Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uPs_o1vAZOkdTj4N5UKclYxlVz4.roa
File: uPs_o1vAZOkdTj4N5UKclYxlVz4.roa (raw, json)
Hash identifier: A480qrapRwVJDi+FTqF2Vo58hRgk45S819yAIZZGZUs=
Subject key identifier: B8:FB:3F:A3:5B:C0:64:E9:1D:4E:3E:0D:E5:42:9C:95:8C:65:57:3E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192DF05555A772AE93B7C0BE063EAC71DC8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uPs_o1vAZOkdTj4N5UKclYxlVz4.roa
Signing time: Wed 30 Oct 2024 20:02:01 +0000
ROA not before: Wed 30 Oct 2024 20:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56594
IP address blocks: 31.58.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:df:05:55:5a:77:2a:e9:3b:7c:0b:e0:63:ea:c7:1d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 20:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8fb3fa35bc064e91d4e3e0de5429c958c65573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:34:9c:97:2a:b5:45:77:63:79:d4:f1:3a:1c:
58:2f:41:7a:8d:45:a6:94:e2:d3:7f:d6:5a:b9:d4:
4f:45:fa:f2:f2:85:0b:f8:c1:38:9e:14:a9:f4:53:
ef:c8:51:53:30:2c:f6:c1:33:3c:ea:da:0a:e4:bf:
fe:8e:d7:b3:d4:95:89:d2:eb:10:f9:f5:0c:ee:c7:
23:98:cd:93:44:2c:0d:e6:c1:e7:e5:00:b4:06:c3:
1a:a3:1f:c6:28:86:db:8b:4d:56:ee:b1:3c:dd:96:
62:08:6a:fb:e9:d0:56:3a:fc:db:75:d1:c6:b1:d5:
8d:c8:f2:90:c5:dc:d5:a5:96:2f:57:49:50:9d:b1:
1c:43:4c:cf:dd:44:b7:97:51:8f:16:ff:e2:89:93:
df:fe:af:0a:97:c7:9c:72:fc:d3:f0:2a:76:1e:35:
ad:93:64:5c:2c:f4:32:b0:2e:56:eb:78:2e:5b:42:
70:96:46:61:08:f6:27:6f:00:c7:54:e4:be:ec:2b:
e8:ec:e7:c3:8e:ab:68:00:12:06:29:15:ec:32:94:
25:73:65:6d:2f:56:15:05:f8:f1:a5:18:af:66:f7:
38:74:3d:3f:13:06:65:da:5e:f6:58:fb:2a:5a:97:
ac:f5:7f:be:23:bf:0f:ad:e4:62:74:40:ff:eb:02:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:3F:A3:5B:C0:64:E9:1D:4E:3E:0D:E5:42:9C:95:8C:65:57:3E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uPs_o1vAZOkdTj4N5UKclYxlVz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1b:07:e0:6e:e6:4e:47:28:d3:c9:08:ef:ac:74:c9:c0:c3:
df:72:65:57:d9:eb:0d:33:0f:8d:66:bc:d3:5c:2a:b5:d0:c2:
90:1a:e1:4a:ed:53:42:60:21:88:41:b8:dc:16:e1:f4:ac:12:
a2:45:11:8a:19:8c:7f:40:5f:93:57:8e:66:01:d0:21:69:25:
6f:f6:d1:48:a2:99:89:c7:5b:43:d3:67:84:ff:5b:c0:df:9c:
a4:df:2c:3d:6e:ed:32:e1:54:17:07:2f:0a:fc:79:6b:0b:a3:
86:de:e1:4e:0d:42:53:49:06:15:2b:62:18:f4:c5:2f:a2:34:
8c:ac:5b:ab:9b:f6:8c:4d:ff:25:dd:b9:a8:84:19:c5:ba:a2:
99:5b:bc:2c:c4:2a:43:61:b6:f6:c3:dc:e8:0d:11:38:65:64:
de:2f:11:c7:c3:2a:75:e6:4e:37:b9:1a:2b:1f:57:f5:a4:1c:
93:96:ce:ac:1f:6b:e8:c9:92:bb:aa:ee:05:05:f9:62:af:c9:
3d:7c:e4:18:c4:18:f2:89:52:fa:d0:bf:ee:ff:23:e7:c5:10:
0d:17:d1:99:d5:86:7d:49:2b:3e:70:e3:8a:bd:b8:88:4a:e9:
9b:f3:35:2d:6c:49:c1:d3:78:f3:07:20:8c:60:96:a1:b0:c2:
2f:d4:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 08:55:12 2024 by rpki-client on console-ams.rpki-client.org