Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z25bg22gtT-U6kx8FgNT3DqLcnc.roa
File: z25bg22gtT-U6kx8FgNT3DqLcnc.roa (raw, json)
Hash identifier: gBA7qkX4g08tSLOBgqKB9BMeldn0lMqojqchaoS40Co=
Subject key identifier: CF:6E:5B:83:6D:A0:B5:3F:94:EA:4C:7C:16:03:53:DC:3A:8B:72:77
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192E389A5B1A107E9D06FADE450BF696DC0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z25bg22gtT-U6kx8FgNT3DqLcnc.roa
Signing time: Thu 31 Oct 2024 17:05:01 +0000
ROA not before: Thu 31 Oct 2024 17:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 07:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:89:a5:b1:a1:07:e9:d0:6f:ad:e4:50:bf:69:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 17:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf6e5b836da0b53f94ea4c7c160353dc3a8b7277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:b0:ee:d5:cf:8b:37:b2:61:02:08:14:17:
51:b7:ac:2c:e3:d3:38:8b:21:78:62:ab:e6:4a:3e:
ac:22:5c:ad:0f:1b:c2:90:13:ca:88:31:d1:82:3e:
36:a6:f9:bf:54:47:a6:54:66:d7:79:e6:c5:c0:ec:
84:1d:dc:12:c7:d3:42:30:fe:88:6e:93:d4:8f:41:
b8:25:20:5d:5e:1f:df:96:9a:ab:7b:fe:d9:9b:f0:
7e:e6:23:7d:53:c2:d2:23:32:5e:dc:f8:43:d0:48:
ba:4c:cd:2a:13:55:c4:fb:50:64:34:f7:b8:e4:a3:
8b:6d:85:7d:45:91:70:7e:cf:d9:09:8b:7b:25:0a:
43:a8:2a:2f:b0:26:bd:cf:e3:b1:98:14:b0:72:a1:
81:2a:cd:e4:32:60:aa:f5:aa:1a:29:76:86:b2:08:
95:7d:6c:e6:0d:3d:29:64:94:f1:98:cc:12:83:c9:
0c:a2:4e:70:27:6d:73:cd:44:4e:69:50:5a:9f:52:
2b:23:e1:e0:57:6d:82:87:fb:e6:74:58:37:09:71:
08:88:a7:54:af:3a:43:1e:15:e3:a8:5c:94:3f:a5:
d9:a5:6d:d0:6f:7a:34:1d:44:d9:b2:a6:88:cc:27:
8f:55:7e:94:19:07:75:86:f5:47:16:c7:c9:f4:00:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6E:5B:83:6D:A0:B5:3F:94:EA:4C:7C:16:03:53:DC:3A:8B:72:77
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z25bg22gtT-U6kx8FgNT3DqLcnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.90.0/24
31.58.168.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:7f:a6:df:41:65:87:6e:f1:d2:29:19:cf:14:8f:3a:b1:35:
d6:58:6e:92:c4:8b:9d:dc:de:a3:2c:ce:c4:4a:b6:b8:d4:cb:
19:8e:fd:ce:6c:55:14:b7:87:2a:e7:59:09:56:9c:4c:53:a7:
b5:fb:75:29:fe:c3:af:08:1d:80:38:25:4b:d1:c7:a8:c8:d7:
45:07:ed:83:f7:7f:00:75:39:e8:eb:ad:25:50:b2:f8:9c:3d:
90:bb:3e:89:e9:3c:04:5b:53:f9:fe:88:fe:b3:a9:1f:ae:52:
23:54:1e:27:fa:da:20:36:b9:8a:b5:a9:23:55:c0:a9:6a:bd:
ee:d6:68:5a:1f:a4:96:6c:11:3e:30:77:07:79:44:0f:a8:c8:
a3:b3:1c:a0:af:e7:11:cc:aa:69:e8:b0:c6:35:0a:aa:d8:f2:
a6:a1:94:69:bd:24:9d:aa:47:ea:3e:9e:38:e1:2a:ff:cf:0a:
1d:b9:d9:88:af:92:03:85:3f:13:be:33:c7:f2:b3:66:90:b2:
55:c6:5f:af:4e:32:a8:1f:e1:93:a9:9d:e7:54:aa:8a:68:e3:
f0:82:d5:4d:0f:45:9d:da:94:4c:91:f1:80:7b:17:70:4d:7e:
46:26:15:f5:da:30:f7:73:0f:76:65:68:97:eb:a7:82:32:d6:
f7:89:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 08:52:59 2024 by rpki-client on console-ams.rpki-client.org