Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/htituH_Z84bNBY8IRDLhQTVRkGc.roa
File: htituH_Z84bNBY8IRDLhQTVRkGc.roa (raw, json)
Hash identifier: Cto79aDw/v/jbveA+aV+vkiZ+jpLAvKWgQ2Uv3GtM8c=
Subject key identifier: 86:D8:AD:B8:7F:D9:F3:86:CD:05:8F:08:44:32:E1:41:35:51:90:67
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019305A6DCFA3222DE1CA729A4304DC2EA13
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/htituH_Z84bNBY8IRDLhQTVRkGc.roa
Signing time: Thu 07 Nov 2024 08:04:01 +0000
ROA not before: Thu 07 Nov 2024 08:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.57.240.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.162.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.58.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 16:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:a6:dc:fa:32:22:de:1c:a7:29:a4:30:4d:c2:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 08:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86d8adb87fd9f386cd058f084432e14135519067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:2f:1c:0d:6d:d8:42:1b:31:7e:67:d1:9c:
03:77:8f:ac:36:2e:d0:f8:2a:42:29:e8:b4:30:02:
0c:d9:60:31:44:1c:5d:2a:9d:39:e4:d1:99:45:57:
e1:eb:f1:6e:66:37:18:4c:1d:70:5c:21:6c:11:7e:
c9:69:1d:a9:b9:98:58:33:f3:5f:20:c8:e9:44:f5:
80:c8:80:f7:54:79:a2:b9:e6:cc:d1:3c:8c:80:02:
c9:f3:84:34:59:3e:2e:a5:a7:f8:cd:66:fa:56:75:
cf:8f:45:14:97:b0:cd:e6:27:3e:27:b0:fa:bd:66:
cb:d6:c3:ff:61:7d:fb:19:53:62:00:63:a3:e8:ab:
b4:93:ea:6e:cc:d7:b2:36:bd:9a:56:45:c1:08:e2:
24:85:51:a2:cd:83:d3:13:ae:2a:a4:a2:06:4d:35:
33:50:8c:5c:58:d6:87:e1:ec:fd:4f:eb:59:a3:b2:
1f:fa:f9:44:7e:b4:22:eb:76:59:c2:16:fc:22:ff:
b4:52:24:e8:c2:31:be:a5:93:5b:96:53:1d:b9:7b:
72:fd:9a:cd:4d:0b:5e:50:96:d0:ce:f8:1b:09:89:
85:a0:0c:84:ea:c1:98:1f:7b:a0:72:8d:fb:73:13:
bb:82:8c:a0:26:c1:c5:d2:bc:e2:fb:de:40:85:f4:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:AD:B8:7F:D9:F3:86:CD:05:8F:08:44:32:E1:41:35:51:90:67
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/htituH_Z84bNBY8IRDLhQTVRkGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.153.0/24
31.57.236.0/24
31.57.240.0/24
31.58.43.0/24
31.58.128.0/24
31.58.162.0-31.58.164.255
31.58.166.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5c:e9:d0:84:46:fb:6d:45:fb:e5:4c:2f:10:2a:33:39:34:
86:91:1b:34:b8:ca:d4:f1:6e:25:e7:78:d4:49:f9:75:8f:9f:
5f:5a:8b:35:eb:8e:94:c2:5b:38:7a:de:92:aa:89:5b:26:d6:
d2:53:f8:18:bb:d8:ca:29:92:01:ec:6c:f1:11:7e:ea:93:3a:
97:a8:11:0b:82:d6:d9:3e:1e:95:80:04:b6:08:b9:6d:e3:9d:
f1:b0:4f:cb:5b:8b:dd:2d:bd:6f:ea:e1:fd:de:6a:cd:10:77:
08:71:7b:e8:54:eb:ad:04:f6:92:81:34:1e:2a:cd:46:ea:88:
2b:5f:b7:7f:a1:9f:f1:37:8c:d3:23:01:14:53:14:f0:49:25:
e1:e5:2a:83:f2:b8:ee:2c:0f:55:9e:c6:36:18:e0:a8:38:56:
79:79:3c:cd:46:75:5e:48:c6:25:dd:84:28:e5:b1:90:9f:72:
ce:5c:14:b5:2e:4c:37:13:c3:a2:48:cb:9c:9e:ae:f2:b5:d8:
e1:f5:4f:6d:8c:10:36:46:d4:36:b2:69:cb:ef:80:48:55:e1:
d3:e5:a3:27:ec:ed:87:ed:a9:b3:9a:db:cb:b9:fa:08:6a:98:
5b:1c:69:27:57:2d:ca:3f:81:0c:77:1a:bd:c7:e5:46:0f:b3:
8e:11:4c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 20:13:12 2024 by rpki-client on console-fra.rpki-client.org