Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q2p-96JYMuu5KNeuR79c876yE4E.roa
File: q2p-96JYMuu5KNeuR79c876yE4E.roa (raw, json)
Hash identifier: gPUNaEKjVN+3LATK48/JqhnahDl0FHsEiBLINd9sDXo=
Subject key identifier: AB:6A:7E:F7:A2:58:32:EB:B9:28:D7:AE:47:BF:5C:F3:BE:B2:13:81
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019289C09483E0072B134BD3D9326069C3E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q2p-96JYMuu5KNeuR79c876yE4E.roa
Signing time: Mon 14 Oct 2024 06:39:12 +0000
ROA not before: Mon 14 Oct 2024 06:39:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215071
IP address blocks: 31.57.230.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 13:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:c0:94:83:e0:07:2b:13:4b:d3:d9:32:60:69:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 06:39:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab6a7ef7a25832ebb928d7ae47bf5cf3beb21381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:19:c2:9c:57:9f:dc:33:b4:aa:48:ec:ed:
0c:c0:25:96:e9:ef:7e:4b:9f:3c:39:0c:80:f3:41:
33:1f:3c:e4:ed:4a:34:a0:eb:f9:a7:ec:85:09:91:
31:27:2f:e6:15:4a:8a:4e:a5:b2:a0:d8:09:24:33:
76:86:a8:68:7f:48:d8:1f:32:4c:dd:b3:3a:c5:9a:
62:bd:84:79:3b:87:f2:70:de:87:80:e1:30:52:34:
fa:93:4e:49:3b:3d:f6:eb:e3:16:f7:ac:d5:1e:25:
ff:ac:e2:ad:77:7a:63:a9:e3:99:5b:a7:d9:35:e7:
e5:81:13:9e:ea:90:1b:a6:ec:37:7e:9b:16:65:1b:
2b:39:85:b2:c2:42:6b:70:10:a1:42:93:a0:22:93:
ea:e1:32:05:88:25:cb:79:f9:28:b7:da:a2:60:02:
e2:b5:f6:62:cb:3e:8a:40:98:21:8f:8c:c8:48:1d:
43:d3:58:c6:52:98:8e:a6:0a:e9:79:9f:9a:b2:8a:
62:bc:64:19:87:be:f3:7f:26:bc:11:df:ad:d2:51:
8a:f7:38:19:37:19:4f:10:83:17:96:48:d5:de:bc:
9a:ba:1c:80:c6:07:e2:a2:50:b0:5b:56:6a:40:d2:
76:78:0a:68:03:f4:0f:12:bb:e7:52:76:55:b7:19:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:7E:F7:A2:58:32:EB:B9:28:D7:AE:47:BF:5C:F3:BE:B2:13:81
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q2p-96JYMuu5KNeuR79c876yE4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.230.0/24
31.57.249.0-31.57.251.255
Signature Algorithm: sha256WithRSAEncryption
3f:45:35:17:03:9b:c6:ab:4d:d3:15:5b:d5:e7:6f:c3:d9:d0:
29:d4:17:9f:c9:fd:dd:b1:11:74:1b:04:19:ee:b5:dc:0a:00:
15:61:da:c9:e4:ea:67:e2:99:d9:64:ac:71:79:0b:27:4f:ae:
7f:e4:6b:6c:fd:00:44:7d:a8:91:81:b6:36:c9:2b:0d:c7:de:
f2:d7:88:ed:8f:8a:5d:44:f5:b9:af:7c:fc:25:5d:e2:97:b3:
da:27:e0:a2:2f:e5:1f:84:25:1c:2c:cc:7e:ac:0a:09:da:04:
98:0b:b4:3c:da:90:82:34:78:38:02:29:32:3b:f4:c3:39:ad:
b8:2d:77:f4:53:70:a3:26:c7:6f:72:c1:f1:ad:12:aa:9d:87:
49:4e:c2:1a:ed:55:34:04:79:e5:39:38:8e:2d:be:10:4f:e4:
dd:e7:b9:f5:b9:bf:eb:60:68:0a:0e:ff:7a:42:bd:82:98:c8:
28:a8:c1:a4:51:47:ba:2f:66:be:bc:f9:5a:ee:8d:8d:ea:e5:
c0:b2:79:08:5f:2d:b1:e1:f5:aa:1d:13:59:71:6d:0b:25:21:
62:69:3f:d3:11:31:e4:96:ad:21:8b:2e:48:4d:6c:74:92:96:
e0:3a:9d:ca:4a:2e:bb:a4:6a:a7:e4:2a:cb:97:ef:dc:f9:26:
91:01:8a:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 14 17:29:55 2024 by rpki-client on console-ams.rpki-client.org