Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l_kMN7n1imojyUPfbreLqx5sS8w.roa
File: l_kMN7n1imojyUPfbreLqx5sS8w.roa (raw, json)
Hash identifier: cZXcq7ThGUNiAh4WF/ke/zlucLt+8nPgGKFavY34zMk=
Subject key identifier: 97:F9:0C:37:B9:F5:8A:6A:23:C9:43:DF:6E:B7:8B:AB:1E:6C:4B:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01926B7524CD7837D3487142B6663EF74FF9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l_kMN7n1imojyUPfbreLqx5sS8w.roa
Signing time: Tue 08 Oct 2024 09:28:12 +0000
ROA not before: Tue 08 Oct 2024 09:28:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151576
IP address blocks: 31.57.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 06:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:75:24:cd:78:37:d3:48:71:42:b6:66:3e:f7:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 8 09:28:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97f90c37b9f58a6a23c943df6eb78bab1e6c4bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:91:61:39:67:79:27:22:3d:a9:41:84:9b:
a3:55:2c:ce:a9:a2:79:61:d1:cb:ac:99:8e:8a:9c:
b0:ae:46:05:b0:10:b6:70:3e:08:38:b5:bb:bc:ec:
f5:c9:ae:73:e9:7c:a3:ab:6c:cf:96:ce:2a:b2:2e:
23:d5:f9:be:c7:99:16:c2:95:e1:ab:3d:67:dd:d5:
47:4e:c5:26:e6:46:41:81:81:70:bc:44:01:86:a8:
68:5f:97:7d:38:4d:8e:a6:d2:86:fb:d4:0d:5d:d4:
94:2d:94:db:89:63:56:66:20:77:6d:ee:3c:4b:dc:
3f:bf:20:8e:d7:f0:75:1c:63:41:6b:48:27:53:30:
16:03:86:6b:75:df:df:7b:c3:86:4f:e1:2a:50:d8:
85:a1:a2:17:36:87:90:03:ab:92:bc:1f:80:dd:9a:
a4:1c:e1:0b:b1:07:40:d4:92:a3:5d:b3:47:8b:8a:
05:74:14:45:d8:16:0a:57:5e:a7:86:cc:a8:91:b2:
fb:ed:cb:d8:06:1b:e5:69:5a:8f:29:24:85:7d:27:
89:ad:e9:4d:eb:cf:c8:a8:25:9f:7f:90:f3:86:27:
41:43:aa:96:4e:3f:45:3b:b7:b3:e1:06:22:5c:5c:
b2:7e:6b:68:b1:3d:33:ac:a4:f6:05:6b:2c:57:d4:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F9:0C:37:B9:F5:8A:6A:23:C9:43:DF:6E:B7:8B:AB:1E:6C:4B:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l_kMN7n1imojyUPfbreLqx5sS8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.207.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8f:47:a2:52:3e:d7:86:19:45:da:44:ec:bb:3d:4e:4b:2b:
d8:45:c6:0e:23:42:c1:b2:74:77:85:03:17:31:0c:3a:18:70:
fc:c1:19:52:03:cc:60:f9:c6:1e:a5:61:9b:bb:91:00:cc:44:
f4:c1:3d:ff:b6:08:5b:9b:fe:cf:2c:01:1f:57:0e:67:99:6b:
b1:5a:d5:85:7e:b1:4f:e9:ce:c1:0e:e3:e3:e8:00:22:b9:29:
4f:bd:df:13:a6:ce:30:eb:81:75:f2:b4:a5:36:96:61:a6:f6:
d4:8d:e2:23:4e:1b:3b:c2:aa:2c:d8:1d:8e:52:18:23:94:34:
68:23:a1:02:5e:89:13:d0:ec:6f:a1:d1:51:bc:58:94:e7:b2:
58:ae:07:bb:8e:b3:24:33:03:d6:83:bc:2d:e3:f3:c4:13:42:
a5:98:fe:29:10:69:72:cc:e2:3a:94:00:ad:fc:9c:89:72:9f:
10:52:e6:fb:2d:b1:55:2d:60:d1:44:a0:5f:30:86:36:f5:08:
c6:a0:c2:2f:f4:4d:0c:96:c1:9a:e5:86:37:4b:fc:c8:92:18:
cf:d9:55:84:03:24:e6:81:1e:f8:9b:94:9c:90:6a:ab:4e:b3:
2c:cb:a6:15:25:d2:b6:6e:e0:84:23:58:d6:2c:25:7a:12:c2:
6d:84:d5:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJrdSTNeDfTSHFCtmY+90/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA4MDkyODEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2Y5MGMzN2I5ZjU4YTZhMjNjOTQzZGY2ZWI3OGJhYjFlNmM0YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkraRYTlneSciPalBhJujVSzOqaJ5
YdHLrJmOipywrkYFsBC2cD4IOLW7vOz1ya5z6Xyjq2zPls4qsi4j1fm+x5kWwpXh
qz1n3dVHTsUm5kZBgYFwvEQBhqhoX5d9OE2OptKG+9QNXdSULZTbiWNWZiB3be48
S9w/vyCO1/B1HGNBa0gnUzAWA4Zrdd/fe8OGT+EqUNiFoaIXNoeQA6uSvB+A3Zqk
HOELsQdA1JKjXbNHi4oFdBRF2BYKV16nhsyokbL77cvYBhvlaVqPKSSFfSeJrelN
68/IqCWff5DzhidBQ6qWTj9FO7ez4QYiXFyyfmtosT0zrKT2BWssV9SG3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJf5DDe59YpqI8lD3263i6sebEvMMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbF9rTU43bjFpbW9qeVVQZmJyZUxxeDVzUzh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznPMA0G
CSqGSIb3DQEBCwUAA4IBAQByj0eiUj7XhhlF2kTsuz1OSyvYRcYOI0LBsnR3hQMX
MQw6GHD8wRlSA8xg+cYepWGbu5EAzET0wT3/tghbm/7PLAEfVw5nmWuxWtWFfrFP
6c7BDuPj6AAiuSlPvd8Tps4w64F18rSlNpZhpvbUjeIjThs7wqos2B2OUhgjlDRo
I6ECXokT0OxvodFRvFiU57JYrge7jrMkMwPWg7wt4/PEE0KlmP4pEGlyzOI6lACt
/JyJcp8QUub7LbFVLWDRRKBfMIY29QjGoMIv9E0MlsGa5YY3S/zIkhjP2VWEAyTm
gR74m5SckGqrTrMsy6YVJdK2buCEI1jWLCV6EsJthNXu
-----END CERTIFICATE-----
Generated at Fri Nov 8 08:11:24 2024 by rpki-client on console-fra.rpki-client.org