Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nX86ag--vdsfqq_gmMS8_ednJ04.roa
File: nX86ag--vdsfqq_gmMS8_ednJ04.roa (raw, json)
Hash identifier: PVrib6VCm7m1NIzlZnepwPTF0eB+7yrnL3QIXtFir0w=
Subject key identifier: 9D:7F:3A:6A:0F:BE:BD:DB:1F:AA:AF:E0:98:C4:BC:FD:E7:67:27:4E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019270CEC5EC0739FD01F2CE5224E6113B7A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nX86ag--vdsfqq_gmMS8_ednJ04.roa
Signing time: Wed 09 Oct 2024 10:24:12 +0000
ROA not before: Wed 09 Oct 2024 10:24:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 14 Oct 2024 16:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:ce:c5:ec:07:39:fd:01:f2:ce:52:24:e6:11:3b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 9 10:24:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d7f3a6a0fbebddb1faaafe098c4bcfde767274e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:d5:53:1d:31:9d:6b:d2:96:33:2d:ff:9d:
4e:00:c7:0e:08:f0:e5:98:0c:7d:cb:e5:4d:7d:d9:
60:d3:da:09:a2:f5:7b:07:9b:11:f4:bc:1a:b6:2e:
43:54:fb:3a:42:18:ff:76:3d:1c:e8:a9:3b:3e:cb:
13:a6:ef:6b:18:6e:49:e0:ce:9d:29:15:74:f7:40:
b9:84:85:a2:87:59:04:02:f6:ad:0b:73:44:a5:bb:
67:f9:b2:fe:00:63:06:1f:46:4a:2b:7d:73:29:9f:
39:d2:d6:06:07:1c:7b:18:01:ad:e6:d1:00:b3:3d:
5e:ae:c0:3d:c6:66:4e:e4:2a:b3:7f:60:f7:dc:4a:
69:9e:c8:9c:0b:4c:c9:07:19:bd:25:3e:c3:e4:4a:
c0:be:d4:77:10:1e:05:41:80:48:ba:d5:65:ea:19:
77:64:da:ba:64:ec:a1:71:ce:42:fa:61:12:5e:61:
96:07:11:ab:ac:f1:d9:f4:1d:d3:66:53:01:af:f8:
5c:e2:46:f7:df:26:d7:8a:d0:7b:69:50:7a:1e:28:
bd:2f:9b:ed:cd:bc:d9:6e:a7:8f:68:1c:b5:0e:65:
b0:a1:fb:50:aa:3a:e5:76:36:61:90:d0:7c:44:a5:
3f:e7:df:96:90:a5:ae:67:ed:b5:0a:e2:ae:38:51:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:3A:6A:0F:BE:BD:DB:1F:AA:AF:E0:98:C4:BC:FD:E7:67:27:4E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nX86ag--vdsfqq_gmMS8_ednJ04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.162.0-31.57.165.255
Signature Algorithm: sha256WithRSAEncryption
b1:30:bb:d9:97:f9:2e:40:66:cc:bd:b5:c8:e4:12:02:79:d9:
f1:98:fe:64:d6:21:4c:0f:36:e7:24:50:ea:4b:58:6f:1a:5d:
3b:67:c5:e5:64:0e:5b:c7:b4:b2:31:cb:7a:cd:79:a0:3c:7f:
dd:fa:16:cf:fd:4d:35:98:3e:54:de:c3:b4:69:62:ce:c7:82:
66:3e:86:98:1e:bb:ef:4b:14:f0:ae:13:2b:fd:0c:41:71:6a:
67:a2:d0:d8:4f:0d:d0:d5:95:da:b7:74:03:94:75:6f:d9:59:
44:73:cc:d4:fd:a1:14:b9:cf:3a:67:8b:21:56:32:05:1e:c5:
1f:3f:62:3e:ca:e7:ce:de:67:90:99:af:44:92:ce:79:e6:87:
36:5f:77:e5:84:35:b6:b3:9a:4b:cd:1d:28:05:2b:3f:eb:68:
75:8b:7e:de:02:ec:d1:bd:c8:6e:9d:01:83:ab:f4:19:24:26:
18:67:d5:46:b8:f0:46:e2:7f:fe:c2:95:e9:3a:80:62:7b:3f:
47:e1:9d:c6:44:f8:75:57:88:a7:9d:6c:08:ca:86:74:05:d3:
1a:b6:d9:1b:2e:1d:e3:f2:10:1e:6d:a1:2c:a7:6d:77:e1:9b:
71:ec:b6:01:44:ed:6c:b0:be:52:ac:2c:54:7d:9e:11:40:f7:
95:b8:67:41
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZJwzsXsBzn9AfLOUiTmETt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA5MTAyNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDdmM2E2YTBmYmViZGRiMWZhYWFmZTA5OGM0YmNmZGU3NjcyNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcbVUx0xnWvSljMt/51OAMcOCPDl
mAx9y+VNfdlg09oJovV7B5sR9Lwati5DVPs6Qhj/dj0c6Kk7PssTpu9rGG5J4M6d
KRV090C5hIWih1kEAvatC3NEpbtn+bL+AGMGH0ZKK31zKZ850tYGBxx7GAGt5tEA
sz1ersA9xmZO5Cqzf2D33EppnsicC0zJBxm9JT7D5ErAvtR3EB4FQYBIutVl6hl3
ZNq6ZOyhcc5C+mESXmGWBxGrrPHZ9B3TZlMBr/hc4kb33ybXitB7aVB6Hii9L5vt
zbzZbqePaBy1DmWwoftQqjrldjZhkNB8RKU/59+WkKWuZ+21CuKuOFHamwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJ1/OmoPvr3bH6qv4JjEvP3nZydOMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvblg4NmFnLS12ZHNmcXFfZ21NUzhfZWRuSjA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEfOaID
BAEfOaQwDQYJKoZIhvcNAQELBQADggEBALEwu9mX+S5AZsy9tcjkEgJ52fGY/mTW
IUwPNuckUOpLWG8aXTtnxeVkDlvHtLIxy3rNeaA8f936Fs/9TTWYPlTew7RpYs7H
gmY+hpgeu+9LFPCuEyv9DEFxamei0NhPDdDVldq3dAOUdW/ZWURzzNT9oRS5zzpn
iyFWMgUexR8/Yj7K587eZ5CZr0SSznnmhzZfd+WENbazmkvNHSgFKz/raHWLft4C
7NG9yG6dAYOr9BkkJhhn1Ua48Ebif/7Clek6gGJ7P0fhncZE+HVXiKedbAjKhnQF
0xq22RsuHePyEB5toSynbXfhm3HstgFE7WywvlKsLFR9nhFA95W4Z0E=
-----END CERTIFICATE-----
Generated at Mon Oct 14 20:38:01 2024 by rpki-client on console-ams.rpki-client.org