Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e2zfk2DRJRCphqfIDtbjsluU-Dg.roa
File: e2zfk2DRJRCphqfIDtbjsluU-Dg.roa (raw, json)
Hash identifier: d0g0C3TUKdlomU6mZeHL0IYYDhBVTm2qiEul7lSUaPA=
Subject key identifier: 7B:6C:DF:93:60:D1:25:10:A9:86:A7:C8:0E:D6:E3:B2:5B:94:F8:38
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192E67A37748B067E025ADBB15F4A856E48
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e2zfk2DRJRCphqfIDtbjsluU-Dg.roa
Signing time: Fri 01 Nov 2024 06:47:02 +0000
ROA not before: Fri 01 Nov 2024 06:47:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 31.56.160.0/21 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.240.0/22 maxlen: 24
31.57.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 07:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:7a:37:74:8b:06:7e:02:5a:db:b1:5f:4a:85:6e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 06:47:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b6cdf9360d12510a986a7c80ed6e3b25b94f838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:cf:99:7d:5a:9d:35:09:a9:3c:85:6a:e3:
85:7d:d2:1c:ab:48:0f:bf:80:94:e6:b8:38:f3:b4:
84:6c:1f:74:f7:d7:c9:20:6b:27:d7:f1:b7:c7:40:
92:d7:b0:9f:a4:ae:bf:96:3a:12:6e:c2:b9:2b:69:
7e:c4:cf:03:05:e5:ba:4e:32:e4:0a:9c:63:aa:1c:
4d:06:6b:6a:b5:f1:12:ef:87:7b:35:eb:b1:5a:4a:
a2:74:61:bd:7d:23:60:0c:e1:57:87:52:30:1b:f1:
70:ae:96:6e:bc:db:05:0d:c8:ea:66:cb:eb:2a:b7:
6d:2e:be:6b:99:bf:85:78:50:15:4d:09:d9:cd:d2:
e5:9b:c1:d7:d4:e7:a2:a0:9c:cc:97:ff:ba:48:dd:
6c:96:e6:4e:7b:a0:48:9d:14:08:0c:be:f5:e0:0d:
81:3f:97:81:19:cf:21:a7:89:3f:02:0e:33:82:c5:
2c:69:8a:6c:4b:8f:c7:84:95:cb:b5:78:77:62:ec:
42:f0:df:b2:9b:13:8e:54:c5:5a:38:8c:d7:50:83:
f7:d6:b4:3c:55:30:46:fd:20:c4:91:03:f9:94:0d:
5c:26:2c:17:e5:bc:25:d5:a8:12:70:2c:75:87:75:
79:ac:82:7f:1f:18:8e:99:fe:db:19:2b:7a:38:b8:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6C:DF:93:60:D1:25:10:A9:86:A7:C8:0E:D6:E3:B2:5B:94:F8:38
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e2zfk2DRJRCphqfIDtbjsluU-Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.160.0/21
31.57.192.0/22
31.57.202.0/23
31.57.224.0/22
31.57.232.0/22
31.57.240.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:9d:bb:4e:71:3f:94:0e:e2:c0:97:4a:b7:9a:c4:ac:64:09:
a6:39:63:54:e2:cc:22:98:62:0f:13:c9:4d:61:84:d8:73:bb:
04:be:5c:7a:7c:4c:1f:b4:5b:33:f8:c5:8f:16:9b:b5:ff:eb:
7f:8c:cd:5f:ec:82:b1:b8:b8:7c:39:89:01:00:81:2c:38:d1:
89:c9:ed:9f:30:62:c2:10:2d:f4:fb:cb:54:24:92:65:25:c7:
09:b9:53:34:f7:0f:b7:d1:6c:a1:cf:c1:06:96:92:6c:1a:d6:
f5:46:8c:25:15:e8:fa:c8:bc:7c:77:96:fc:35:38:30:76:27:
31:9a:df:e9:f1:45:37:78:ee:6a:68:d2:9f:cd:64:ad:50:f3:
c5:db:97:36:33:7f:6c:87:97:18:71:82:a0:82:94:b6:82:09:
80:0b:9d:e2:c7:34:df:f2:d5:fa:ac:07:06:dd:09:9b:2f:e7:
88:aa:30:55:f5:c8:72:73:7d:58:a1:e2:91:a1:fc:c3:30:15:
a3:b0:2b:23:9e:ff:78:4a:bd:23:ba:fe:59:73:cd:74:b3:9d:
69:23:47:94:ef:f4:1f:52:7d:63:ec:af:f8:6c:a4:02:37:26:
d6:dc:e7:3e:63:80:64:80:0b:3b:75:7e:2f:b3:e9:ab:84:f6:
78:66:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 09:06:26 2024 by rpki-client on console-fra.rpki-client.org