Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iUK5YM5fUv5_ys-dyp27C_zAThw.roa
File: iUK5YM5fUv5_ys-dyp27C_zAThw.roa (raw, json)
Hash identifier: ZrdYj+7iMw8lZtyy+I5kVHNJPV3fy4VLI+YC+WiyqTQ=
Subject key identifier: 89:42:B9:60:CE:5F:52:FE:7F:CA:CF:9D:CA:9D:BB:0B:FC:C0:4E:1C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192ADD73C7DACF12C34FB882FE218DE0B5E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iUK5YM5fUv5_ys-dyp27C_zAThw.roa
Signing time: Mon 21 Oct 2024 06:50:17 +0000
ROA not before: Mon 21 Oct 2024 06:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 31.57.89.0/24 maxlen: 24
31.58.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 17:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:d7:3c:7d:ac:f1:2c:34:fb:88:2f:e2:18:de:0b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 21 06:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8942b960ce5f52fe7fcacf9dca9dbb0bfcc04e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:ea:bb:ee:55:9d:0c:86:96:ca:98:a5:35:
46:56:c0:d5:f5:0d:a6:1d:79:0c:b9:72:dd:50:ab:
fe:54:f0:61:c1:f0:6c:bb:78:29:9e:d7:20:ee:95:
87:dd:59:86:71:f7:ec:9f:dc:23:61:ba:e4:37:70:
8e:95:34:19:cc:93:ce:b9:a8:d3:0d:d6:90:75:93:
72:b0:96:29:77:8f:60:87:dd:73:d5:a3:d6:0c:ea:
be:b6:3f:9e:7c:a3:11:c6:a8:89:7b:36:d9:5a:a2:
c5:cc:ce:1c:59:24:8a:34:a1:da:21:a3:a7:98:49:
9d:48:ab:5d:b6:87:0e:60:d8:63:b9:c2:c9:38:fa:
3e:71:ef:fb:c2:b6:e1:6c:24:f4:3e:f1:4d:49:ed:
f4:fc:ca:8f:70:cb:b6:85:bd:2b:04:b6:13:2d:2e:
99:d9:19:ba:f8:3c:5f:25:73:73:a0:9f:bb:da:00:
fb:98:18:c2:54:df:0c:93:74:6f:9b:c7:d7:db:66:
5c:5b:bf:3e:14:d3:42:a8:ef:70:c8:f9:fc:65:ae:
87:43:e5:3e:0f:76:c1:fd:14:1f:31:8e:c4:bf:05:
58:d1:7d:5a:28:39:97:c8:df:dc:1c:95:3c:36:60:
c6:5f:de:35:26:d9:3c:99:ae:2e:64:e2:4e:d7:4f:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:B9:60:CE:5F:52:FE:7F:CA:CF:9D:CA:9D:BB:0B:FC:C0:4E:1C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iUK5YM5fUv5_ys-dyp27C_zAThw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.89.0/24
31.58.11.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ac:c4:8a:d5:cc:97:4d:51:19:a5:a9:7a:aa:8f:26:62:39:
bf:3f:79:ea:52:ad:14:ea:50:e0:18:6a:b1:7a:de:a5:30:0f:
2c:ac:05:a7:da:6a:aa:51:03:d7:ff:4d:c4:ad:c6:f5:31:53:
38:42:82:18:1a:a0:f8:79:1f:46:a8:e8:4a:c3:60:d2:96:80:
c9:de:2e:9b:7d:1e:c8:1b:a8:80:05:df:12:0d:18:78:4d:3d:
15:d7:e9:fd:6d:3b:13:10:4a:b6:3f:bd:6d:04:bc:69:73:29:
a3:b7:d8:de:b0:1c:e1:60:f4:76:08:1d:5f:71:c2:45:31:79:
98:7c:f4:93:2b:d4:9a:1e:ad:bf:20:39:21:a2:a1:e1:a6:3b:
46:1e:2e:ef:66:b3:78:eb:23:23:5a:60:ba:1c:10:cb:44:4b:
48:82:26:f1:39:df:fb:df:5e:d3:68:a0:b8:ab:ec:97:be:0a:
01:f7:03:a9:12:65:2e:c9:c5:41:f0:0f:4d:43:af:97:57:30:
52:77:fe:d7:6a:ce:27:f0:25:19:65:e1:b8:63:1a:b3:d4:d8:
45:7f:08:67:01:54:68:bb:35:37:bf:39:01:b9:77:02:ae:e0:
db:74:04:60:ee:7e:5b:e5:65:0d:b8:84:65:8c:98:78:22:01:
49:ef:b6:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKt1zx9rPEsNPuIL+IY3gteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDIxMDY1MDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTQyYjk2MGNlNWY1MmZlN2ZjYWNmOWRjYTlkYmIwYmZjYzA0ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH/qu+5VnQyGlsqYpTVGVsDV9Q2m
HXkMuXLdUKv+VPBhwfBsu3gpntcg7pWH3VmGcffsn9wjYbrkN3COlTQZzJPOuajT
DdaQdZNysJYpd49gh91z1aPWDOq+tj+efKMRxqiJezbZWqLFzM4cWSSKNKHaIaOn
mEmdSKtdtocOYNhjucLJOPo+ce/7wrbhbCT0PvFNSe30/MqPcMu2hb0rBLYTLS6Z
2Rm6+DxfJXNzoJ+72gD7mBjCVN8Mk3Rvm8fX22ZcW78+FNNCqO9wyPn8Za6HQ+U+
D3bB/RQfMY7EvwVY0X1aKDmXyN/cHJU8NmDGX941Jtk8ma4uZOJO109cWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIlCuWDOX1L+f8rPncqduwv8wE4cMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaVVLNVlNNWZVdjVfeXMtZHlwMjdDX3pBVGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzlZAwQA
HzoLMA0GCSqGSIb3DQEBCwUAA4IBAQCRrMSK1cyXTVEZpal6qo8mYjm/P3nqUq0U
6lDgGGqxet6lMA8srAWn2mqqUQPX/03Ercb1MVM4QoIYGqD4eR9GqOhKw2DSloDJ
3i6bfR7IG6iABd8SDRh4TT0V1+n9bTsTEEq2P71tBLxpcymjt9jesBzhYPR2CB1f
ccJFMXmYfPSTK9SaHq2/IDkhoqHhpjtGHi7vZrN46yMjWmC6HBDLREtIgibxOd/7
317TaKC4q+yXvgoB9wOpEmUuycVB8A9NQ6+XVzBSd/7Xas4n8CUZZeG4Yxqz1NhF
fwhnAVRouzU3vzkBuXcCruDbdARg7n5b5WUNuIRljJh4IgFJ77a2
-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:55 2024 by rpki-client on console-ams.rpki-client.org