Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zLEpSGflhd1AWxg3QTeoSjx1MzU.roa
File: zLEpSGflhd1AWxg3QTeoSjx1MzU.roa (raw, json)
Hash identifier: I/NqaoJDUSG5W97WgKWRBCvyA5hK4CK6uyGwTvl9MhM=
Subject key identifier: CC:B1:29:48:67:E5:85:DD:40:5B:18:37:41:37:A8:4A:3C:75:33:35
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192BE08BF25F3781E322713B7242F9816E8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zLEpSGflhd1AWxg3QTeoSjx1MzU.roa
Signing time: Thu 24 Oct 2024 10:18:17 +0000
ROA not before: Thu 24 Oct 2024 10:18:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.58.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 17:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:08:bf:25:f3:78:1e:32:27:13:b7:24:2f:98:16:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 24 10:18:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccb1294867e585dd405b18374137a84a3c753335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:ba:ea:ef:a2:69:62:38:e5:88:76:1d:93:
a0:00:40:ab:7c:ce:98:b5:2b:03:d0:27:2e:e2:73:
ac:9a:92:a0:6b:00:43:ef:47:f6:14:c0:25:fc:f5:
93:d5:5b:fa:4c:ab:1b:37:3d:02:0e:4d:9e:d5:fd:
80:0f:29:52:b4:93:59:b1:74:fc:ab:6e:4f:ec:a5:
5a:4d:75:87:68:6d:ca:9a:8f:d5:a6:dd:c5:01:8b:
40:f5:89:7b:66:5b:bb:ab:12:08:f0:a8:0e:a6:db:
4b:68:cb:16:11:a6:64:04:7a:fe:e6:d2:f0:0b:ab:
d7:6a:03:99:b6:cc:25:b7:b7:fe:c9:bc:db:a1:98:
b8:3d:58:94:5a:d6:96:b0:01:1a:f2:22:ec:8e:13:
4d:ce:52:36:b2:93:3c:f8:93:dd:1f:eb:e3:05:7f:
e2:0d:fd:d1:ae:c2:05:82:49:22:9a:9f:23:2d:80:
c9:8b:2b:b9:21:af:2f:2c:ec:10:7f:80:50:8e:13:
60:19:f0:44:f2:d0:c5:f5:6c:28:8d:41:0e:64:de:
ca:80:6c:e8:c6:24:33:de:c3:60:93:93:5b:90:5b:
8e:f9:9f:e3:49:c5:1d:21:04:e9:5f:d3:c7:b2:7d:
76:2d:ed:68:5a:e4:e5:c4:32:e4:50:33:8e:3c:b5:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:29:48:67:E5:85:DD:40:5B:18:37:41:37:A8:4A:3C:75:33:35
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zLEpSGflhd1AWxg3QTeoSjx1MzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:75:0c:51:12:06:1e:ec:ac:f8:48:93:0f:91:e3:5b:b0:14:
bd:c0:59:5a:1a:73:18:ad:19:bd:5f:2f:63:42:e5:82:f5:9f:
68:c8:71:0f:74:0a:11:96:dc:8a:f3:99:5c:ce:2e:74:de:bf:
4f:a6:a6:b2:91:e8:f5:42:19:eb:83:5f:47:08:0e:ae:27:34:
46:4f:8d:a1:6f:6d:2c:72:f1:98:90:b0:9d:06:4d:6a:f8:1d:
c1:29:82:61:09:6f:7b:77:2d:98:70:3f:c7:95:7c:f3:73:91:
31:15:4f:ae:cc:1b:7e:8b:d9:de:37:7c:1d:d1:ec:68:ac:d9:
45:bb:47:a8:ad:42:d3:99:a8:3a:93:24:7a:52:f9:5e:0c:83:
e4:16:e8:e4:7b:01:d9:eb:ab:ec:e4:4a:fa:01:ad:bd:d0:d9:
ff:62:9d:80:a9:a6:2f:04:8c:2e:c8:fd:9b:1b:28:ae:7d:eb:
96:f5:c9:c4:bd:48:38:e5:3f:58:85:0b:3d:31:29:fe:ad:a8:
56:d6:90:b7:ee:97:84:fb:78:05:6c:a3:44:65:45:31:e9:69:
f1:0f:d2:2a:ee:92:48:b3:10:df:d2:4d:2c:71:c2:8d:c1:4d:
a8:8f:cc:0d:12:3c:22:10:95:6f:60:9b:1a:cd:a3:c0:2c:17:
66:a7:bc:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK+CL8l83geMicTtyQvmBboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDI0MTAxODE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2IxMjk0ODY3ZTU4NWRkNDA1YjE4Mzc0MTM3YTg0YTNjNzUzMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhi66u+iaWI45Yh2HZOgAECrfM6Y
tSsD0Ccu4nOsmpKgawBD70f2FMAl/PWT1Vv6TKsbNz0CDk2e1f2ADylStJNZsXT8
q25P7KVaTXWHaG3Kmo/Vpt3FAYtA9Yl7Zlu7qxII8KgOpttLaMsWEaZkBHr+5tLw
C6vXagOZtswlt7f+ybzboZi4PViUWtaWsAEa8iLsjhNNzlI2spM8+JPdH+vjBX/i
Df3RrsIFgkkimp8jLYDJiyu5Ia8vLOwQf4BQjhNgGfBE8tDF9WwojUEOZN7KgGzo
xiQz3sNgk5NbkFuO+Z/jScUdIQTpX9PHsn12Le1oWuTlxDLkUDOOPLURkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMyxKUhn5YXdQFsYN0E3qEo8dTM1MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvekxFcFNHZmxoZDFBV3hnM1FUZW9TangxTXpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpaMA0G
CSqGSIb3DQEBCwUAA4IBAQB9dQxREgYe7Kz4SJMPkeNbsBS9wFlaGnMYrRm9Xy9j
QuWC9Z9oyHEPdAoRltyK85lczi503r9Ppqaykej1Qhnrg19HCA6uJzRGT42hb20s
cvGYkLCdBk1q+B3BKYJhCW97dy2YcD/HlXzzc5ExFU+uzBt+i9neN3wd0exorNlF
u0eorULTmag6kyR6UvleDIPkFujkewHZ66vs5Er6Aa290Nn/Yp2AqaYvBIwuyP2b
GyiufeuW9cnEvUg45T9YhQs9MSn+rahW1pC37peE+3gFbKNEZUUx6WnxD9Iq7pJI
sxDf0k0sccKNwU2oj8wNEjwiEJVvYJsazaPALBdmp7wN
-----END CERTIFICATE-----
Generated at Thu Oct 31 19:24:58 2024 by rpki-client on console-fra.rpki-client.org