Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yPfb9ZLvuGrL85DGHaLgPS1RD0A.roa
File: yPfb9ZLvuGrL85DGHaLgPS1RD0A.roa (raw, json)
Hash identifier: +BXlMHTmbPVza1kb81NIrkOOHr+P8Bk9sUCHxGnByAk=
Subject key identifier: C8:F7:DB:F5:92:EF:B8:6A:CB:F3:90:C6:1D:A2:E0:3D:2D:51:0F:40
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191DD913DC7C0FECB31B0E5EACED75E5443
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yPfb9ZLvuGrL85DGHaLgPS1RD0A.roa
Signing time: Tue 10 Sep 2024 20:12:48 +0000
ROA not before: Tue 10 Sep 2024 20:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 31.57.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 06:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dd:91:3d:c7:c0:fe:cb:31:b0:e5:ea:ce:d7:5e:54:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 20:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8f7dbf592efb86acbf390c61da2e03d2d510f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:16:6c:50:c4:e7:ab:ce:87:2b:27:f4:8a:b9:
30:c4:ca:ec:b8:10:c2:62:64:95:be:b3:3e:15:44:
66:99:15:bf:fa:34:4e:ce:f0:cb:6a:db:de:e4:e8:
9b:57:3b:ba:79:12:a8:cd:d8:f4:12:2f:3f:55:1c:
e4:59:82:80:2e:af:9b:5a:bc:91:62:2b:86:5b:64:
60:a0:f4:fd:b4:43:cb:9f:75:fd:14:17:5a:87:a2:
88:de:af:7a:78:4c:ec:83:42:5e:8d:5a:16:8a:3a:
5c:b2:1b:ad:33:8a:ac:2f:b8:e2:41:d6:dd:43:48:
2c:ff:e3:ea:56:58:c7:e8:75:8f:a9:4d:ca:ab:5d:
fd:a9:66:f8:f8:75:c7:f4:26:8d:92:e7:91:9e:92:
95:e9:94:29:98:2a:9d:a8:6d:de:60:cd:1b:35:be:
ff:8c:d9:e3:cc:b9:78:3a:71:02:ad:86:ed:67:42:
c4:9c:30:01:7e:90:c0:44:53:f0:fe:95:29:5c:ea:
cf:be:15:24:f7:87:73:86:b4:b4:be:84:ae:9c:12:
74:cd:71:42:ec:26:0d:d5:6b:51:cb:42:2c:ee:a3:
14:00:3d:71:b4:c6:11:bb:38:6e:e2:d6:a6:3b:5b:
90:a4:29:7c:cb:4e:4c:10:ed:eb:e3:6c:25:b1:cb:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F7:DB:F5:92:EF:B8:6A:CB:F3:90:C6:1D:A2:E0:3D:2D:51:0F:40
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yPfb9ZLvuGrL85DGHaLgPS1RD0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:fe:07:a6:5b:e9:ab:ad:64:86:cd:ba:60:ff:cf:b8:23:f8:
b5:da:8c:2a:be:b8:ac:2c:4a:d3:43:26:43:7f:eb:f2:9f:06:
b7:a8:a5:ab:36:c4:0b:11:d9:1b:15:3a:d8:20:0b:61:58:05:
58:d5:21:a1:5d:eb:8c:aa:a4:6b:5c:cf:ad:9b:25:5b:22:45:
ff:1c:45:41:14:35:a5:d7:50:07:89:83:a0:48:f5:ca:5a:9e:
9c:30:59:a4:8b:49:38:7e:15:2e:64:bd:6e:3c:ec:fe:f2:eb:
c3:5f:33:c2:e1:f3:40:c0:39:68:a2:a5:66:a2:a2:b7:7f:81:
52:de:2c:21:c0:ca:07:a2:90:ad:fc:43:44:6f:c1:44:c8:35:
a4:bf:21:73:ea:41:ff:ef:6f:75:33:98:4e:bc:3b:5c:69:fd:
1f:63:89:1c:8c:7d:84:8e:44:c9:69:b2:a2:a2:81:dc:d6:45:
ef:5b:b9:52:5b:78:5b:1a:f3:f2:b6:1e:e6:ce:63:39:d4:ad:
95:fb:bf:2d:a5:b1:2f:dc:31:88:57:40:14:9f:29:d0:6b:a5:
3b:f6:b5:a3:d5:35:2c:e4:f9:53:be:57:7d:00:5e:2e:8c:48:
c9:d5:f0:4b:f7:ba:55:df:ee:e1:2d:22:8e:7e:6f:7f:4d:c3:
04:b4:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:27 2024 by rpki-client on console-fra.rpki-client.org