Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nFpmWvyLeT0HMU-WycWdpkuezp4.roa
File: nFpmWvyLeT0HMU-WycWdpkuezp4.roa (raw, json)
Hash identifier: QsKEnKrDnPwRh9Lnze8fD5PCoqJg6oridrwyMoz/zi4=
Subject key identifier: 9C:5A:66:5A:FC:8B:79:3D:07:31:4F:96:C9:C5:9D:A6:4B:9E:CE:9E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191DA9032958502CEA20E0293E15AE6C23E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nFpmWvyLeT0HMU-WycWdpkuezp4.roa
Signing time: Tue 10 Sep 2024 06:12:48 +0000
ROA not before: Tue 10 Sep 2024 06:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44382
IP address blocks: 31.57.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 04:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:90:32:95:85:02:ce:a2:0e:02:93:e1:5a:e6:c2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 06:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c5a665afc8b793d07314f96c9c59da64b9ece9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:a4:04:be:63:f7:4e:32:58:05:c3:5a:a1:
6f:27:bc:be:13:d6:d1:3d:a1:b6:2e:9e:6a:93:2f:
27:ef:70:e2:10:23:14:74:ba:4d:e5:f9:e1:01:3d:
e1:70:86:8f:41:64:e4:f1:c8:f2:d2:e3:40:dc:65:
a9:f7:64:eb:6f:73:2b:4c:7b:f4:28:ac:06:62:c3:
f9:f3:d8:c7:af:e1:15:47:bd:e9:b8:7a:b9:9e:cf:
bb:ab:23:a1:29:a7:11:a2:18:e6:18:2e:27:71:37:
1a:7c:ed:1a:67:15:c0:7e:01:f6:91:bf:a4:4f:86:
81:ac:73:f7:ff:e1:28:25:24:fb:a9:e7:f0:d9:ab:
c2:26:06:27:65:ae:e2:0f:43:32:14:f3:a0:4a:2b:
d2:fa:20:77:4b:7c:fc:26:42:8b:09:23:a9:43:22:
9f:de:89:f1:c2:94:93:de:bb:8c:b8:3c:e4:f7:d8:
45:c2:8e:31:3b:8d:7f:c0:a9:90:d8:e4:94:bd:47:
fd:5c:c6:60:91:19:73:42:27:5b:d2:b1:f3:43:ec:
14:79:1c:c8:c2:68:50:66:8c:35:a1:f0:bf:5e:44:
8d:32:43:a8:86:29:27:3b:ce:ef:6a:f0:cf:84:ab:
97:d0:d1:9c:0b:e7:47:0b:bd:fd:32:af:4a:0b:42:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:66:5A:FC:8B:79:3D:07:31:4F:96:C9:C5:9D:A6:4B:9E:CE:9E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nFpmWvyLeT0HMU-WycWdpkuezp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.150.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f4:df:c9:54:c1:6d:1c:3f:e1:01:05:46:50:e6:ab:4b:ff:
bb:23:2d:5c:f7:7e:67:f1:81:6a:19:1f:9a:59:ce:cc:e3:ab:
ec:a2:18:80:87:50:e1:17:82:9e:89:0f:fe:c4:2b:fd:ae:ab:
a8:6c:a7:80:3f:85:ab:92:74:da:d2:77:87:6d:39:e4:31:e2:
38:b0:fd:52:96:f9:33:81:87:94:e6:a2:9d:ad:1a:48:16:ec:
03:10:f2:10:f4:41:16:54:ad:12:d7:00:4d:16:ba:19:4d:da:
a3:86:8c:21:55:6b:95:a1:ef:fe:63:04:c9:14:6f:94:40:02:
c7:1f:48:11:5c:08:d1:7e:9b:37:68:a3:48:96:85:8f:c8:82:
b2:24:11:95:17:77:99:ce:49:bb:d4:18:ee:c1:29:a7:ee:9f:
a9:37:e0:21:b5:15:89:5e:07:e2:c2:9c:b6:8e:14:da:83:c2:
79:7c:b3:00:c8:60:87:d5:de:0e:47:27:be:86:6d:8e:81:07:
56:7c:39:e8:8c:71:a0:d9:ac:08:1e:ab:e2:d0:f4:90:0c:79:
63:cd:c5:ba:25:83:67:74:c0:ce:f5:89:ed:e8:30:52:14:b5:
58:cf:dc:9a:bc:f5:a3:7a:7c:f9:7d:8c:89:ab:91:b4:47:ed:
8b:6e:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 07:27:13 2024 by rpki-client on console-ams.rpki-client.org