Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s_1nAVK8RXEircPmddH8kPhAsBw.roa
File: s_1nAVK8RXEircPmddH8kPhAsBw.roa (raw, json)
Hash identifier: S4Hb54c57T3chqsWpFin6yZh/PbJ/+wT7m4EniZPJAs=
Subject key identifier: B3:FD:67:01:52:BC:45:71:22:AD:C3:E6:75:D1:FC:90:F8:40:B0:1C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192E694C4307184E7A5D8EF4E37530333AA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s_1nAVK8RXEircPmddH8kPhAsBw.roa
Signing time: Fri 01 Nov 2024 07:16:02 +0000
ROA not before: Fri 01 Nov 2024 07:16:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 06:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:94:c4:30:71:84:e7:a5:d8:ef:4e:37:53:03:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 07:16:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3fd670152bc457122adc3e675d1fc90f840b01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8f:63:f2:47:c6:f4:d1:bb:cb:7a:2d:a1:b5:
83:67:36:72:f4:6c:4e:42:57:f2:d5:da:c4:77:9d:
5b:a8:3b:16:f2:ab:ed:42:76:ab:e5:4f:97:9f:30:
c6:4c:4c:e9:2c:b7:3a:da:b4:b5:96:91:c1:30:03:
cf:2d:0f:00:01:41:0e:ae:51:57:c4:48:a0:8f:86:
86:18:70:b7:c6:01:94:11:ef:4f:87:a1:d6:2b:a5:
0d:2b:90:54:1e:85:4e:95:54:90:8c:a0:1a:96:50:
af:40:f0:39:6e:e3:d5:2c:86:3d:93:52:aa:98:7b:
14:f7:61:16:03:89:18:e0:b2:35:a2:1a:42:69:f7:
fc:9b:ae:96:70:5e:43:af:05:2f:da:45:c3:b3:74:
33:fa:55:a8:e2:6b:01:b5:41:fc:b1:ff:6c:99:6d:
f5:08:78:13:1c:e3:05:8e:1d:63:0f:3f:1a:82:d1:
25:b5:0c:87:bf:59:76:86:5d:64:24:b0:0b:d1:6f:
50:dc:d7:ad:37:50:d1:ab:19:82:36:cb:dc:4e:31:
3d:7d:d3:61:00:29:db:ff:d6:df:48:02:63:db:97:
50:54:45:7b:db:da:3b:04:c0:5f:eb:90:68:2f:c9:
e3:f6:d8:c9:dd:fb:59:47:ea:57:17:1f:83:c1:72:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FD:67:01:52:BC:45:71:22:AD:C3:E6:75:D1:FC:90:F8:40:B0:1C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s_1nAVK8RXEircPmddH8kPhAsBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.202.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:71:17:32:9e:cc:cb:35:01:6f:97:30:d6:cc:ab:54:b9:c0:
d0:0f:da:b0:fe:b7:5d:21:98:b9:75:6d:50:a6:23:68:c7:ff:
45:14:21:71:02:a4:7e:ef:9f:81:11:f1:2f:e5:44:dc:df:3d:
ef:1f:c5:09:87:82:16:dc:ce:22:5c:06:52:d6:48:ac:cd:86:
db:2e:8d:de:59:33:2f:62:cd:59:ac:30:75:9a:24:b9:01:98:
53:05:4e:76:d4:4c:c4:70:79:e8:95:37:e3:87:90:a9:71:e7:
da:36:43:ef:ff:8f:14:2f:8c:c7:88:5e:76:2d:bf:0c:9a:1d:
2f:ff:ba:c5:fd:ed:a6:89:a5:69:82:fc:be:8d:53:15:3b:44:
95:79:eb:d4:a9:6c:94:b8:19:ed:af:7a:e2:e7:fc:a3:0e:b9:
33:c0:0e:15:11:fe:e3:ee:4a:ae:28:c8:ff:38:9d:70:d6:fb:
65:38:05:3b:7f:50:4e:9a:fa:9b:c4:3c:b8:b9:64:04:31:2a:
53:31:42:9f:3d:c4:f5:a7:35:a2:ee:93:4f:a3:aa:ff:05:29:
19:cc:15:16:d4:78:16:01:8e:cd:cc:32:2a:42:d7:85:c0:63:
cd:a0:d2:79:e2:dc:45:3b:47:a8:65:fb:84:a4:42:0c:78:1e:
8a:d7:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:07 2024 by rpki-client on console-ams.rpki-client.org