Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EXFJZQNNjnMebbcTzE58tImI3O4.roa
File: EXFJZQNNjnMebbcTzE58tImI3O4.roa (raw, json)
Hash identifier: 5aZiVi4zDyPpRDUVK6UVtEgt97/MmXY7r4g2PQWUKiw=
Subject key identifier: 11:71:49:65:03:4D:8E:73:1E:6D:B7:13:CC:4E:7C:B4:89:88:DC:EE
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018935D0E9B3876E88E9E085ADCDAFF65CE2
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EXFJZQNNjnMebbcTzE58tImI3O4.roa
Signing time: Sat 08 Jul 2023 14:03:51 +0000
ROA not before: Sat 08 Jul 2023 14:03:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.43.166.0/24 maxlen: 24
185.255.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 04:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:d0:e9:b3:87:6e:88:e9:e0:85:ad:cd:af:f6:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jul 8 14:03:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11714965034d8e731e6db713cc4e7cb48988dcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:46:02:5b:ee:78:d6:57:84:e8:f4:62:c8:
84:82:41:24:d5:46:81:d8:5c:16:d8:d1:c4:9f:b6:
e8:91:c0:a6:19:08:2d:dc:b7:4d:31:9e:d2:89:d3:
9e:8c:51:fd:7e:00:0c:df:a9:c1:8f:e3:60:10:3e:
b1:2b:65:6e:6e:86:bc:3f:27:d8:b6:46:6d:34:c7:
9a:a4:a6:c9:e5:dc:7d:2b:ed:65:f5:9b:5e:b3:a5:
9b:7d:81:6a:72:a7:a2:b6:77:2d:e0:cc:60:a1:f2:
96:1d:da:67:99:66:38:e3:39:50:43:e2:35:9f:f7:
c8:d1:08:52:23:65:6f:c4:c4:f7:89:27:6e:8e:c7:
e0:74:b3:27:78:b8:b3:ee:8e:f8:5c:2f:2a:06:2c:
8b:0a:ac:18:2b:fd:4e:ed:85:e7:36:9f:41:65:67:
87:90:7c:43:4c:dd:a9:e2:69:dc:dc:15:1a:c6:be:
b8:0d:10:38:90:c8:ba:37:8e:72:93:da:74:60:7c:
73:3b:92:3c:9a:45:46:85:a6:4a:af:3a:4f:85:4d:
49:65:94:42:a4:78:6b:b5:ee:3b:1d:18:df:9b:10:
86:b3:e4:e5:19:bd:ff:1a:85:06:82:1c:c5:e3:95:
af:b6:55:29:3f:ee:f5:91:8d:89:61:38:17:7a:e5:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:49:65:03:4D:8E:73:1E:6D:B7:13:CC:4E:7C:B4:89:88:DC:EE
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EXFJZQNNjnMebbcTzE58tImI3O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.166.0/24
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:9d:d0:45:20:bf:92:18:f2:b4:2a:21:1c:b3:0f:90:f3:9a:
a8:d5:0d:1e:db:85:8a:db:23:ea:e4:c7:63:a9:e8:ef:b0:73:
51:e5:8f:6a:c6:9d:1d:97:d8:42:42:79:e8:cb:bc:7c:1c:3d:
65:ca:5b:cb:29:fc:a9:ff:3b:9d:14:e5:6b:5d:24:ea:33:90:
ab:a9:12:72:14:70:be:37:9a:42:5b:89:54:05:e8:d8:57:70:
77:c9:ae:67:bf:4d:37:42:9e:ba:89:67:9b:14:12:2b:0a:63:
78:71:23:7d:a1:d8:e9:e2:33:b9:d2:a3:c6:a4:bb:45:22:2e:
8a:4c:ac:3c:52:2c:c9:bc:0f:ee:bf:e1:6d:e9:13:b6:2e:18:
3b:88:6d:25:c7:a4:86:c6:1b:f4:3f:2b:75:66:23:e6:2f:40:
70:65:8f:38:28:92:24:f6:b4:d3:8a:10:4e:ff:55:82:c4:17:
84:9e:5e:6b:52:22:5f:e2:0d:47:2d:50:5a:47:2e:cd:09:5e:
31:ac:df:4d:25:fd:b5:ea:ad:4d:8e:46:4d:96:61:0b:ee:d9:
21:c4:e3:86:d2:4b:67:c1:13:f9:3c:22:06:03:4d:49:50:f9:
0f:23:44:52:ea:41:5b:10:74:9f:31:e0:60:5d:57:c4:f1:7f:
d8:da:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org