Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wuX179-SnCFMwdN2G7IFbionadU.roa
File: wuX179-SnCFMwdN2G7IFbionadU.roa (raw, json)
Hash identifier: 8evHhGVn/hX/h0y+19Kt7hAvrDRP8TaFqZhT7YlP5Fw=
Subject key identifier: C2:E5:F5:EF:DF:92:9C:21:4C:C1:D3:76:1B:B2:05:6E:2A:27:69:D5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01920E23EF7E872BD6D393F49A580CB9A47E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wuX179-SnCFMwdN2G7IFbionadU.roa
Signing time: Fri 20 Sep 2024 06:34:49 +0000
ROA not before: Fri 20 Sep 2024 06:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:23:ef:7e:87:2b:d6:d3:93:f4:9a:58:0c:b9:a4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 20 06:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2e5f5efdf929c214cc1d3761bb2056e2a2769d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:4b:e4:41:53:50:ea:3a:8f:8e:9b:7e:9a:
12:c8:5e:46:a7:76:23:9d:1c:35:db:32:6d:15:bf:
11:26:9e:75:b3:f8:d7:58:71:32:f5:65:fb:59:f5:
83:f9:ad:59:0e:d8:0d:b7:f1:4d:01:5e:6c:73:9b:
8a:77:88:1c:6b:1e:90:ff:3c:02:b7:96:74:3e:25:
92:f2:00:f2:aa:01:b3:44:7d:6c:b6:5e:27:f1:e2:
64:ed:c2:6b:fd:94:ec:bc:34:dc:a5:5e:2b:7f:95:
39:70:ff:57:5f:3f:cc:7f:d2:a5:e3:24:cf:e2:29:
b9:2e:b6:b3:36:52:3c:8a:fd:7b:12:71:17:57:45:
56:17:53:48:5d:5b:ed:ca:f2:d4:5b:7d:56:0e:88:
e9:56:81:ce:3e:7e:c4:97:13:9f:03:6e:62:b9:ef:
cd:3f:0d:4f:5a:52:50:84:82:1a:e8:39:a4:ee:89:
da:57:d8:c2:d1:fb:b9:91:cb:31:91:ff:4e:6e:c1:
c4:ba:1e:ae:c7:22:14:54:4f:11:e0:d2:87:4d:37:
f7:59:fa:1d:1e:a6:d2:2b:ba:71:50:0e:1f:d3:c7:
b9:56:1c:f8:08:7d:fe:f1:31:e3:51:23:79:b0:c1:
f6:01:9a:d2:93:ff:aa:bb:9c:2b:26:ce:1f:b1:d0:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:F5:EF:DF:92:9C:21:4C:C1:D3:76:1B:B2:05:6E:2A:27:69:D5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wuX179-SnCFMwdN2G7IFbionadU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.0.0-31.57.9.255
Signature Algorithm: sha256WithRSAEncryption
69:92:64:3a:e2:39:6d:09:7d:2e:03:a8:9e:b2:0b:f3:a9:4d:
7a:74:e6:6c:31:a5:9e:b1:1f:02:c9:ac:59:2a:4c:64:0b:8a:
14:5f:fd:d9:87:3c:da:10:cb:12:72:82:c4:03:8a:88:d0:6f:
af:a4:d5:c3:9f:a1:3c:ce:e1:cd:c4:09:7e:89:cd:10:13:fe:
88:6d:99:bd:a6:e3:4b:c1:18:e4:bb:62:ec:61:e3:54:05:c3:
56:d4:47:1f:24:0d:b3:b4:a1:2a:51:f7:ca:87:99:be:14:13:
48:a5:e7:f6:96:31:75:43:5f:47:c9:d9:3e:7b:d7:04:72:9e:
99:d5:43:b1:0e:38:07:79:dd:81:a2:cc:2a:ec:76:ca:1a:02:
81:42:09:28:79:90:85:0d:4d:bd:4f:cc:50:1d:ad:f5:0d:cd:
26:db:7f:27:e6:36:81:e9:17:c6:b3:82:19:ec:92:63:64:f4:
80:9a:95:02:32:25:97:de:58:2a:9d:b1:9c:86:30:ba:6b:b7:
5a:85:72:3a:c9:54:9a:bf:5d:93:24:ae:1b:e9:82:fb:39:15:
53:e4:c1:53:a7:88:65:c9:41:e9:98:ad:9b:57:c7:a6:ae:3e:
8d:95:5f:c8:76:f0:2f:e9:06:24:43:3b:4e:3e:26:3e:38:e2:
0f:8e:74:38
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZIOI+9+hyvW05P0mlgMuaR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTIwMDYzNDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmU1ZjVlZmRmOTI5YzIxNGNjMWQzNzYxYmIyMDU2ZTJhMjc2OWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xlL5EFTUOo6j46bfpoSyF5Gp3Yj
nRw12zJtFb8RJp51s/jXWHEy9WX7WfWD+a1ZDtgNt/FNAV5sc5uKd4gcax6Q/zwC
t5Z0PiWS8gDyqgGzRH1stl4n8eJk7cJr/ZTsvDTcpV4rf5U5cP9XXz/Mf9Kl4yTP
4im5LrazNlI8iv17EnEXV0VWF1NIXVvtyvLUW31WDojpVoHOPn7ElxOfA25iue/N
Pw1PWlJQhIIa6Dmk7onaV9jC0fu5kcsxkf9ObsHEuh6uxyIUVE8R4NKHTTf3Wfod
HqbSK7pxUA4f08e5Vhz4CH3+8THjUSN5sMH2AZrSk/+qu5wrJs4fsdDsBwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFMLl9e/fkpwhTMHTdhuyBW4qJ2nVMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvd3VYMTc5LVNuQ0ZNd2ROMkc3SUZiaW9uYWRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwAfOQME
AR85CDANBgkqhkiG9w0BAQsFAAOCAQEAaZJkOuI5bQl9LgOonrIL86lNenTmbDGl
nrEfAsmsWSpMZAuKFF/92Yc82hDLEnKCxAOKiNBvr6TVw5+hPM7hzcQJfonNEBP+
iG2ZvabjS8EY5Lti7GHjVAXDVtRHHyQNs7ShKlH3yoeZvhQTSKXn9pYxdUNfR8nZ
PnvXBHKemdVDsQ44B3ndgaLMKux2yhoCgUIJKHmQhQ1NvU/MUB2t9Q3NJtt/J+Y2
gekXxrOCGeySY2T0gJqVAjIll95YKp2xnIYwumu3WoVyOslUmr9dkySuG+mC+zkV
U+TBU6eIZclB6Zitm1fHpq4+jZVfyHbwL+kGJEM7Tj4mPjjiD450OA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:05 2025 by rpki-client