Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jvYfvnXF7DrZOdALbay8UVUwO_Q.roa
File: jvYfvnXF7DrZOdALbay8UVUwO_Q.roa (raw, json)
Hash identifier: /ULTd6Z+Voby2h/fe3EUMXtyC7zrcr6oFoMg8eCgmug=
Subject key identifier: 8E:F6:1F:BE:75:C5:EC:3A:D9:39:D0:0B:6D:AC:BC:51:55:30:3B:F4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192CD5CB26770306E2BFB7E198416212501
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jvYfvnXF7DrZOdALbay8UVUwO_Q.roa
Signing time: Sun 27 Oct 2024 09:44:17 +0000
ROA not before: Sun 27 Oct 2024 09:44:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.64.0/22 maxlen: 22
31.59.80.0/22 maxlen: 22
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.124.0/22 maxlen: 22
31.59.176.0/22 maxlen: 22
31.59.180.0/22 maxlen: 22
31.59.184.0/22 maxlen: 22
31.59.188.0/22 maxlen: 22
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 17:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:5c:b2:67:70:30:6e:2b:fb:7e:19:84:16:21:25:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 09:44:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ef61fbe75c5ec3ad939d00b6dacbc5155303bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:5a:e1:d3:d2:5d:9e:4b:6e:dd:28:60:4b:
ae:66:c5:15:c5:d4:d3:6f:b4:f6:ab:83:a0:75:0b:
85:32:24:57:6c:76:4a:4d:91:89:77:13:4c:fb:ea:
49:ed:6c:c3:36:40:47:b8:85:2d:94:2f:d9:22:08:
84:ef:28:66:1b:2a:28:7d:ba:0c:70:79:07:73:b2:
1c:a0:81:ec:76:ad:3c:ca:ae:e2:aa:ba:21:fe:20:
5f:3f:69:54:91:63:69:6b:0a:28:6b:c3:88:0d:a7:
55:18:23:d2:6a:2e:90:ca:53:b9:98:2a:be:af:fe:
fd:a9:48:c2:94:e5:1f:13:18:4b:5b:e3:94:f0:3d:
f0:6c:fe:e5:02:49:fd:bb:07:ae:cd:1d:4d:0d:40:
c3:49:2f:a9:3d:e0:d7:90:73:b1:b6:97:ab:74:e6:
71:dd:e0:56:f9:dd:87:f3:23:9b:bc:9f:e6:9c:c1:
0c:be:58:80:f2:f0:6a:c3:fc:2b:be:94:e4:fb:18:
34:34:91:d6:4a:36:08:0d:c2:bc:70:f5:bd:18:9f:
b2:79:d2:bc:f3:70:b8:d7:ac:31:87:5d:c1:e5:bb:
c0:d3:19:b7:ad:32:cb:56:38:92:b8:f4:29:6a:13:
0d:f5:29:fd:91:43:6d:4f:44:98:51:49:a5:e7:0c:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:1F:BE:75:C5:EC:3A:D9:39:D0:0B:6D:AC:BC:51:55:30:3B:F4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jvYfvnXF7DrZOdALbay8UVUwO_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
31.58.49.0/24
31.58.59.0/24
31.59.41.0/24
31.59.56.0-31.59.58.255
31.59.64.0/22
31.59.80.0/22
31.59.96.0/22
31.59.112.0/22
31.59.124.0/22
31.59.176.0-31.59.195.255
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:38:58:36:ae:67:82:0f:e1:3d:f7:cf:bb:6d:3f:3d:64:94:
d9:2c:fc:b9:e2:54:67:73:68:69:6e:46:72:ef:4b:17:bd:ca:
31:6b:10:77:7c:05:5a:cc:ee:f6:bf:e5:06:00:8d:ea:82:c3:
7f:56:97:b7:2d:65:f8:02:74:b8:32:2d:13:fd:4a:31:56:c6:
b7:ca:1e:92:04:93:37:11:ec:46:66:f0:af:69:d1:14:29:b0:
9c:27:41:a5:70:35:30:96:f5:31:5a:fd:2c:f6:b5:ee:79:06:
73:7a:6c:dc:1a:70:58:c8:2b:45:44:74:4b:6a:03:25:ab:30:
50:25:90:16:82:00:3f:ad:78:ab:5a:aa:a4:22:c6:12:dd:86:
0a:ba:48:47:9c:21:56:e1:1e:0b:c7:ed:a4:5d:c1:0e:f4:8f:
56:bf:f7:93:04:ed:6c:9f:0b:19:98:6f:51:8d:c4:1b:45:49:
78:8f:f8:fc:e8:44:ba:29:b6:49:e4:a5:97:c4:a0:aa:a2:55:
f6:d4:c4:e3:40:43:7d:fa:b8:72:e8:09:45:a7:0a:f8:b3:d2:
63:2e:0e:9c:52:86:7f:54:f0:b9:4a:28:5e:12:3b:90:74:58:
83:ae:9c:89:c6:78:c8:20:a1:b9:99:fb:73:9a:39:cf:83:36:
99:99:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 20:14:22 2024 by rpki-client on console-ams.rpki-client.org