Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jQ777BMxzlQvPBOFr8FuCJG4sO8.roa
File: jQ777BMxzlQvPBOFr8FuCJG4sO8.roa (raw, json)
Hash identifier: mxPYhlJ2xsGLQwnSybHEywzbXjePVfnjSEEAdE7W6Lc=
Subject key identifier: 8D:0E:FB:EC:13:31:CE:54:2F:3C:13:85:AF:C1:6E:08:91:B8:B0:EF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192DED03B761BDD7A0D990D9B414B40AAE0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jQ777BMxzlQvPBOFr8FuCJG4sO8.roa
Signing time: Wed 30 Oct 2024 19:04:01 +0000
ROA not before: Wed 30 Oct 2024 19:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.129.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 22
31.58.200.0/22 maxlen: 22
31.58.252.0/22 maxlen: 22
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 14:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:d0:3b:76:1b:dd:7a:0d:99:0d:9b:41:4b:40:aa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 19:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d0efbec1331ce542f3c1385afc16e0891b8b0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:0f:25:a1:25:18:cd:39:14:cc:34:32:a0:
8f:e9:cc:7b:71:61:e0:45:54:eb:5e:2b:84:b8:31:
23:a0:40:b7:92:35:f4:e4:28:ac:fb:55:92:62:22:
18:e7:d6:e4:7c:30:df:c3:0e:cd:5d:0a:b5:91:40:
3b:d1:19:ba:ec:d1:9f:5f:99:0a:74:93:77:cd:41:
cf:a4:17:74:37:5d:d5:47:e6:9e:3b:cc:f0:d7:46:
95:74:b6:c8:34:83:b5:5e:0e:27:9a:41:f1:fa:a3:
0c:d0:ad:2f:1c:87:0e:92:b6:db:00:da:8d:3e:32:
29:15:b3:7d:5f:91:62:8a:ff:46:42:84:46:7d:d9:
07:76:e2:dd:95:53:41:4b:b9:86:2c:a1:55:f0:17:
21:60:8f:1b:82:d3:7d:61:04:8b:27:6e:16:5a:ea:
cd:1c:0c:99:e7:2c:f8:55:85:c6:9f:22:82:fc:b1:
23:fc:60:51:ec:29:5b:37:be:c2:63:ce:5f:ac:bd:
71:c1:8d:15:47:0d:ba:fb:31:5a:9d:1d:a1:4f:64:
26:d8:e2:ad:f5:a8:d5:a4:3d:5a:4f:65:70:fa:16:
07:5a:dd:54:1b:fd:d8:b5:85:31:26:52:8f:73:36:
ff:98:e8:e8:bb:b3:ae:2e:32:2c:52:67:7a:61:89:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:FB:EC:13:31:CE:54:2F:3C:13:85:AF:C1:6E:08:91:B8:B0:EF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jQ777BMxzlQvPBOFr8FuCJG4sO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.58.49.0/24
31.58.59.0/24
31.58.129.0/24
31.58.146.0/24
31.58.152.0/22
31.58.200.0/22
31.58.252.0/22
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:29:23:56:d8:cd:bc:60:b8:c3:d6:a0:c2:23:ec:d7:43:9c:
ff:d7:6c:12:5e:94:42:e4:e5:ce:2b:fd:4a:7e:ca:41:27:da:
72:d5:5f:25:7b:ae:0e:fb:c2:49:cf:58:e6:6e:2a:dc:2a:a2:
54:8e:a0:3a:a8:b8:6d:c9:41:d0:37:3a:e7:6b:55:a1:de:35:
d2:8e:6b:66:2d:48:b8:31:dc:e5:3d:55:c9:6e:42:fc:54:c2:
f1:2f:c3:04:8c:85:f1:26:03:22:b6:45:2a:1b:de:0d:0a:80:
51:17:d1:c4:96:b5:19:03:9a:a9:d7:27:18:48:8b:49:ac:20:
18:00:16:00:26:49:31:9b:67:e7:9c:ca:41:e0:29:cf:dd:e9:
57:4b:20:7b:11:a4:97:c7:8d:74:e7:a6:df:b0:41:77:66:12:
96:c6:e1:54:6e:47:60:9e:eb:6b:88:b4:28:1d:ed:e2:45:c2:
17:56:44:b5:4c:0a:59:5e:a0:eb:6a:35:cc:30:ad:37:74:4c:
a7:5a:d7:67:99:fe:da:b9:01:60:0b:98:db:17:c1:bf:4b:ca:
90:5f:37:6c:4e:9d:73:7d:a2:6a:98:6c:07:cb:85:46:e7:f8:
45:ef:2e:21:3f:90:67:14:08:73:a6:03:97:05:b1:d5:b2:89:
57:9a:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:13 2024 by rpki-client on console-fra.rpki-client.org