Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kkKQKyMu9meVeVL8v4wts4lt8HY.roa
File: kkKQKyMu9meVeVL8v4wts4lt8HY.roa (raw, json)
Hash identifier: dPJExiMo9wfgzK2sOJYxbw96UYnd/HaVwWkGg7ZzdOw=
Subject key identifier: 92:42:90:2B:23:2E:F6:67:95:79:52:FC:BF:8C:2D:B3:89:6D:F0:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192E8DF9C745D307F58B0DC311F0FE417D5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kkKQKyMu9meVeVL8v4wts4lt8HY.roa
Signing time: Fri 01 Nov 2024 17:57:01 +0000
ROA not before: Fri 01 Nov 2024 17:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 31.58.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 18:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:df:9c:74:5d:30:7f:58:b0:dc:31:1f:0f:e4:17:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 17:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9242902b232ef667957952fcbf8c2db3896df076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:8e:83:e6:a2:d5:36:8b:b1:0b:e4:c8:03:
01:a7:de:ff:01:47:2d:70:6b:3c:5d:38:6c:20:6c:
37:33:d0:c9:15:e8:6c:69:93:1d:bc:1e:3b:e0:50:
5e:9d:4f:c7:5a:93:a5:47:5f:cc:d3:52:89:bf:7f:
2f:8f:a3:a2:b0:60:8f:f6:bc:75:42:be:b7:49:c4:
53:86:b6:92:9e:eb:6b:58:d7:da:19:cb:2b:02:e3:
4b:cc:f0:b5:b5:35:78:64:51:a3:96:66:eb:aa:a2:
79:37:01:82:8d:4a:73:62:28:ab:87:25:5b:49:5a:
39:ff:e7:e0:a4:ef:3d:c6:05:a4:a5:d1:5d:2a:e5:
84:fe:9a:da:48:58:ac:66:25:34:1c:fc:1c:a9:a8:
93:60:81:66:a1:fc:7f:9e:f1:09:04:eb:d1:97:e4:
55:56:8e:47:11:33:57:02:c5:28:71:09:2e:f6:0e:
0e:ac:2e:d3:e9:d5:52:4d:52:5d:41:b1:9a:4b:75:
dc:f5:24:b3:41:6e:a5:e0:80:ee:17:85:f7:63:fe:
14:2c:6d:74:62:ae:d8:28:6e:18:60:13:20:66:87:
89:d6:e9:9c:56:6b:b8:7e:83:a6:ec:88:6f:0d:2c:
48:5b:0a:ae:2e:da:21:0d:14:ab:90:15:66:2d:0f:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:90:2B:23:2E:F6:67:95:79:52:FC:BF:8C:2D:B3:89:6D:F0:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kkKQKyMu9meVeVL8v4wts4lt8HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
41:62:3d:81:4c:55:28:a1:89:6b:19:70:15:e5:52:36:08:35:
2f:14:fc:49:97:1f:9c:d0:f3:f4:b0:b8:59:c9:66:8d:37:59:
93:08:1d:6e:2a:44:14:a7:5b:34:63:01:49:0c:9f:6c:83:6b:
53:4c:4f:2b:95:fb:89:84:37:3b:f4:c9:85:f1:ff:42:52:50:
24:98:ae:40:df:10:65:8d:4c:83:7a:d4:71:75:e4:37:ed:34:
80:48:73:d1:5b:b6:eb:18:df:d2:ae:72:dd:c1:7b:80:5e:a3:
f1:1c:68:ee:34:ea:eb:72:cb:6c:83:db:c6:d1:42:d2:c0:85:
67:de:18:63:4a:4f:76:24:fa:74:cd:9e:5b:a1:4e:3c:a5:e8:
d3:71:27:49:80:b0:84:03:01:52:7c:5d:ff:63:83:83:94:51:
1b:2e:bd:c5:58:a0:be:2e:26:32:49:fd:21:e9:30:f8:8e:96:
67:9f:9c:61:03:bc:c0:81:b8:12:ef:75:52:32:57:3b:9e:1f:
87:2c:58:e3:85:98:ce:e9:41:c5:fb:d7:1f:07:0e:15:f4:ac:
db:12:39:e3:37:c9:48:f9:d0:58:0b:93:4b:9f:be:f3:a7:cf:
20:19:c0:82:b5:1c:84:fc:2a:3c:97:b6:28:04:9e:77:4f:c8:
f1:54:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 21:35:35 2024 by rpki-client on console-fra.rpki-client.org