:38:f4:15:42:33:56:77:80:ba:
eb:01:48:b5:ac:0c:f8:67:11:44:6d:41:d6:52:b2:eb:b3:56:
5c:81:c1:b0:32:5e:a7:58:74:78:e3:d2:63:b3:0b:a3:c3:a9:
a3:6c:34:d8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZJxCV3Sbe50FNrHsjd9+oDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA5MTEyODEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Njk2M2EyYzVhYjY4MzQwZTJkMGQ1YjU2YjcxYjkyOWZhOWQ3NDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S0T9ue1hKNqbaXki50ngAApgKuQ
voqHGGsRV/xlHVwukWwHANShxGhHqywKdUbJ5qhizDPoiEKDSUfUvuIBXhvEvx4B
U5RjOowf3UM9C4oBg7lygJInzYyk+22DCHm8d/LanSsKc7qvjAsSmmlMlsAfiVC+
W2k50W5O07+VyGIY5EiUsP0js01zzi53UkhKqWu4fW4nmOxr951DBXamg4w5qI7P
6B1XuTW2AWkLBEBzpTIb1/RtSNBSnEEdLrzMHueE4+1iCnvRY5NRShLrNjojl8sC
gzR0j2GcJ8jPLF+RKEq08hZqouGOhKrIOwleGbnIbj4iyZNMyY6tKgJNZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHaWOixatoNA4tDVtWtxuSn6nXQbMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZHBZNkxGcTJnMERpME5XMWEzRzVLZnFkZEJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzmDAwQA
HzmWAwQAHzmZMA0GCSqGSIb3DQEBCwUAA4IBAQB+jGgC6cqelkH6uWHTCY0rCx2z
rOHknD/eipMXsPjqXF9NEQroRGd9FZtBdPlPQ3bEzbge8IChWeMpW30eJw6fnAYZ
RwmEuwJVnP7LzIf5tuJWr13YiKFbGytzaspB1f5OuvM/nqZYcI7uBmypWUiBSq02
/R497Er/S4gFCJumXZZPCptxf7oOO1k07jZwSY++jL9n3m76VLMv6VlAJfAqzRue
TcRBG9aHiZuzH1+PgAPlTmRfMGY20+DQSDvsdweCqQjZthN11dahpAc+X3I49BVC
M1Z3gLrrAUi1rAz4ZxFEbUHWUrLrs1ZcgcGwMl6nWHR449Jjswujw6mjbDTY
-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:51 2024 by rpki-client on console-ams.rpki-client.org