Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ql1iwbUU4UhYI4as9dc34KaWHCg.roa
File: ql1iwbUU4UhYI4as9dc34KaWHCg.roa (raw, json)
Hash identifier: d+QJGbJW8EAlg5KjrDu+i/ffwH6dDfWul6eYm/F5Qn0=
Subject key identifier: AA:5D:62:C1:B5:14:E1:48:58:23:86:AC:F5:D7:37:E0:A6:96:1C:28
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01931075955DCB24B8404C40E924F3921702
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ql1iwbUU4UhYI4as9dc34KaWHCg.roa
Signing time: Sat 09 Nov 2024 10:26:01 +0000
ROA not before: Sat 09 Nov 2024 10:26:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215242
IP address blocks: 31.58.251.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 08:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:75:95:5d:cb:24:b8:40:4c:40:e9:24:f3:92:17:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 9 10:26:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa5d62c1b514e148582386acf5d737e0a6961c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:23:1e:c2:0d:bc:65:be:31:16:7c:88:85:
00:24:cd:f9:dc:09:35:d4:3f:55:2a:cd:a0:04:ef:
3f:70:67:54:8c:4f:14:fd:eb:89:2b:d7:d7:19:0a:
5a:13:5a:c8:c2:25:c1:61:d0:17:30:a6:85:b9:a7:
31:3d:b7:c0:a7:e1:bd:08:59:44:6e:50:f2:36:b9:
c0:f9:4d:51:0b:8b:a9:2c:d7:c6:7c:83:f8:51:69:
de:62:49:11:54:14:b9:e5:15:bd:04:da:1a:2f:eb:
b4:14:b1:bc:53:78:ed:f2:fd:1e:94:84:65:f3:a9:
d7:1a:4d:e3:21:df:1d:33:60:97:fb:9b:d8:74:76:
87:e7:91:b6:b8:61:b7:e1:80:17:51:da:22:6e:40:
e7:18:d7:1c:5c:0f:a9:b8:99:97:96:f8:8e:b6:b9:
b3:7f:d8:bc:0e:76:2e:04:b5:c6:d6:53:f2:a0:ac:
54:4e:1d:4d:0a:de:d4:b1:2e:93:69:94:00:b8:d9:
55:ed:11:0c:a8:30:91:57:95:89:6e:8b:de:e6:f8:
c3:45:23:d3:16:67:cf:fd:ee:99:c4:fa:60:15:aa:
0e:b8:ed:ea:fc:97:12:58:c2:f9:d8:d0:2c:52:2f:
52:9e:78:83:88:8c:ed:03:7d:45:80:ca:ae:a9:e9:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:62:C1:B5:14:E1:48:58:23:86:AC:F5:D7:37:E0:A6:96:1C:28
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ql1iwbUU4UhYI4as9dc34KaWHCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.251.0/24
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
96:43:21:9d:fc:5a:01:2a:3e:27:a2:80:4f:a0:17:65:fb:32:
00:c3:9b:a4:fe:d9:ca:dc:c4:f7:d9:69:a6:ba:2a:0e:11:df:
1f:08:77:ff:4a:34:4c:44:65:d9:39:cb:9f:6d:4d:3d:c1:8c:
c1:47:cf:13:ad:b8:eb:23:21:fb:de:2a:63:a8:39:34:79:58:
e8:27:94:24:5a:90:ae:b9:86:e1:48:1c:d2:12:83:7b:d4:48:
fc:a9:e6:21:4f:e8:3e:7f:d1:fd:73:2d:1c:23:0f:4f:1f:f9:
de:76:6e:30:24:e1:bf:51:d2:c5:e7:eb:6e:7c:63:73:44:6d:
59:f5:fd:80:5b:4e:e5:9d:b8:a9:49:35:48:31:7b:2d:fb:cd:
8f:b0:99:c6:0a:55:c6:cb:b3:94:a2:9c:d8:fb:c0:98:44:8f:
73:01:ba:93:99:62:11:6c:07:41:3e:37:7c:6c:58:bb:30:c4:
30:c8:ac:e7:33:a2:1b:0e:74:50:6a:98:9a:80:a9:be:61:05:
07:3e:ed:d9:96:e2:3b:31:8d:8d:23:ab:8d:42:93:84:4e:2f:
57:d9:66:58:62:fd:c3:52:65:3d:f5:88:e1:9f:0e:df:3b:22:
61:00:13:ef:26:43:6d:24:22:ce:54:af:36:ed:38:ee:29:60:
a0:47:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 09:36:25 2024 by rpki-client on console-fra.rpki-client.org