Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQ7pZMgBFudZbrC-lsM-DI50hW0.roa
File: zQ7pZMgBFudZbrC-lsM-DI50hW0.roa (raw, json)
Hash identifier: 3eFN/4GzENrKcmoI7Ammftp/PA93mZRW35VSA+fS2Xg=
Subject key identifier: CD:0E:E9:64:C8:01:16:E7:59:6E:B0:BE:96:C3:3E:0C:8E:74:85:6D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01925122A8ECDCE61B4A6D482FA3B6A996D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQ7pZMgBFudZbrC-lsM-DI50hW0.roa
Signing time: Thu 03 Oct 2024 06:47:58 +0000
ROA not before: Thu 03 Oct 2024 06:47:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7017
IP address blocks: 31.57.192.0/22 maxlen: 24
31.57.224.0/22 maxlen: 24
31.57.232.0/22 maxlen: 24
31.57.240.0/22 maxlen: 24
31.57.244.0/22 maxlen: 24
31.57.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 06:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:22:a8:ec:dc:e6:1b:4a:6d:48:2f:a3:b6:a9:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 06:47:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd0ee964c80116e7596eb0be96c33e0c8e74856d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:a4:75:fd:9c:6a:4e:0d:14:0b:cf:5d:a2:
8a:6a:18:de:a2:e1:1d:f1:6a:d5:58:4a:f0:b2:96:
a3:c9:f9:b3:43:3d:df:8f:f8:41:4b:74:06:28:4f:
a5:82:c9:7d:7f:ad:dd:4c:47:81:9b:73:cb:39:51:
e2:46:e2:1e:87:ef:d6:a8:00:98:17:89:8f:ec:04:
d6:21:13:19:41:1c:47:23:41:4d:2c:62:d0:b9:00:
2c:b8:6e:d1:40:0a:40:c0:d0:da:57:b1:64:1f:3a:
6f:d9:d3:95:41:75:67:e4:f1:f2:76:0a:6a:4d:4c:
f1:13:12:32:2e:df:48:5e:be:5a:a1:47:12:53:08:
ae:d8:cf:17:47:a4:43:1d:e0:6a:81:f3:d3:e5:84:
85:30:29:58:8a:96:71:33:b5:3e:50:b5:a5:a9:54:
6b:5f:f9:b3:bc:65:11:da:76:b7:43:83:5e:08:64:
56:1b:a8:3b:33:f7:1e:30:01:b6:6f:d8:60:80:4b:
8f:cd:e3:72:d7:5e:b8:d1:64:f0:5c:4d:a3:78:d8:
95:1a:50:7b:ff:66:1a:2a:4e:e1:4e:81:ca:8f:0c:
79:07:ad:be:63:ab:24:f9:cd:f8:eb:35:b1:ea:f7:
66:dc:a0:c2:7c:c9:1c:14:30:ce:e3:0f:93:6d:97:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:E9:64:C8:01:16:E7:59:6E:B0:BE:96:C3:3E:0C:8E:74:85:6D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zQ7pZMgBFudZbrC-lsM-DI50hW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.192.0/22
31.57.224.0/22
31.57.232.0/22
31.57.240.0/21
31.57.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:df:e5:3e:6c:01:ae:62:dd:52:34:c8:50:0c:57:23:d7:6b:
95:fa:f2:7d:b0:10:f2:12:93:8e:08:09:bf:45:11:7c:c4:79:
9a:7f:6c:47:9c:6d:d1:66:65:72:a1:80:f2:82:d1:89:02:42:
64:60:44:e0:d8:60:0f:2c:30:0d:7a:82:4d:06:32:86:00:d3:
a0:33:c0:e0:9a:86:82:b7:a6:a1:0e:08:ff:2b:2f:48:91:49:
3b:c0:3b:b3:d7:3f:1d:af:ae:2e:ee:ed:9a:35:09:26:c2:e1:
ca:9b:ae:0c:6a:e2:3b:f7:77:86:92:26:99:04:50:4f:b5:90:
df:8b:50:bb:1a:6e:1e:a7:c3:36:b4:5d:9f:70:fc:ed:27:33:
bf:43:85:ff:f6:9e:5c:1d:8f:b2:bf:10:31:ef:30:86:d3:b1:
83:43:d6:51:44:71:49:a3:fb:6c:65:20:28:2b:3f:7c:93:22:
06:93:5e:49:2c:4c:f4:ae:cc:82:7c:66:90:ab:68:23:c7:af:
e0:38:92:94:16:55:65:72:0c:ea:90:d9:0e:cf:d4:ab:68:78:
92:0e:11:83:f3:c6:c7:7e:64:26:55:42:3e:61:33:62:d0:4b:
ff:d8:b0:dc:d3:99:95:38:c2:0d:aa:7c:25:d5:34:09:a8:11:
cc:14:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 08:52:59 2024 by rpki-client on console-ams.rpki-client.org