Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vZFPMlttCxe11Sh7mJEe74GBElA.roa
File: vZFPMlttCxe11Sh7mJEe74GBElA.roa (raw, json)
Hash identifier: U53oX02hKIL4h0+4fOSB7mz8GI4gZxUqf3gDf0QIpPk=
Subject key identifier: BD:91:4F:32:5B:6D:0B:17:B5:D5:28:7B:98:91:1E:EF:81:81:12:50
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01926FFC33DA0956171344299AF0BCF13C8E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vZFPMlttCxe11Sh7mJEe74GBElA.roa
Signing time: Wed 09 Oct 2024 06:34:12 +0000
ROA not before: Wed 09 Oct 2024 06:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149020
IP address blocks: 31.56.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6f:fc:33:da:09:56:17:13:44:29:9a:f0:bc:f1:3c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 9 06:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd914f325b6d0b17b5d5287b98911eef81811250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:89:07:9a:bb:9c:20:fc:a1:e4:ab:a2:72:
6c:eb:25:27:2c:4f:8d:98:8c:25:9d:03:4e:97:36:
f3:2d:9d:68:41:35:b5:02:0b:30:43:90:81:d6:31:
a6:00:3f:dc:ee:16:13:4e:a0:32:36:5b:87:98:86:
b6:67:73:89:f4:72:b3:34:35:53:83:30:c8:e2:45:
8a:d6:dc:27:60:1a:76:55:1c:6f:3f:45:16:bc:04:
53:40:68:b5:c8:26:86:e8:51:78:15:11:30:5b:ac:
1c:d4:85:a3:2b:22:50:0b:b1:17:cc:86:1f:23:84:
cb:73:e3:21:77:9a:e9:11:f4:ac:8e:df:a2:18:51:
ec:e5:97:c8:c2:b8:63:1a:f5:07:26:4e:35:9a:e4:
08:a6:ff:79:e0:4e:e8:e6:41:63:e3:32:df:63:fd:
e0:17:33:1e:98:9e:92:82:da:c7:4a:69:49:8f:44:
75:30:72:fc:a8:a7:07:f0:9b:f7:2f:21:68:d5:a2:
97:39:a2:a3:2b:f1:c8:90:97:61:5b:d5:03:2b:dc:
6a:f7:b7:e2:28:1f:5f:86:33:de:ed:f7:e1:d1:95:
a1:6a:36:25:44:3f:7b:dc:48:55:06:d2:c9:cd:9d:
b4:ba:e2:9d:52:b8:d3:4a:3d:b3:70:6b:9e:89:a6:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:91:4F:32:5B:6D:0B:17:B5:D5:28:7B:98:91:1E:EF:81:81:12:50
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vZFPMlttCxe11Sh7mJEe74GBElA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.44.0/24
Signature Algorithm: sha256WithRSAEncryption
68:72:52:ca:70:7b:68:89:6c:be:1e:22:11:c6:24:57:88:6c:
45:d6:2a:e4:09:38:f6:d0:b6:37:80:01:fe:99:45:37:82:73:
9b:9e:34:d5:31:df:e9:c5:2e:46:77:48:5d:ab:22:4f:d6:0d:
ef:26:56:f9:df:ef:7e:78:f9:74:c4:df:60:e7:66:5d:0b:c8:
14:17:f4:b3:58:da:4e:a6:36:22:6a:29:8d:56:c1:97:86:d7:
5b:f2:17:fd:ef:a1:18:00:12:63:c4:71:5a:99:da:59:a0:09:
91:7f:b1:42:47:f7:5f:bc:4a:6d:0f:ee:9b:e2:37:48:b6:25:
62:a7:b4:e2:4d:e3:f8:52:b0:e0:9d:3c:62:b8:88:da:7d:fd:
1b:bf:41:df:ac:17:a9:d1:2e:09:2d:c4:29:f9:f4:11:ab:09:
3c:9b:9e:d5:f2:37:82:ab:f3:92:be:f9:f0:19:dc:bd:7b:d0:
09:2f:52:1b:09:2c:ca:8d:c0:4f:16:7b:5d:a4:90:27:41:29:
d0:3e:3d:f2:64:5d:6d:0e:09:80:5c:a6:8a:9c:76:b6:6d:58:
00:65:42:1a:d5:20:a2:9d:f1:28:7d:fe:97:ca:8f:39:2a:46:
02:fc:ed:92:0b:28:42:25:78:43:97:92:80:46:0b:87:e3:02:
1d:2d:06:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJv/DPaCVYXE0QpmvC88TyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA5MDYzNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDkxNGYzMjViNmQwYjE3YjVkNTI4N2I5ODkxMWVlZjgxODExMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07CJB5q7nCD8oeSronJs6yUnLE+N
mIwlnQNOlzbzLZ1oQTW1AgswQ5CB1jGmAD/c7hYTTqAyNluHmIa2Z3OJ9HKzNDVT
gzDI4kWK1twnYBp2VRxvP0UWvARTQGi1yCaG6FF4FREwW6wc1IWjKyJQC7EXzIYf
I4TLc+Mhd5rpEfSsjt+iGFHs5ZfIwrhjGvUHJk41muQIpv954E7o5kFj4zLfY/3g
FzMemJ6SgtrHSmlJj0R1MHL8qKcH8Jv3LyFo1aKXOaKjK/HIkJdhW9UDK9xq97fi
KB9fhjPe7ffh0ZWhajYlRD973EhVBtLJzZ20uuKdUrjTSj2zcGueiaYTsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2RTzJbbQsXtdUoe5iRHu+BgRJQMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdlpGUE1sdHRDeGUxMVNoN21KRWU3NEdCRWxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgsMA0G
CSqGSIb3DQEBCwUAA4IBAQBoclLKcHtoiWy+HiIRxiRXiGxF1irkCTj20LY3gAH+
mUU3gnObnjTVMd/pxS5Gd0hdqyJP1g3vJlb53+9+ePl0xN9g52ZdC8gUF/SzWNpO
pjYiaimNVsGXhtdb8hf976EYABJjxHFamdpZoAmRf7FCR/dfvEptD+6b4jdItiVi
p7TiTeP4UrDgnTxiuIjaff0bv0HfrBep0S4JLcQp+fQRqwk8m57V8jeCq/OSvvnw
Gdy9e9AJL1IbCSzKjcBPFntdpJAnQSnQPj3yZF1tDgmAXKaKnHa2bVgAZUIa1SCi
nfEoff6Xyo85KkYC/O2SCyhCJXhDl5KARguH4wIdLQYg
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:39 2025 by rpki-client