Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g4JcIa0RVFFKlbjH4GsL3VHyg-g.roa
File: g4JcIa0RVFFKlbjH4GsL3VHyg-g.roa (raw, json)
Hash identifier: pEXJtTDVsB736n4VE3F/gh2KZKaCOdzjfYmXCX/qjZU=
Subject key identifier: 83:82:5C:21:AD:11:54:51:4A:95:B8:C7:E0:6B:0B:DD:51:F2:83:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192D7CB4AAAE58643930097664A789A2AAD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g4JcIa0RVFFKlbjH4GsL3VHyg-g.roa
Signing time: Tue 29 Oct 2024 10:21:17 +0000
ROA not before: Tue 29 Oct 2024 10:21:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.57.196.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:cb:4a:aa:e5:86:43:93:00:97:66:4a:78:9a:2a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 10:21:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83825c21ad1154514a95b8c7e06b0bdd51f283e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:3e:79:ab:30:12:16:2d:55:90:d3:31:ea:
db:1a:ff:7d:07:97:0a:b8:28:68:07:0d:a2:e1:3c:
a6:8c:59:b1:2a:10:44:07:31:1f:b0:c5:91:60:eb:
5e:3f:ae:e8:94:4d:3d:89:5b:09:80:70:f7:35:d0:
75:27:ea:a9:10:db:ba:ff:95:0f:3b:d2:0e:5b:a4:
8d:a5:13:f9:50:f1:83:bc:2f:37:7f:cc:78:e0:a5:
65:d4:7f:bc:f3:c4:62:43:8c:27:d9:94:95:8f:e6:
74:5f:ec:64:6f:b7:9d:53:93:f8:bb:04:87:c7:bf:
98:d2:e1:ea:2f:00:97:c1:fc:e8:67:9f:a6:25:7b:
27:74:07:22:68:da:46:bf:ec:95:75:76:fe:9e:25:
6e:7b:5a:fe:14:6e:cf:f9:ea:4a:25:56:1c:82:de:
53:5c:3f:86:b4:66:ab:a7:10:c3:52:9e:5e:54:c8:
bb:00:df:2b:4a:76:f5:48:ca:48:d7:38:2a:7b:74:
27:0d:ea:65:ab:02:5b:0d:bf:0c:2e:49:64:9a:07:
f7:c9:44:3e:dc:d9:a4:e2:81:90:53:1e:48:b5:c8:
9b:3d:82:50:7c:66:66:34:54:7a:a6:78:1f:fd:d8:
ef:01:dd:bc:17:0c:3e:41:2a:3b:4d:cf:e9:67:06:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:5C:21:AD:11:54:51:4A:95:B8:C7:E0:6B:0B:DD:51:F2:83:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g4JcIa0RVFFKlbjH4GsL3VHyg-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.57.196.0/23
31.57.199.0/24
31.57.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:9d:7d:46:3d:53:4d:b1:70:bd:50:6a:ea:d5:6e:44:e2:31:
84:d5:28:48:2e:0c:71:2b:a8:3e:4e:27:4e:69:55:4e:b0:3e:
ab:9e:fc:13:25:e6:ad:4f:f5:ee:11:87:70:87:3b:2f:34:5f:
5e:04:44:f9:45:78:1e:a3:6e:0d:30:62:e4:f2:00:b8:4b:71:
19:05:2d:39:91:4a:9c:dc:57:42:91:df:41:94:8a:70:e7:17:
9a:63:ad:03:49:b0:5f:af:1c:62:14:c6:b1:10:2b:c4:2d:99:
a0:07:66:98:81:61:10:c9:f3:5a:02:e3:4f:56:4e:dc:13:07:
90:90:bf:38:ad:cb:1c:ac:27:98:ed:f2:ff:a8:0c:13:9a:25:
9e:fa:ae:99:ca:0f:b4:2c:81:83:97:8e:1f:34:70:1f:44:06:
d9:cc:75:9a:af:c0:f2:a1:36:95:87:5f:30:b1:23:ca:7b:61:
19:c1:96:64:2e:c4:0f:fa:a3:5c:ee:88:20:4e:43:e0:3c:98:
3a:50:08:d7:30:f2:b6:df:a8:dc:fa:61:9d:6d:b0:f8:ab:47:
ad:c5:7f:63:9f:3f:26:7a:f6:c9:90:fd:b2:3e:c3:90:33:7f:
5a:03:4e:ba:97:83:02:50:31:a4:4d:50:77:ab:e0:a9:96:4e:
fe:5f:44:26
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZLXy0qq5YZDkwCXZkp4miqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDI5MTAyMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzgyNWMyMWFkMTE1NDUxNGE5NWI4YzdlMDZiMGJkZDUxZjI4M2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1s+easwEhYtVZDTMerbGv99B5cK
uChoBw2i4TymjFmxKhBEBzEfsMWRYOteP67olE09iVsJgHD3NdB1J+qpENu6/5UP
O9IOW6SNpRP5UPGDvC83f8x44KVl1H+888RiQ4wn2ZSVj+Z0X+xkb7edU5P4uwSH
x7+Y0uHqLwCXwfzoZ5+mJXsndAciaNpGv+yVdXb+niVue1r+FG7P+epKJVYcgt5T
XD+GtGarpxDDUp5eVMi7AN8rSnb1SMpI1zgqe3QnDeplqwJbDb8MLklkmgf3yUQ+
3Nmk4oGQUx5ItcibPYJQfGZmNFR6pngf/djvAd28Fww+QSo7Tc/pZwYwtwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIOCXCGtEVRRSpW4x+BrC91R8oPoMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZzRKY0lhMFJWRkZLbGJqSDRHc0wzVkh5Zy1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCHzg0AwQB
HznEAwQAHznHAwQAHznuMA0GCSqGSIb3DQEBCwUAA4IBAQDCnX1GPVNNsXC9UGrq
1W5E4jGE1ShILgxxK6g+TidOaVVOsD6rnvwTJeatT/XuEYdwhzsvNF9eBET5RXge
o24NMGLk8gC4S3EZBS05kUqc3FdCkd9BlIpw5xeaY60DSbBfrxxiFMaxECvELZmg
B2aYgWEQyfNaAuNPVk7cEweQkL84rcscrCeY7fL/qAwTmiWe+q6Zyg+0LIGDl44f
NHAfRAbZzHWar8DyoTaVh18wsSPKe2EZwZZkLsQP+qNc7oggTkPgPJg6UAjXMPK2
36jc+mGdbbD4q0etxX9jnz8mevbJkP2yPsOQM39aA066l4MCUDGkTVB3q+Cplk7+
X0Qm
-----END CERTIFICATE-----
Generated at Wed Oct 30 22:19:28 2024 by rpki-client on console-ams.rpki-client.org