Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xP-I_VVecunLrDJ5vJYAzM-kww8.roa
File: xP-I_VVecunLrDJ5vJYAzM-kww8.roa (raw, json)
Hash identifier: /c+2WjVhsACMy+9D5xM5lvCPuolVggaRrenLKpkrm4E=
Subject key identifier: C4:FF:88:FD:55:5E:72:E9:CB:AC:32:79:BC:96:00:CC:CF:A4:C3:0F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193404DA48BABE5CAD5DD75142CC451B118
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xP-I_VVecunLrDJ5vJYAzM-kww8.roa
Signing time: Mon 18 Nov 2024 17:24:10 +0000
ROA not before: Mon 18 Nov 2024 17:24:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7
IP address blocks: 31.58.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 18:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:4d:a4:8b:ab:e5:ca:d5:dd:75:14:2c:c4:51:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 18 17:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4ff88fd555e72e9cbac3279bc9600cccfa4c30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:96:11:b5:34:9d:13:30:30:26:10:a3:53:
7c:ed:38:d4:c5:c0:09:18:09:d1:24:7b:54:81:c0:
70:fe:0d:8e:ec:3a:75:2d:8c:99:9a:18:26:88:c9:
a7:cb:a1:e9:11:39:01:8f:97:48:7a:95:1c:f1:7f:
27:45:47:ed:0c:d3:c1:9b:56:65:9c:5e:68:10:4e:
31:78:97:a8:83:90:e3:ee:5b:7c:92:31:eb:5c:8c:
3c:c7:da:8d:b2:21:4b:47:a7:90:d0:a5:e3:dd:fa:
15:65:d4:6f:8e:ee:29:1e:d7:d5:26:8e:21:e6:61:
6c:6e:1c:b3:c6:10:63:4c:c6:25:25:70:cf:aa:24:
27:68:96:2f:00:ce:61:9f:66:57:f9:34:4a:22:a0:
08:04:f2:4e:ae:a6:e7:b7:fa:e9:b7:9e:5b:27:71:
a0:4d:dc:71:3f:14:6c:1b:d7:43:fd:30:fd:fd:61:
97:c8:11:49:39:3d:5f:5c:70:91:86:e2:27:04:fa:
3e:47:be:35:cc:01:67:41:03:d9:40:e8:93:5f:7b:
4f:75:43:0e:46:bc:1a:de:5b:46:b1:17:69:17:12:
19:42:72:c0:b1:50:20:ed:a6:37:86:43:d0:55:03:
dd:da:7c:4c:0a:94:f9:23:87:e4:0a:84:b6:74:55:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:88:FD:55:5E:72:E9:CB:AC:32:79:BC:96:00:CC:CF:A4:C3:0F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xP-I_VVecunLrDJ5vJYAzM-kww8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.171.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0f:32:59:72:7b:ab:33:de:19:eb:c0:8e:ae:da:6a:3e:61:
e2:5d:e8:c6:48:d0:e5:ae:fc:77:91:63:4b:27:0d:61:d7:6f:
3a:2a:41:67:4b:b1:80:d0:5d:be:b4:3b:98:c8:a0:b2:ca:c7:
c3:ce:32:3c:e9:d6:bc:96:f2:ef:d2:d2:37:b7:a2:e9:59:2f:
15:8c:46:35:6f:93:eb:c8:25:be:61:41:0f:42:84:b1:95:67:
73:31:aa:99:34:b0:5c:16:a3:c6:a6:22:4c:1b:f8:42:80:bf:
aa:11:11:42:0a:c3:0e:43:6a:ba:47:5c:d1:6e:9c:81:79:96:
73:1b:46:cb:66:36:b4:23:f5:21:3d:8f:e8:f9:3a:16:ea:fb:
e7:9a:a3:59:26:b4:31:d5:d0:00:55:34:90:f2:65:e9:db:62:
92:0d:bc:cc:d7:af:e8:b4:41:42:f6:66:5a:7f:3b:85:f2:d7:
1a:60:c7:f3:fa:77:5e:c1:61:4b:4a:06:5b:d0:e0:57:ae:d3:
4e:e3:84:bf:a1:a5:8d:82:bf:a7:08:94:f0:45:f0:5c:6e:80:
2e:f0:83:31:fb:85:00:81:6f:35:57:52:1a:d6:b5:33:00:2d:
99:5c:30:c4:01:32:dc:89:f1:52:5f:b1:21:59:b0:32:7e:22:
d3:11:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 22:21:00 2024 by rpki-client on console-ams.rpki-client.org