Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/etIGfk6l4ISdcWX3WCTHculTdLM.roa
File: etIGfk6l4ISdcWX3WCTHculTdLM.roa (raw, json)
Hash identifier: RbyRF0oNKzBhWLcGNZMOS93t2JvsKzdjxUUYLw6V/zs=
Subject key identifier: 7A:D2:06:7E:4E:A5:E0:84:9D:71:65:F7:58:24:C7:72:E9:53:74:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019289BDD4D5720591A72160BA7ED1810508
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/etIGfk6l4ISdcWX3WCTHculTdLM.roa
Signing time: Mon 14 Oct 2024 06:36:12 +0000
ROA not before: Mon 14 Oct 2024 06:36:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 31.56.35.0/24 maxlen: 24
31.57.205.0/24 maxlen: 24
31.57.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 20:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:bd:d4:d5:72:05:91:a7:21:60:ba:7e:d1:81:05:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 06:36:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ad2067e4ea5e0849d7165f75824c772e95374b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:e0:c2:ef:84:83:21:c7:95:74:81:5c:17:
e3:b0:e4:b5:6e:b1:99:3f:b7:d6:19:bc:07:e0:30:
3e:f5:c7:fb:90:d9:a1:b6:2c:db:ef:01:3f:4d:22:
a4:dc:04:0f:5d:a7:77:d7:3a:00:17:6b:c0:11:c7:
58:df:d0:37:7b:e2:10:0e:65:51:99:5e:13:47:a4:
17:db:c5:ab:75:7d:49:34:a2:2e:3a:77:42:86:cd:
e0:93:8a:a2:f5:5a:b7:0d:94:03:32:1d:71:b2:bf:
fe:68:9e:52:53:df:a0:c0:74:19:af:79:ca:18:d8:
3a:35:bf:94:94:d5:d0:88:6b:1f:37:9d:0d:78:76:
f4:6d:d3:2b:16:79:3a:48:d1:ff:9a:28:98:da:43:
c9:cf:00:81:d8:27:71:c3:c1:08:6a:66:28:24:4a:
bf:1c:57:3e:d5:6e:ef:dd:4c:57:3c:3c:ee:11:e5:
0b:cb:ab:e3:7f:59:65:04:4f:74:e2:91:27:0b:0d:
20:21:61:2e:fe:1f:46:69:35:fd:7c:28:44:3f:e2:
68:c2:70:39:d5:fc:19:71:62:17:5b:bb:82:03:76:
6b:68:49:84:1c:97:6d:56:b3:60:a4:db:c9:4a:09:
c3:39:93:10:b6:c1:e3:33:6a:48:f0:fc:9f:7d:f3:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:06:7E:4E:A5:E0:84:9D:71:65:F7:58:24:C7:72:E9:53:74:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/etIGfk6l4ISdcWX3WCTHculTdLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.57.205.0/24
31.57.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:0d:16:e1:af:09:86:98:1b:03:cb:f2:a5:a1:61:66:9c:9b:
cb:f7:52:ec:31:84:f7:e1:46:48:39:ec:29:04:18:cf:5a:44:
62:bb:98:62:b6:7e:a9:f0:43:95:b5:f1:af:96:c1:77:f5:e9:
92:ac:63:85:87:0f:bb:de:21:ef:a4:1c:72:f8:88:af:13:eb:
4c:03:7e:ef:d2:e2:fe:4d:29:de:f7:cd:9c:31:70:92:7d:05:
06:a6:7c:19:56:41:47:be:67:31:9e:fe:11:97:66:c8:51:d9:
cf:b9:a3:21:05:90:2d:66:43:50:a1:b5:e8:7e:e9:f6:b6:2a:
b9:43:ab:f8:86:c2:18:cf:6a:e6:e0:a3:1f:40:3b:fd:d7:9a:
6b:20:5f:54:52:a4:14:a1:4f:b1:2f:f5:1b:d5:66:aa:d6:56:
16:32:40:1a:58:ab:54:23:62:1c:a2:28:be:be:62:f6:b2:ad:
4b:12:a2:e0:bb:14:22:f0:28:6a:38:b7:88:4a:b6:b6:e4:53:
05:2e:9e:50:f6:21:56:99:5a:5a:04:96:96:72:56:de:23:ac:
94:ee:c7:61:20:5a:c9:ef:2a:90:53:d5:48:72:f8:2a:40:91:
a3:c0:45:a7:42:76:83:80:98:4f:be:f1:06:79:d5:1c:10:02:
a1:e8:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:32 2024 by rpki-client on console-ams.rpki-client.org