Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rK3o8LlHlQ6PJFOAUnx6oYoWAB4.roa
File: rK3o8LlHlQ6PJFOAUnx6oYoWAB4.roa (raw, json)
Hash identifier: JehHVB4D+ldmLi5q3Po+agBjsx4uA1Zs4WHE39U08yM=
Subject key identifier: AC:AD:E8:F0:B9:47:95:0E:8F:24:53:80:52:7C:7A:A1:8A:16:00:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191EEE32336B718AFF9C063E20665E5436F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rK3o8LlHlQ6PJFOAUnx6oYoWAB4.roa
Signing time: Sat 14 Sep 2024 04:55:48 +0000
ROA not before: Sat 14 Sep 2024 04:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 31.57.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 12:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ee:e3:23:36:b7:18:af:f9:c0:63:e2:06:65:e5:43:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 14 04:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acade8f0b947950e8f245380527c7aa18a16001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:96:8f:d0:81:9a:c5:75:a0:ac:e8:69:05:
ba:cd:c3:fa:25:40:44:f9:7b:5a:f0:f4:f1:e2:04:
52:3c:95:f3:d5:2b:c1:26:2a:a3:17:c7:89:f9:97:
65:e5:87:1c:b7:fc:19:c7:5d:34:7b:d0:fd:4e:b2:
9f:58:30:07:fb:85:4e:ba:49:56:2a:d3:33:c6:58:
03:7a:a2:bb:4d:66:77:bc:9d:e9:5c:92:8b:10:5d:
d5:5f:27:6c:b6:c5:1b:f5:e0:44:9d:80:a3:d5:52:
53:a5:71:0c:fd:87:39:12:24:49:be:fd:fb:5a:5a:
48:1c:18:9a:13:97:f1:69:a8:9e:67:6a:88:20:ba:
c9:b3:ed:be:6d:b8:9d:a4:27:22:5d:a2:df:fc:d6:
83:59:72:d9:7e:a9:3d:d1:22:7f:f9:d4:c9:b4:57:
76:7c:4c:0e:1a:63:17:29:c9:58:d3:1c:82:dc:bb:
1a:40:b4:74:81:a1:81:5b:c2:c2:1e:21:0a:cc:3d:
0f:ea:60:11:17:40:75:89:3f:24:e2:50:81:5f:49:
a4:cc:85:50:85:ad:c0:c3:da:5b:e8:d9:25:9f:26:
19:d6:a4:0b:47:79:32:b4:39:5c:9f:31:a7:51:47:
ed:95:77:0a:c2:a2:69:e7:1d:32:3c:6f:86:9b:9e:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:E8:F0:B9:47:95:0E:8F:24:53:80:52:7C:7A:A1:8A:16:00:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rK3o8LlHlQ6PJFOAUnx6oYoWAB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5e:29:18:2e:b1:6f:93:50:4c:0b:1b:ce:50:d3:ec:b2:ba:
9f:2a:be:4e:c9:30:38:8e:26:cd:a7:b1:48:9d:02:ee:1c:f7:
4e:e0:59:a0:d7:3c:7a:d1:ca:12:dd:a7:f1:6f:fa:44:94:3c:
f0:7f:72:6a:fa:e6:76:0f:68:c3:1c:b4:e8:ee:01:66:23:4a:
7b:27:9a:c4:5e:25:a8:8e:ff:1c:86:f9:d4:2e:ad:c9:79:0b:
1d:8d:40:16:a0:0a:0e:1e:e0:bf:20:30:b5:67:c3:12:2c:57:
b4:48:63:c0:66:d1:af:55:ad:7a:c9:7e:41:06:f5:4e:f5:35:
e3:a9:ac:3e:a9:d8:d0:0a:06:ee:72:de:df:46:8c:d7:4b:00:
d2:7f:f5:ae:f6:a6:20:28:c8:13:be:48:62:7a:1f:9e:4f:9b:
46:be:91:64:2b:94:3a:28:f6:fb:82:be:cb:9a:17:30:c7:32:
c5:ad:08:d9:25:ba:38:f9:5e:72:7f:6a:bc:09:fe:48:98:e9:
ad:c0:21:c2:d9:d1:47:b8:8a:6b:99:97:73:58:b2:6d:b4:96:
85:38:23:29:c0:3c:87:f8:2d:32:d3:a3:9b:59:50:c2:df:4e:
fa:d0:0f:50:76:6c:31:29:66:98:05:40:1a:ed:5f:76:11:1a:
ba:5d:5a:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHu4yM2txiv+cBj4gZl5UNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTE0MDQ1NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2FkZThmMGI5NDc5NTBlOGYyNDUzODA1MjdjN2FhMThhMTYwMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNSWj9CBmsV1oKzoaQW6zcP6JUBE
+Xta8PTx4gRSPJXz1SvBJiqjF8eJ+Zdl5Ycct/wZx100e9D9TrKfWDAH+4VOuklW
KtMzxlgDeqK7TWZ3vJ3pXJKLEF3VXydstsUb9eBEnYCj1VJTpXEM/Yc5EiRJvv37
WlpIHBiaE5fxaaieZ2qIILrJs+2+bbidpCciXaLf/NaDWXLZfqk90SJ/+dTJtFd2
fEwOGmMXKclY0xyC3LsaQLR0gaGBW8LCHiEKzD0P6mARF0B1iT8k4lCBX0mkzIVQ
ha3Aw9pb6NklnyYZ1qQLR3kytDlcnzGnUUftlXcKwqJp5x0yPG+Gm56DAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyt6PC5R5UOjyRTgFJ8eqGKFgAeMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvckszbzhMbEhsUTZQSkZPQVVueDZvWW9XQUI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmGMA0G
CSqGSIb3DQEBCwUAA4IBAQAvXikYLrFvk1BMCxvOUNPssrqfKr5OyTA4jibNp7FI
nQLuHPdO4Fmg1zx60coS3afxb/pElDzwf3Jq+uZ2D2jDHLTo7gFmI0p7J5rEXiWo
jv8chvnULq3JeQsdjUAWoAoOHuC/IDC1Z8MSLFe0SGPAZtGvVa16yX5BBvVO9TXj
qaw+qdjQCgbuct7fRozXSwDSf/Wu9qYgKMgTvkhieh+eT5tGvpFkK5Q6KPb7gr7L
mhcwxzLFrQjZJbo4+V5yf2q8Cf5ImOmtwCHC2dFHuIprmZdzWLJttJaFOCMpwDyH
+C0y06ObWVDC30760A9QdmwxKWaYBUAa7V92ERq6XVqQ
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org