Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lL4Dq6cY0M80kFrYIyOSfqsN9NM.roa
File: lL4Dq6cY0M80kFrYIyOSfqsN9NM.roa (raw, json)
Hash identifier: sAEc6UtidYbhLuzb+N0M0//9T9bqRbS4pKLGaF6Kfu8=
Subject key identifier: 94:BE:03:AB:A7:18:D0:CF:34:90:5A:D8:23:23:92:7E:AB:0D:F4:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01929C06FEAA8A6CA48D7D6EF234C1B2DBF1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lL4Dq6cY0M80kFrYIyOSfqsN9NM.roa
Signing time: Thu 17 Oct 2024 19:49:17 +0000
ROA not before: Thu 17 Oct 2024 19:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 07:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:06:fe:aa:8a:6c:a4:8d:7d:6e:f2:34:c1:b2:db:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 19:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94be03aba718d0cf34905ad82323927eab0df4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2e:8a:3b:6d:35:92:cc:86:ec:ce:54:62:96:
87:0a:7e:67:14:4c:cd:c9:8c:be:f4:f4:b8:e9:4c:
d7:69:68:04:32:53:de:9a:99:40:c1:1b:d0:ee:82:
7b:a3:fe:f9:b8:fa:92:5a:f2:ed:2c:ae:3d:fa:2e:
95:ae:88:a4:e9:5d:d0:87:78:7e:2a:6a:97:36:9c:
5f:67:ba:e5:a6:ba:32:67:d7:13:77:42:73:9d:ad:
5b:5c:de:8f:85:76:7d:8e:a2:27:b7:99:6e:28:c8:
2e:a8:9a:64:df:ca:51:e5:04:a5:30:1b:0f:d6:5d:
73:3b:bc:48:6c:21:b8:fc:ee:4d:58:22:8b:05:b0:
ae:99:50:29:d9:a3:f2:22:cc:ba:a9:9e:71:bd:da:
af:de:ae:53:be:36:f3:ec:6b:f4:38:22:a7:65:9a:
29:cc:ed:90:bb:eb:c4:b3:62:ef:4a:bd:3b:ec:e0:
c0:e1:45:0c:87:fe:04:be:c7:dd:08:0d:dc:7c:80:
61:f3:fa:a9:98:ff:87:c2:ed:f5:bd:66:2e:81:4d:
25:cf:83:c7:05:b4:99:c5:d1:ae:d8:50:84:6f:0e:
aa:53:39:d6:d1:b6:5c:de:b7:0e:51:50:a2:d3:d3:
bf:d7:42:b8:da:70:fa:a2:94:02:70:c0:7f:8c:ad:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BE:03:AB:A7:18:D0:CF:34:90:5A:D8:23:23:92:7E:AB:0D:F4:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lL4Dq6cY0M80kFrYIyOSfqsN9NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.153.0/24
31.57.176.0/24
31.57.178.0/23
31.57.181.0-31.57.183.255
Signature Algorithm: sha256WithRSAEncryption
9d:61:d7:16:b8:53:9f:bc:ea:a4:7f:be:09:bc:a4:46:1e:58:
4e:36:16:25:ee:f6:e4:dc:e0:81:ca:55:a6:af:f3:ea:d5:17:
a2:f3:82:79:b5:26:d9:9c:62:8b:e3:73:a5:83:3b:ab:78:6d:
d5:3f:4e:1b:6e:23:d9:64:c2:60:dc:77:0f:14:cb:6b:11:ad:
40:7a:7b:81:93:27:a3:19:8d:da:2a:50:f0:6a:ea:09:cf:e1:
cc:ed:38:28:90:34:b3:26:2a:24:67:5a:8b:00:d6:e3:49:59:
58:ab:90:9b:69:7f:9f:c5:7c:9f:a8:25:f7:0c:d4:c6:c1:b6:
bc:f3:7d:9e:4a:ad:e4:e2:14:68:07:55:ff:50:11:30:e8:f1:
30:8d:28:c2:f4:d7:5d:99:69:5f:3c:d7:13:8c:49:54:98:a7:
0b:e2:a4:16:64:49:d4:71:9e:a2:89:78:3c:58:1b:31:2a:71:
a2:6f:c8:0c:03:62:bc:5f:43:6a:9c:22:e1:9b:13:01:97:21:
7b:4b:7d:3f:3c:20:cb:e0:7b:fb:9b:86:f1:f5:57:17:94:ad:
e3:f1:77:cc:99:b6:b5:98:e8:b3:15:ef:01:23:7e:d2:62:01:
cd:f0:da:7b:32:75:88:52:4d:6c:60:59:94:27:7c:6d:d1:81:
03:fe:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 08:57:28 2024 by rpki-client on console-fra.rpki-client.org