Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fb9tvAgX8cycqNUQy-uaa2a8TkQ.roa
File: fb9tvAgX8cycqNUQy-uaa2a8TkQ.roa (raw, json)
Hash identifier: p7eBLsA74kaGmzTExgcPJ6NmdOXInSa93UZwjdMJopA=
Subject key identifier: 7D:BF:6D:BC:08:17:F1:CC:9C:A8:D5:10:CB:EB:9A:6B:66:BC:4E:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019203CB50C9264040E70330D7C0EA27F0A5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fb9tvAgX8cycqNUQy-uaa2a8TkQ.roa
Signing time: Wed 18 Sep 2024 06:21:49 +0000
ROA not before: Wed 18 Sep 2024 06:21:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 13:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:03:cb:50:c9:26:40:40:e7:03:30:d7:c0:ea:27:f0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 06:21:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbf6dbc0817f1cc9ca8d510cbeb9a6b66bc4e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:fa:bc:29:ab:29:f2:90:57:49:aa:ed:55:
08:98:ca:1a:89:bb:3f:15:c0:50:f0:eb:e6:9d:6f:
20:45:a1:aa:b4:7c:bf:a5:32:1c:49:1e:a3:cf:d7:
2c:87:5a:11:7b:57:56:d1:71:3e:f3:c9:e5:5e:e6:
72:ef:fd:5e:b7:c4:71:3c:c8:36:f1:15:cf:58:67:
3e:ae:90:fd:ce:a7:38:40:9b:4a:f7:51:4c:e6:f2:
48:f2:27:f0:8d:b2:5c:5b:b3:c7:a8:4c:0d:04:84:
08:59:29:11:99:fc:3b:7d:fb:65:47:fb:04:19:69:
9a:e3:c7:ab:0a:d5:db:12:8b:eb:ae:51:eb:54:c8:
ee:61:4a:f3:34:e2:37:a7:68:15:bc:c6:ea:39:d0:
a7:42:bf:99:e3:bf:fd:40:86:c3:67:0b:0b:c7:d4:
68:4e:5f:32:ba:fa:e9:1c:da:6e:62:03:dd:a4:c5:
e5:f2:2e:b0:ac:90:f7:92:4c:9e:49:13:46:16:38:
2b:83:4e:27:44:77:fb:32:60:1e:99:b7:f4:c4:b6:
1e:7e:c6:67:0e:f3:d7:db:4a:59:63:5a:33:0d:9a:
c9:c6:b9:3b:48:28:32:16:bb:0d:df:91:97:e9:b7:
36:b5:4f:43:b4:ff:f1:80:a1:9e:86:eb:f9:75:25:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:6D:BC:08:17:F1:CC:9C:A8:D5:10:CB:EB:9A:6B:66:BC:4E:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fb9tvAgX8cycqNUQy-uaa2a8TkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5c:18:72:4e:c1:11:4b:e2:5a:31:5b:12:bd:47:15:f4:c1:
0d:55:0c:55:02:fe:a0:df:db:89:c9:06:ac:4d:2a:14:dd:30:
43:ed:f6:30:85:be:43:c0:8c:f2:1e:ae:f8:1a:d4:5f:2f:b5:
2d:cb:25:4b:50:a5:ea:2e:b0:e3:51:d5:0b:f5:bf:7e:e5:38:
70:b0:1e:a9:81:84:ea:2a:53:ef:f0:a3:71:e6:26:02:81:d2:
bd:46:77:fe:fe:30:d9:1f:70:f5:ac:af:45:63:67:35:27:ef:
24:61:d2:f4:26:c2:98:c5:99:ac:19:21:e8:1d:8a:25:65:67:
ea:89:d4:bf:e9:a8:75:35:0a:96:82:60:d5:2e:45:8d:2a:16:
e6:5f:18:ac:8f:f0:10:c5:39:53:b4:f2:d7:1a:35:bd:a0:f0:
9a:45:9e:e4:20:54:24:82:cc:d5:99:3c:99:c5:32:6d:d2:99:
8a:09:8e:18:79:ae:93:f2:3f:66:b4:06:1c:67:a6:78:28:75:
e8:45:ee:8a:61:fd:a6:16:74:c6:92:97:77:ac:e3:ef:7a:6b:
5c:1f:fc:5e:67:ab:99:a7:68:2a:60:09:0b:1d:82:42:67:3b:
31:f0:f1:d0:65:61:0a:90:78:9e:01:83:33:e2:df:8e:e4:eb:
85:53:6c:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIDy1DJJkBA5wMw18DqJ/ClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTE4MDYyMTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGJmNmRiYzA4MTdmMWNjOWNhOGQ1MTBjYmViOWE2YjY2YmM0ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06f6vCmrKfKQV0mq7VUImMoaibs/
FcBQ8OvmnW8gRaGqtHy/pTIcSR6jz9csh1oRe1dW0XE+88nlXuZy7/1et8RxPMg2
8RXPWGc+rpD9zqc4QJtK91FM5vJI8ifwjbJcW7PHqEwNBIQIWSkRmfw7fftlR/sE
GWma48erCtXbEovrrlHrVMjuYUrzNOI3p2gVvMbqOdCnQr+Z47/9QIbDZwsLx9Ro
Tl8yuvrpHNpuYgPdpMXl8i6wrJD3kkyeSRNGFjgrg04nRHf7MmAembf0xLYefsZn
DvPX20pZY1ozDZrJxrk7SCgyFrsN35GX6bc2tU9DtP/xgKGehuv5dSXenQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2/bbwIF/HMnKjVEMvrmmtmvE5EMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZmI5dHZBZ1g4Y3ljcU5VUXktdWFhMmE4VGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmWMA0G
CSqGSIb3DQEBCwUAA4IBAQCnXBhyTsERS+JaMVsSvUcV9MENVQxVAv6g39uJyQas
TSoU3TBD7fYwhb5DwIzyHq74GtRfL7UtyyVLUKXqLrDjUdUL9b9+5ThwsB6pgYTq
KlPv8KNx5iYCgdK9Rnf+/jDZH3D1rK9FY2c1J+8kYdL0JsKYxZmsGSHoHYolZWfq
idS/6ah1NQqWgmDVLkWNKhbmXxisj/AQxTlTtPLXGjW9oPCaRZ7kIFQkgszVmTyZ
xTJt0pmKCY4Yea6T8j9mtAYcZ6Z4KHXoRe6KYf2mFnTGkpd3rOPvemtcH/xeZ6uZ
p2gqYAkLHYJCZzsx8PHQZWEKkHieAYMz4t+O5OuFU2yV
-----END CERTIFICATE-----
Generated at Tue Oct 8 17:14:56 2024 by rpki-client on console-fra.rpki-client.org