Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kyakaDniBf9RUrJN266Krpr-iFQ.roa
File: kyakaDniBf9RUrJN266Krpr-iFQ.roa (raw, json)
Hash identifier: S8XTYboamIx4GE+QSgfhON7c6RsDURll9LBu93Fp8Eo=
Subject key identifier: 93:26:A4:68:39:E2:05:FF:51:52:B2:4D:DB:AE:8A:AE:9A:FE:88:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01911C94E1BF34D7482EA156DA121228147F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kyakaDniBf9RUrJN266Krpr-iFQ.roa
Signing time: Sun 04 Aug 2024 08:50:04 +0000
ROA not before: Sun 04 Aug 2024 08:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272040
IP address blocks: 31.56.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 13 Aug 2024 18:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1c:94:e1:bf:34:d7:48:2e:a1:56:da:12:12:28:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 4 08:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9326a46839e205ff5152b24ddbae8aae9afe8854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:7c:2a:e5:1b:8d:36:b0:c8:9f:a4:00:81:
46:0f:62:66:72:4a:a5:cd:27:27:d2:09:4b:f4:ec:
7a:77:61:67:97:c8:63:23:e2:6d:0e:fb:66:87:4c:
cc:da:1d:45:52:29:41:61:f9:80:53:6a:ec:7e:d8:
d2:94:40:0a:36:9b:ba:7b:77:78:f2:35:91:9c:f9:
c4:22:b6:73:57:e9:2f:53:20:8c:4b:14:6b:b4:86:
07:c9:4f:33:0f:35:8a:33:4a:2b:dc:c7:42:03:09:
ab:ae:18:a6:01:d6:98:41:70:dc:a3:e0:37:7c:0f:
35:f2:33:31:0d:d8:16:61:34:f5:a9:a9:82:89:25:
e3:cd:36:92:d1:44:d1:c8:89:6b:d0:1b:05:a7:5f:
d6:17:31:62:c0:cb:f2:7b:39:6f:54:a2:62:75:57:
e7:9f:fe:a3:38:6f:c9:d0:c6:75:9b:d2:ef:62:41:
ef:6a:57:7f:90:a9:46:79:5d:c5:21:ea:34:2c:51:
72:65:46:75:1b:2a:4c:1a:9b:50:f4:a8:07:5b:f8:
8c:7e:1c:c8:3a:b3:f0:83:08:6b:66:d5:fb:e8:72:
2c:86:72:1c:f9:ac:b8:9b:db:54:b6:20:c7:95:72:
4c:81:fa:90:01:3f:f7:aa:71:f9:37:52:16:d9:17:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:26:A4:68:39:E2:05:FF:51:52:B2:4D:DB:AE:8A:AE:9A:FE:88:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kyakaDniBf9RUrJN266Krpr-iFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
Signature Algorithm: sha256WithRSAEncryption
05:e9:9d:5e:33:6e:1d:ef:54:88:9a:96:54:9d:9e:52:7e:83:
fe:5b:c4:e0:af:2a:b1:82:8a:0c:e5:eb:e3:66:ee:42:fb:02:
7c:35:4f:30:b8:d2:7b:8a:4c:eb:99:16:66:f9:24:3a:5a:42:
4d:6c:31:6f:b3:7a:86:7f:81:1c:9f:03:b4:5b:77:d7:45:29:
bb:c8:7a:92:aa:2e:88:37:47:f8:47:84:cc:8d:52:2b:d6:59:
b4:91:16:aa:9f:22:74:93:da:ff:7f:75:7d:19:7e:7b:e5:6e:
cd:20:be:1c:ef:9c:1f:73:42:51:e7:2a:8e:c9:c7:d8:87:a2:
3a:ba:6f:0b:ac:75:bd:a3:32:68:8b:81:ec:eb:7a:ec:4b:d2:
1a:21:6f:cc:f7:d7:ac:50:49:7f:26:68:df:11:bf:cf:f9:d4:
75:5a:32:d0:14:31:dd:41:59:99:4b:8e:ff:9e:0e:41:e0:5b:
c2:58:25:40:66:1a:1d:94:0d:b8:c5:35:7a:ad:2f:1e:dc:f0:
fe:1d:46:b6:bc:cc:be:ea:b4:97:59:25:d8:0d:e6:4b:c8:68:
2d:b0:d1:2f:d5:14:c5:e6:5a:74:4d:07:3c:99:c5:15:be:f4:
91:9a:e1:f8:98:7e:79:fe:4d:08:0f:ed:3a:a0:ae:0f:1c:f7:
ba:21:9d:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEclOG/NNdILqFW2hISKBR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwODA0MDg1MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzI2YTQ2ODM5ZTIwNWZmNTE1MmIyNGRkYmFlOGFhZTlhZmU4ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOZ8KuUbjTawyJ+kAIFGD2Jmckql
zScn0glL9Ox6d2Fnl8hjI+JtDvtmh0zM2h1FUilBYfmAU2rsftjSlEAKNpu6e3d4
8jWRnPnEIrZzV+kvUyCMSxRrtIYHyU8zDzWKM0or3MdCAwmrrhimAdaYQXDco+A3
fA818jMxDdgWYTT1qamCiSXjzTaS0UTRyIlr0BsFp1/WFzFiwMvyezlvVKJidVfn
n/6jOG/J0MZ1m9LvYkHvald/kKlGeV3FIeo0LFFyZUZ1GypMGptQ9KgHW/iMfhzI
OrPwgwhrZtX76HIshnIc+ay4m9tUtiDHlXJMgfqQAT/3qnH5N1IW2ReECwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMmpGg54gX/UVKyTduuiq6a/ohUMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEva3lha2FEbmlCZjlSVXJKTjI2NktycHItaUZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzgqMA0G
CSqGSIb3DQEBCwUAA4IBAQAF6Z1eM24d71SImpZUnZ5SfoP+W8TgryqxgooM5evj
Zu5C+wJ8NU8wuNJ7ikzrmRZm+SQ6WkJNbDFvs3qGf4EcnwO0W3fXRSm7yHqSqi6I
N0f4R4TMjVIr1lm0kRaqnyJ0k9r/f3V9GX575W7NIL4c75wfc0JR5yqOycfYh6I6
um8LrHW9ozJoi4Hs63rsS9IaIW/M99esUEl/JmjfEb/P+dR1WjLQFDHdQVmZS47/
ng5B4FvCWCVAZhodlA24xTV6rS8e3PD+HUa2vMy+6rSXWSXYDeZLyGgtsNEv1RTF
5lp0TQc8mcUVvvSRmuH4mH55/k0ID+06oK4PHPe6IZ2g
-----END CERTIFICATE-----
Generated at Tue Aug 13 22:07:14 2024 by rpki-client on console-ams.rpki-client.org