Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yHNLRYLOg9mbB6QEDgtBYHmjxUU.roa
File: yHNLRYLOg9mbB6QEDgtBYHmjxUU.roa (raw, json)
Hash identifier: Mpu+6PeowQaLl+OzI5uxPA5vefB77/nwv7jraeM+Ebw=
Subject key identifier: C8:73:4B:45:82:CE:83:D9:9B:07:A4:04:0E:0B:41:60:79:A3:C5:45
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01931FC081CE6A3C5A084E333901ABDC6AB0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yHNLRYLOg9mbB6QEDgtBYHmjxUU.roa
Signing time: Tue 12 Nov 2024 09:42:10 +0000
ROA not before: Tue 12 Nov 2024 09:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 31.56.1.0/24 maxlen: 24
31.57.144.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.231.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 07:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:c0:81:ce:6a:3c:5a:08:4e:33:39:01:ab:dc:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 12 09:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8734b4582ce83d99b07a4040e0b416079a3c545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:0e:db:9d:92:c2:86:ec:c1:d3:c9:27:6e:
ce:00:43:88:f7:e8:ee:84:ca:50:80:9b:ca:d7:fc:
38:2d:39:a6:57:98:4d:cb:b1:c6:4a:62:75:8b:02:
8c:d7:9c:e3:d5:b3:6e:cc:68:6c:c1:ae:9a:70:93:
34:37:68:f3:fa:24:c8:d2:e6:06:61:f1:02:bf:21:
3c:51:7b:9b:53:48:8f:5e:ab:0c:19:a4:13:a5:f4:
9f:ed:20:22:df:9d:b9:01:a1:cf:f9:f7:92:26:62:
c0:56:99:d1:f0:a5:ef:41:ff:cc:04:6e:e2:0b:95:
9e:c8:6b:73:4c:b6:5c:0c:0a:8e:f7:70:81:97:90:
e0:aa:6a:b5:d6:a3:1d:08:db:0d:91:fc:3e:a7:65:
e6:98:2a:a4:fa:c9:66:b0:aa:aa:be:be:78:3e:15:
79:e4:4c:f4:1f:e5:01:1b:1a:97:e4:03:ea:81:c5:
22:04:2e:d1:63:04:c1:04:d1:99:45:d3:04:b0:66:
89:6c:ae:cf:57:48:ab:e7:a5:67:3d:28:5c:a6:1c:
6d:ae:03:23:f3:d3:9f:86:a9:e8:6c:67:98:83:bc:
48:aa:54:d9:0e:1e:c7:1a:11:01:53:66:0e:ae:dd:
c6:89:d7:68:cd:12:40:bc:dc:bf:55:21:3e:f1:91:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:4B:45:82:CE:83:D9:9B:07:A4:04:0E:0B:41:60:79:A3:C5:45
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yHNLRYLOg9mbB6QEDgtBYHmjxUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.57.144.0/24
31.57.146.0/23
31.57.231.0/24
31.58.230.0/23
31.59.108.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9d:07:5d:cc:e7:6e:66:d9:d9:10:8a:75:6b:9f:8c:48:13:
72:1f:74:3c:1e:71:8f:5a:43:da:36:49:c8:ee:62:6a:af:d3:
44:05:7b:7b:33:e7:92:ce:a9:a7:02:ab:b2:c3:8f:bd:38:c5:
a8:dd:52:98:60:86:ae:41:bc:17:ee:f8:2e:c8:ba:1a:63:97:
93:3d:d4:09:6d:61:a4:dc:03:24:0b:72:fb:71:15:d8:a9:b5:
24:ef:8f:f4:d2:d9:95:2f:02:fd:09:92:32:c6:34:3d:af:0c:
52:86:45:3e:6e:37:99:4e:7c:3d:49:cd:4c:6c:7e:33:4c:6a:
f1:51:82:52:b8:01:8f:ec:63:8e:df:7d:70:ff:2f:bc:d8:6b:
74:7d:00:a9:03:63:85:98:8c:a7:68:c8:44:b2:fa:9e:1b:81:
48:76:cc:25:7d:f6:22:79:41:7d:49:4d:24:22:8e:ea:36:f9:
6a:f8:5e:21:44:04:42:5a:96:83:5c:d2:3e:1f:ab:66:92:70:
69:7a:6d:2c:e4:fe:f0:24:e5:93:a1:d7:4e:28:49:e9:c0:f9:
ec:2f:ec:d0:32:b0:78:6d:18:70:3a:86:b0:d0:cf:b1:74:5f:
29:e3:10:f9:e7:7d:a7:cd:e0:7d:d8:23:9b:2b:2d:93:59:5d:
10:09:d8:34
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZMfwIHOajxaCE4zOQGr3GqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTEyMDk0MjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODczNGI0NTgyY2U4M2Q5OWIwN2E0MDQwZTBiNDE2MDc5YTNjNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr88O252SwobswdPJJ27OAEOI9+ju
hMpQgJvK1/w4LTmmV5hNy7HGSmJ1iwKM15zj1bNuzGhswa6acJM0N2jz+iTI0uYG
YfECvyE8UXubU0iPXqsMGaQTpfSf7SAi3525AaHP+feSJmLAVpnR8KXvQf/MBG7i
C5WeyGtzTLZcDAqO93CBl5Dgqmq11qMdCNsNkfw+p2XmmCqk+slmsKqqvr54PhV5
5Ez0H+UBGxqX5APqgcUiBC7RYwTBBNGZRdMEsGaJbK7PV0ir56VnPShcphxtrgMj
89OfhqnobGeYg7xIqlTZDh7HGhEBU2YOrt3GiddozRJAvNy/VSE+8ZEvHwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMhzS0WCzoPZmwekBA4LQWB5o8VFMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveUhOTFJZTE9nOW1iQjZRRURndEJZSG1qeFVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzgBAwQA
HzmQAwQBHzmSAwQAHznnAwQBHzrmAwQAHztsMA0GCSqGSIb3DQEBCwUAA4IBAQB0
nQddzOduZtnZEIp1a5+MSBNyH3Q8HnGPWkPaNknI7mJqr9NEBXt7M+eSzqmnAquy
w4+9OMWo3VKYYIauQbwX7vguyLoaY5eTPdQJbWGk3AMkC3L7cRXYqbUk74/00tmV
LwL9CZIyxjQ9rwxShkU+bjeZTnw9Sc1MbH4zTGrxUYJSuAGP7GOO331w/y+82Gt0
fQCpA2OFmIynaMhEsvqeG4FIdswlffYieUF9SU0kIo7qNvlq+F4hRARCWpaDXNI+
H6tmknBpem0s5P7wJOWToddOKEnpwPnsL+zQMrB4bRhwOoaw0M+xdF8p4xD5532n
zeB92CObKy2TWV0QCdg0
-----END CERTIFICATE-----
Generated at Fri Nov 15 08:29:06 2024 by rpki-client on console-ams.rpki-client.org