Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lIXIVCO3FhcyYLXrwWYEInJjVpw.roa
File: lIXIVCO3FhcyYLXrwWYEInJjVpw.roa (raw, json)
Hash identifier: bTsNBqExIG7gKOPIYkGYaD8VRcRB7rQrqY2SCsCRNYY=
Subject key identifier: 94:85:C8:54:23:B7:16:17:32:60:B5:EB:C1:66:04:22:72:63:56:9C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192E69A40CFFBAC5EF9EEF90F90EAD844EE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lIXIVCO3FhcyYLXrwWYEInJjVpw.roa
Signing time: Fri 01 Nov 2024 07:22:01 +0000
ROA not before: Fri 01 Nov 2024 07:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140627
IP address blocks: 31.56.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:9a:40:cf:fb:ac:5e:f9:ee:f9:0f:90:ea:d8:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 07:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9485c85423b716173260b5ebc16604227263569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:54:71:dd:d2:ac:6d:53:8c:56:5b:d8:6a:
97:ef:b4:b5:b2:8e:62:2b:e6:8e:ba:84:07:b5:ec:
6b:55:25:45:a4:47:b9:fd:c2:46:1d:cb:4e:ac:f8:
37:4e:81:4d:b4:81:7d:d6:c5:41:5b:0d:a9:d4:ac:
c4:73:e5:94:10:f4:73:29:7c:c6:cb:cb:d8:df:2d:
70:59:a0:22:98:e9:0a:96:8d:83:3e:6d:79:d9:05:
db:bf:8e:43:3f:ed:c2:e3:ea:42:29:5e:fa:10:e1:
f1:70:95:1a:f5:96:62:c0:7c:80:58:9c:dc:2b:89:
2b:17:7b:1e:ee:58:e8:69:07:b3:33:17:e3:8d:29:
95:ba:54:bc:78:ea:e7:87:a8:1f:13:31:c8:33:5c:
bd:b4:57:d5:bf:9f:83:ce:97:79:b0:46:3f:78:19:
35:08:58:1e:a6:13:90:0e:1c:bb:71:7c:21:55:58:
41:c6:95:b9:5a:66:58:b5:c5:12:c2:b7:e0:68:8d:
fb:d6:da:43:47:37:f2:3c:4d:79:18:d6:2b:14:32:
61:2f:a8:fd:94:1b:8e:97:c3:77:7c:62:3d:1c:ec:
bb:57:bb:da:36:78:49:50:d2:c7:82:55:cf:17:0f:
2b:33:80:31:f5:e2:78:c9:ff:fa:c7:6f:2d:e7:e1:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:85:C8:54:23:B7:16:17:32:60:B5:EB:C1:66:04:22:72:63:56:9C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lIXIVCO3FhcyYLXrwWYEInJjVpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.24.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0f:67:a9:1a:5f:a1:4d:d9:23:02:1d:63:fd:37:18:e5:fb:
c3:0c:aa:8a:ab:56:c8:f5:ee:c9:b2:25:29:de:8c:4c:33:b2:
1d:98:29:6f:fc:19:f9:4c:be:4c:74:22:76:43:df:73:f3:5c:
0a:75:cc:7a:de:1d:b6:e0:ef:80:96:d2:43:31:de:bb:4f:c0:
9e:8c:3c:fb:05:02:9c:91:3d:d3:ed:89:77:89:e6:ab:0e:6f:
f3:6a:74:77:a6:72:8f:90:39:e5:22:92:d4:a0:0b:dd:ec:1d:
b0:a1:92:4f:3b:35:0d:49:38:23:bc:22:66:fd:f0:d3:ce:e0:
16:6a:a9:4e:f6:38:11:a9:2f:a4:b1:36:d8:52:f4:84:b3:db:
94:9e:4f:e2:aa:25:bc:61:7a:60:68:6c:ec:00:09:e6:5c:a4:
3a:e3:34:c8:d8:d4:c5:85:c5:e2:ff:29:28:df:29:1e:48:32:
f8:c4:81:40:16:c1:5d:99:21:29:f5:78:e2:7c:d8:f2:a8:4e:
92:f0:50:46:82:2f:37:0f:f4:bf:c0:1e:0b:6f:5b:ab:38:45:
1a:95:4a:a4:20:5e:9a:9f:01:80:12:55:bb:b0:26:c9:0b:40:
81:65:6f:3d:92:6c:70:5a:a9:db:6a:11:85:50:7d:a8:5b:20:
dc:9d:cd:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLmmkDP+6xe+e75D5Dq2ETuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTAxMDcyMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDg1Yzg1NDIzYjcxNjE3MzI2MGI1ZWJjMTY2MDQyMjcyNjM1NjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y1Ucd3SrG1TjFZb2GqX77S1so5i
K+aOuoQHtexrVSVFpEe5/cJGHctOrPg3ToFNtIF91sVBWw2p1KzEc+WUEPRzKXzG
y8vY3y1wWaAimOkKlo2DPm152QXbv45DP+3C4+pCKV76EOHxcJUa9ZZiwHyAWJzc
K4krF3se7ljoaQezMxfjjSmVulS8eOrnh6gfEzHIM1y9tFfVv5+Dzpd5sEY/eBk1
CFgephOQDhy7cXwhVVhBxpW5WmZYtcUSwrfgaI371tpDRzfyPE15GNYrFDJhL6j9
lBuOl8N3fGI9HOy7V7vaNnhJUNLHglXPFw8rM4Ax9eJ4yf/6x28t5+FP6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJSFyFQjtxYXMmC168FmBCJyY1acMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbElYSVZDTzNGaGN5WUxYcndXWUVJbkpqVnB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgYMA0G
CSqGSIb3DQEBCwUAA4IBAQAHD2epGl+hTdkjAh1j/TcY5fvDDKqKq1bI9e7JsiUp
3oxMM7IdmClv/Bn5TL5MdCJ2Q99z81wKdcx63h224O+AltJDMd67T8CejDz7BQKc
kT3T7Yl3iearDm/zanR3pnKPkDnlIpLUoAvd7B2woZJPOzUNSTgjvCJm/fDTzuAW
aqlO9jgRqS+ksTbYUvSEs9uUnk/iqiW8YXpgaGzsAAnmXKQ64zTI2NTFhcXi/yko
3ykeSDL4xIFAFsFdmSEp9XjifNjyqE6S8FBGgi83D/S/wB4Lb1urOEUalUqkIF6a
nwGAElW7sCbJC0CBZW89kmxwWqnbahGFUH2oWyDcnc3T
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:56 2025 by rpki-client