Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g1SOUcbWCffU2Qe9nsXaWO_Zav4.roa
File: g1SOUcbWCffU2Qe9nsXaWO_Zav4.roa (raw, json)
Hash identifier: rtpeDimhWEHwAECkDbqyCnIx6im42j1MkMQ0+CEr+lQ=
Subject key identifier: 83:54:8E:51:C6:D6:09:F7:D4:D9:07:BD:9E:C5:DA:58:EF:D9:6A:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192D441D70BA40A70DED0AC8FD694445E63
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g1SOUcbWCffU2Qe9nsXaWO_Zav4.roa
Signing time: Mon 28 Oct 2024 17:52:17 +0000
ROA not before: Mon 28 Oct 2024 17:52:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.129.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 10:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:41:d7:0b:a4:0a:70:de:d0:ac:8f:d6:94:44:5e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 28 17:52:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83548e51c6d609f7d4d907bd9ec5da58efd96afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6f:de:13:4e:a4:39:7f:24:b5:78:59:22:39:
ca:01:50:1b:fd:65:76:a6:2c:55:b0:f3:af:bc:92:
e6:2c:cc:fb:5f:e8:41:7d:91:50:11:10:c1:93:a7:
48:9f:77:a8:1a:f5:0a:f6:f9:f6:80:af:80:79:cb:
51:e2:c9:46:fe:61:d1:73:7c:0e:f3:4a:e4:59:4d:
f3:d1:5e:64:7b:52:d5:3a:f9:1e:6c:e9:b3:46:a5:
c2:65:fa:47:08:de:61:45:0b:47:96:40:cc:e9:af:
e3:62:f6:a6:6b:62:07:61:da:c4:f7:b3:86:e1:77:
11:14:cd:f3:a9:21:d7:c8:ee:7d:cb:13:a2:d3:32:
02:ef:d8:52:f4:0e:80:fb:29:0f:ef:29:0c:a7:69:
bb:35:09:f1:ce:ba:5c:16:8d:a2:1e:98:7d:50:31:
af:f4:b2:35:20:94:03:11:a8:56:f3:d2:17:2f:69:
63:45:55:7f:e5:83:22:7b:b8:ee:99:fd:6e:a2:7c:
1c:14:0c:0f:fa:71:e2:22:09:5f:94:6f:76:27:88:
15:f4:f2:ed:44:5f:77:8d:3e:c0:4d:49:b7:eb:af:
12:21:58:07:b0:b6:8a:a5:31:76:e3:36:de:22:f1:
b9:5c:c8:e3:61:fc:d0:51:c0:bb:b9:b5:a2:32:5e:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:8E:51:C6:D6:09:F7:D4:D9:07:BD:9E:C5:DA:58:EF:D9:6A:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g1SOUcbWCffU2Qe9nsXaWO_Zav4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.58.49.0/24
31.58.59.0/24
31.58.129.0/24
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0e:35:1f:74:f2:20:28:4b:8a:44:75:ce:64:eb:60:9d:ef:
52:86:49:d4:61:50:d0:3a:92:a4:15:b5:69:70:d9:93:5f:18:
2d:cc:98:bb:20:bc:20:bc:aa:0f:8f:1b:2b:e9:76:60:df:4a:
44:c1:19:dc:80:58:8a:8e:d3:75:ca:1d:50:b8:23:d5:9e:bd:
ae:9e:a3:ea:fe:66:29:5b:b0:20:83:b0:2d:f8:5a:8d:44:f3:
d0:56:e0:d1:e1:26:49:e3:ac:48:e3:45:0f:2a:0a:4f:0d:ef:
26:4c:dc:99:59:38:47:35:19:4a:cf:3f:b3:27:7d:57:e8:8b:
30:af:b9:d9:51:94:d4:9d:43:81:54:bd:51:71:bb:21:04:44:
f2:3d:0f:24:4c:7c:12:44:93:62:08:7f:b4:13:c4:55:9c:17:
a7:52:b0:a8:46:8e:87:34:ed:db:6f:e2:27:16:f9:40:82:8a:
f0:44:99:09:99:51:16:a8:3c:76:40:a6:02:d9:95:1f:38:de:
3e:e5:19:ff:3c:c0:99:6e:11:c9:dc:86:32:be:0b:63:fd:3a:
14:86:b9:54:77:09:e1:57:33:9f:5a:fe:21:07:76:11:c7:8f:
f5:d3:0d:71:a8:b2:70:ac:79:5b:ae:f3:f9:88:33:e3:c5:21:
bd:ae:97:7a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZLUQdcLpApw3tCsj9aURF5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDI4MTc1MjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzU0OGU1MWM2ZDYwOWY3ZDRkOTA3YmQ5ZWM1ZGE1OGVmZDk2YWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m/eE06kOX8ktXhZIjnKAVAb/WV2
pixVsPOvvJLmLMz7X+hBfZFQERDBk6dIn3eoGvUK9vn2gK+AectR4slG/mHRc3wO
80rkWU3z0V5ke1LVOvkebOmzRqXCZfpHCN5hRQtHlkDM6a/jYvama2IHYdrE97OG
4XcRFM3zqSHXyO59yxOi0zIC79hS9A6A+ykP7ykMp2m7NQnxzrpcFo2iHph9UDGv
9LI1IJQDEahW89IXL2ljRVV/5YMie7jumf1uonwcFAwP+nHiIglflG92J4gV9PLt
RF93jT7ATUm3668SIVgHsLaKpTF24zbeIvG5XMjjYfzQUcC7ubWiMl4MZQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFINUjlHG1gn31NkHvZ7F2ljv2Wr+MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZzFTT1VjYldDZmZVMlFlOW5zWGFXT19aYXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAAf
OQsDBAAfOYMDBAAfOZYDBAAfObADBAEfObIwDAMEAB85tQMEAx85sAMEAB86MQME
AB86OwMEAB86gQMEAB87KTAMAwQDHzs4AwQAHzs6AwQCHztAAwQCHztQAwQCHztg
AwQCHztwAwQCHzt8MAwDBAQfO7ADBAIfO8ADBAIfO9gDBAEfO+QDBAAfO+cDBAEf
O/QDBADZPPswDQYJKoZIhvcNAQELBQADggEBAGkONR908iAoS4pEdc5k62Cd71KG
SdRhUNA6kqQVtWlw2ZNfGC3MmLsgvCC8qg+PGyvpdmDfSkTBGdyAWIqO03XKHVC4
I9Weva6eo+r+ZilbsCCDsC34Wo1E89BW4NHhJknjrEjjRQ8qCk8N7yZM3JlZOEc1
GUrPP7MnfVfoizCvudlRlNSdQ4FUvVFxuyEERPI9DyRMfBJEk2IIf7QTxFWcF6dS
sKhGjoc07dtv4icW+UCCivBEmQmZURaoPHZApgLZlR843j7lGf88wJluEcnchjK+
C2P9OhSGuVR3CeFXM59a/iEHdhHHj/XTDXGosnCseVuu8/mIM+PFIb2ul3o=
-----END CERTIFICATE-----
Generated at Tue Oct 29 13:02:35 2024 by rpki-client on console-fra.rpki-client.org