Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/531xAXHcFM5vTVBzBU64-mnwDSc.roa
File: 531xAXHcFM5vTVBzBU64-mnwDSc.roa (raw, json)
Hash identifier: NYJ0OsRcTm+I7aPqb7bYCyfqygtsY1PKHt9hqtd6Coo=
Subject key identifier: E7:7D:71:01:71:DC:14:CE:6F:4D:50:73:05:4E:B8:FA:69:F0:0D:27
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0189F3DD84C4CB2DB515FF0DC34C26B4BF95
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/531xAXHcFM5vTVBzBU64-mnwDSc.roa
Signing time: Mon 14 Aug 2023 11:45:28 +0000
ROA not before: Mon 14 Aug 2023 11:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203758
IP address blocks: 31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 13:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:dd:84:c4:cb:2d:b5:15:ff:0d:c3:4c:26:b4:bf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 14 11:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e77d710171dc14ce6f4d5073054eb8fa69f00d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:67:06:de:28:19:48:6b:01:56:00:82:05:
8b:49:03:28:d7:16:5e:bd:05:69:d4:da:67:59:ef:
33:bd:a9:f3:dc:fc:74:14:cf:93:06:57:22:1d:17:
82:ec:e4:d1:fa:b5:9d:d3:fc:bd:84:ac:a9:3b:8f:
ba:25:0e:94:35:ee:35:0e:68:a2:d9:96:dd:36:9d:
d5:ed:27:1e:e7:6e:c2:68:01:39:61:b2:22:86:55:
e7:69:49:4d:2f:53:63:8b:d5:23:48:1b:94:4e:7b:
3a:2b:b1:8c:a0:50:4b:b6:04:26:ee:27:f9:ae:d0:
29:20:38:3d:dd:92:88:87:5a:bc:e6:19:cf:24:a6:
05:a1:00:83:a5:78:5e:66:92:3a:db:9a:9a:be:d7:
4d:ae:ea:32:7d:9c:03:35:f9:41:7d:d4:38:2e:10:
e3:5c:60:fe:cf:6d:3f:34:02:52:a4:b0:59:70:9c:
a6:df:fe:5e:83:0b:a7:80:75:f1:89:36:70:32:32:
99:f9:e1:d9:34:02:c7:59:74:31:1c:0d:74:5a:74:
ff:39:e7:2a:eb:0f:ce:97:72:58:20:27:fd:4d:3b:
53:55:6b:40:d1:12:e5:bb:0e:ee:e6:37:ef:64:85:
d9:57:d5:2d:07:03:d8:92:7f:e9:51:8b:c9:93:dc:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7D:71:01:71:DC:14:CE:6F:4D:50:73:05:4E:B8:FA:69:F0:0D:27
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/531xAXHcFM5vTVBzBU64-mnwDSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:4a:0d:d6:81:a2:0c:10:d0:cd:31:0d:51:45:6f:9d:7e:03:
bb:32:29:fd:68:88:bf:b1:dc:83:27:b6:d3:80:0c:06:aa:0c:
9c:ca:2a:6a:96:82:a8:67:f1:e7:37:97:84:ca:e1:71:de:c8:
1a:a6:b4:af:1f:fc:01:6d:f6:38:0c:04:f9:c7:42:99:82:73:
59:42:96:45:b2:23:a2:0f:78:19:03:29:3e:2d:43:46:b4:c7:
35:23:01:0b:bd:69:a0:c0:22:8d:20:17:2f:f3:bf:d7:4a:f5:
01:a6:be:83:f3:cc:c6:45:5f:83:33:14:5c:f9:9a:3e:de:37:
4b:53:a8:ec:9f:22:53:66:f7:ed:9a:97:a3:40:b1:6e:c3:3d:
3e:a4:51:d1:da:5a:0d:a9:62:9e:9d:05:3b:76:cd:9e:5b:a4:
7e:67:99:65:d7:3d:e5:9c:d8:5c:7c:b9:1b:1b:39:4d:da:40:
4c:b0:42:f2:fe:11:d3:84:38:ee:14:60:7a:f9:7c:27:e3:1a:
a6:4d:ac:c2:db:94:04:2f:42:23:db:e0:a9:e1:9b:49:ce:24:
6a:7f:f0:d9:20:34:7c:f5:35:f7:90:4d:e6:3c:4a:6d:32:f5:
8b:6d:3d:14:ee:53:f8:29:54:c6:8c:d7:8d:23:c7:f7:ee:2d:
87:21:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org