Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCOv8UyJe3h-CreTIHMjsH5g1Bg.roa
File: zCOv8UyJe3h-CreTIHMjsH5g1Bg.roa (raw, json)
Hash identifier: wLYpOWRvNHFnF6F5MUdTs3yE0umHDotpVinrUeCn7d8=
Subject key identifier: CC:23:AF:F1:4C:89:7B:78:7E:0A:B7:93:20:73:23:B0:7E:60:D4:18
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01929B774272616080C6FEE1191816AB44CE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCOv8UyJe3h-CreTIHMjsH5g1Bg.roa
Signing time: Thu 17 Oct 2024 17:12:17 +0000
ROA not before: Thu 17 Oct 2024 17:12:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 07:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:77:42:72:61:60:80:c6:fe:e1:19:18:16:ab:44:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 17:12:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc23aff14c897b787e0ab793207323b07e60d418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:45:c0:ea:fc:21:98:49:f8:fb:4a:a9:b1:
9d:6b:63:d3:2d:9b:da:32:41:8a:0a:a5:cb:87:9f:
ae:8f:bf:90:40:1e:3d:e6:24:c0:d2:03:ea:36:b8:
02:ce:bb:16:30:88:fb:58:cd:45:5d:46:9c:b8:e6:
b1:76:ff:6d:0f:c1:15:13:23:5a:27:0f:f5:49:57:
f8:b4:ca:bb:6e:a2:04:04:57:57:f6:fd:e9:75:32:
b3:bb:73:10:c8:2d:98:b3:47:89:63:26:e5:37:8e:
22:94:db:c2:21:7d:c4:2c:9a:39:25:aa:20:76:5d:
60:57:81:95:14:8c:ab:77:12:88:81:55:a6:16:ed:
dc:f8:ca:35:e8:5b:6b:dd:c2:94:5f:e1:39:76:0b:
8c:eb:fd:48:76:bf:1a:3a:80:07:38:63:9e:2e:2c:
10:1f:93:55:ed:79:0a:cc:0d:af:2c:a0:48:82:54:
2c:bf:12:22:3b:95:98:e5:c9:18:1b:57:20:53:15:
a4:37:5f:b5:75:7d:ee:5b:f7:56:4c:78:ee:52:2f:
e1:2c:f8:40:85:04:35:91:09:2d:15:c4:89:6f:06:
d0:a1:fd:f8:47:31:ae:b7:3d:10:c1:a8:c4:63:4b:
26:ab:d6:a3:9d:4b:68:88:6b:d6:5d:1e:f1:45:79:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:AF:F1:4C:89:7B:78:7E:0A:B7:93:20:73:23:B0:7E:60:D4:18
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCOv8UyJe3h-CreTIHMjsH5g1Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6d:92:f2:8c:40:a8:8c:17:4d:eb:43:c5:43:59:58:4d:6c:
61:74:e5:77:98:8d:e9:b4:d0:d8:c4:22:db:18:2e:cf:be:87:
fe:be:2f:93:6e:2b:cf:55:54:7d:87:45:3c:d5:e2:c9:1d:fb:
57:18:6f:16:fb:fe:c4:06:92:18:75:4f:4c:1c:04:e8:d0:4c:
8e:a0:27:ad:c9:4e:48:43:9c:c6:20:d6:f8:08:85:62:60:51:
8b:3b:8e:f7:6e:54:4c:3b:27:ce:69:84:59:23:7d:f0:7b:9a:
9b:7d:7c:57:91:08:eb:da:b1:84:61:e1:21:12:37:96:1d:4b:
88:21:fe:28:5e:da:46:6a:1d:5a:1e:73:71:cc:d2:6d:83:1f:
1d:df:e4:35:02:cc:a8:a3:cf:0d:0e:d1:b9:98:b5:a3:cc:32:
5b:be:b9:65:e6:ad:e0:f9:57:06:6a:ea:4a:07:20:b4:65:c8:
88:80:3e:6c:0a:cb:55:a6:a0:61:d2:3b:6f:77:2b:4a:53:b8:
85:5e:a4:5c:52:89:b6:e3:6c:f3:09:74:98:50:a9:68:3b:c1:
5f:69:8e:d3:72:b3:a0:1c:34:63:f9:32:43:1e:72:ee:a3:10:
b4:f5:50:30:6e:b8:a5:a0:e2:f9:3d:55:da:12:bc:c1:5a:73:
e0:41:b9:fc
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZKbd0JyYWCAxv7hGRgWq0TOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE3MTcxMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzIzYWZmMTRjODk3Yjc4N2UwYWI3OTMyMDczMjNiMDdlNjBkNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gFFwOr8IZhJ+PtKqbGda2PTLZva
MkGKCqXLh5+uj7+QQB495iTA0gPqNrgCzrsWMIj7WM1FXUacuOaxdv9tD8EVEyNa
Jw/1SVf4tMq7bqIEBFdX9v3pdTKzu3MQyC2Ys0eJYyblN44ilNvCIX3ELJo5Jaog
dl1gV4GVFIyrdxKIgVWmFu3c+Mo16Ftr3cKUX+E5dguM6/1Idr8aOoAHOGOeLiwQ
H5NV7XkKzA2vLKBIglQsvxIiO5WY5ckYG1cgUxWkN1+1dX3uW/dWTHjuUi/hLPhA
hQQ1kQktFcSJbwbQof34RzGutz0QwajEY0smq9ajnUtoiGvWXR7xRXmsFQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFMwjr/FMiXt4fgq3kyBzI7B+YNQYMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvekNPdjhVeUplM2gtQ3JlVElITWpzSDVnMUJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAHzhWMAwD
BAEfOaIDBAEfOaQDBAAfObQwDAMEAB86KQMEAB86KgMEAB86MDANBgkqhkiG9w0B
AQsFAAOCAQEAdG2S8oxAqIwXTetDxUNZWE1sYXTld5iN6bTQ2MQi2xguz76H/r4v
k24rz1VUfYdFPNXiyR37VxhvFvv+xAaSGHVPTBwE6NBMjqAnrclOSEOcxiDW+AiF
YmBRizuO925UTDsnzmmEWSN98Huam318V5EI69qxhGHhIRI3lh1LiCH+KF7aRmod
Wh5zcczSbYMfHd/kNQLMqKPPDQ7RuZi1o8wyW765Zeat4PlXBmrqSgcgtGXIiIA+
bArLVaagYdI7b3crSlO4hV6kXFKJtuNs8wl0mFCpaDvBX2mO03KzoBw0Y/kyQx5y
7qMQtPVQMG64paDi+T1V2hK8wVpz4EG5/A==
Generated at Sat Oct 19 08:48:33 2024 by rpki-client on console-ams.rpki-client.org