Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rES6Wz76a00uhI4yvvkZiOtvGZo.roa
File: rES6Wz76a00uhI4yvvkZiOtvGZo.roa (raw, json)
Hash identifier: SBPXAO7rpF5I1P2OT8tY4sVJ+A03gDTBLNk6W/lzAlw=
Subject key identifier: AC:44:BA:5B:3E:FA:6B:4D:2E:84:8E:32:BE:F9:19:88:EB:6F:19:9A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019290E0E9ADD13E7D6C188E0C8C5293B386
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rES6Wz76a00uhI4yvvkZiOtvGZo.roa
Signing time: Tue 15 Oct 2024 15:51:51 +0000
ROA not before: Tue 15 Oct 2024 15:51:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 08:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:e0:e9:ad:d1:3e:7d:6c:18:8e:0c:8c:52:93:b3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 15 15:51:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac44ba5b3efa6b4d2e848e32bef91988eb6f199a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:7d:25:30:cd:3f:e6:77:9b:ce:e3:9d:e4:
e9:38:1b:00:f9:68:28:59:1e:e0:c2:2f:bd:2a:40:
6f:14:19:8b:da:f3:3d:2b:7d:64:fd:7f:59:59:61:
ec:44:1f:82:69:63:8c:70:24:47:b7:3e:30:54:e1:
27:dd:69:e9:e6:24:34:df:1c:84:5b:8d:56:f3:d2:
d2:fc:03:17:30:a3:9f:93:8d:be:fc:ce:87:dd:0a:
6f:25:11:55:25:7f:3d:63:a6:6e:6f:a2:bf:55:aa:
84:e1:d2:e1:b1:8a:e8:d4:33:a4:28:c3:de:53:d4:
b1:d7:80:50:df:50:d2:b2:64:9d:54:29:6b:c0:77:
db:fc:e3:b0:ff:29:a0:0d:30:6f:93:32:95:e4:57:
e8:4e:a1:9a:2c:12:7c:e4:43:66:13:e5:76:d7:1f:
1b:a8:37:bf:41:5e:46:dc:28:85:a6:8f:8e:ca:90:
6e:95:8f:cd:82:6d:f9:9d:80:56:b6:22:af:84:79:
6f:a4:86:d1:50:61:76:c5:fd:db:d2:ac:2d:d3:25:
d0:ce:d3:26:0f:17:70:71:73:6e:33:92:f0:5b:c3:
a8:75:ca:56:09:41:1f:43:36:83:6a:d4:d9:04:7d:
3a:bc:a7:ec:cd:d8:0f:1f:2c:8b:33:de:6e:b3:58:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:BA:5B:3E:FA:6B:4D:2E:84:8E:32:BE:F9:19:88:EB:6F:19:9A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rES6Wz76a00uhI4yvvkZiOtvGZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.153.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4b:ec:54:51:a9:cd:9a:ff:3c:7e:56:75:c2:f4:9f:bd:69:
eb:a3:18:0f:bf:ef:be:6e:30:2b:bd:39:f4:9a:5a:c6:c9:df:
f4:c3:68:8f:13:ad:5e:3c:7a:1c:2a:8e:8b:c0:fa:e1:8c:3c:
5a:1b:06:e7:b9:52:e9:2d:2a:fb:4e:e5:9a:91:4d:0b:e3:ce:
bf:01:d4:98:17:ee:77:3c:6a:06:88:6b:d6:55:61:bd:17:29:
1d:69:79:05:6b:75:58:80:25:54:ca:ff:43:be:2f:65:a6:86:
23:ab:0a:0f:14:52:04:e5:e5:14:df:28:3a:e9:4f:10:36:6f:
0a:c1:db:a3:33:db:4e:e7:88:ba:3a:4f:e7:2c:40:fb:0f:59:
eb:a2:ec:8e:24:94:12:fa:10:37:c7:2c:3d:23:13:b8:08:ea:
b8:b7:5f:9f:4b:52:4a:80:84:5b:48:b7:58:52:9a:44:6c:4b:
dc:0a:6a:e5:f3:5d:49:6e:c6:33:b1:8c:79:31:43:79:1d:5a:
51:5e:45:32:9b:0f:03:76:57:93:b9:70:6d:4d:ef:97:7d:76:
53:a1:71:52:6b:ca:19:c5:94:76:1f:ae:55:57:37:7c:d9:f1:
8e:a9:aa:5e:43:18:6d:d2:25:e9:11:55:2d:20:c0:db:77:ab:
92:08:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 10:45:14 2024 by rpki-client on console-ams.rpki-client.org