Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/dL_lldh2BYPcs9C-L8aua9YHZBQ.roa
File: dL_lldh2BYPcs9C-L8aua9YHZBQ.roa (raw, json)
Hash identifier: sM2iaw+uTibIxF5es0B8H8+eyvgXze6eeOLnpSlxUEk=
Subject key identifier: 74:BF:E5:95:D8:76:05:83:DC:B3:D0:BE:2F:C6:AE:6B:D6:07:64:14
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0188054022F0D612DB9DE8FE45E229E0A7C2
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/dL_lldh2BYPcs9C-L8aua9YHZBQ.roa
Signing time: Wed 10 May 2023 10:41:09 +0000
ROA not before: Wed 10 May 2023 10:41:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 31.43.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 04:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:40:22:f0:d6:12:db:9d:e8:fe:45:e2:29:e0:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: May 10 10:41:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74bfe595d8760583dcb3d0be2fc6ae6bd6076414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:7d:8d:4b:8c:1e:4a:8d:df:ca:89:7f:19:
90:bc:00:9c:97:56:48:e4:0b:a6:3b:4a:85:14:ba:
75:41:03:1c:24:fe:94:b6:41:e4:e9:d8:b4:53:e4:
e3:ae:5b:f7:bb:1e:9b:9f:71:b8:5d:68:7f:36:25:
81:89:b1:5d:98:46:f3:bc:a9:ce:e6:02:18:e7:95:
df:62:9f:8f:4b:3c:a0:bc:ef:5a:46:81:7f:e0:02:
b4:d6:ff:d9:c4:6f:c3:6f:cb:00:da:54:7f:8c:8e:
d2:60:94:d6:d0:7e:9a:fe:84:a9:7b:ab:aa:8c:cf:
95:52:df:df:f8:3d:fc:00:5c:d2:fb:83:c8:dd:32:
ae:2d:e9:73:ae:c5:f2:b1:b3:ce:3e:45:b7:8a:29:
e6:c9:0b:30:e1:92:86:5f:07:0c:5f:e8:1e:43:96:
ce:ef:1f:bc:c1:e1:b1:af:d6:21:2d:95:6d:84:65:
4a:b8:a1:dd:87:d6:26:eb:27:2a:d3:e7:03:9e:cd:
0c:c4:2b:e5:c4:6c:75:ef:f2:dc:a8:6d:38:d5:5a:
be:c8:bc:6f:dc:53:95:82:95:12:59:b3:9d:2e:47:
37:cb:6a:7d:b3:4f:3e:40:29:98:0b:1a:12:8e:f9:
90:7b:fe:c0:a3:71:46:39:b6:8c:8a:5c:32:5f:36:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BF:E5:95:D8:76:05:83:DC:B3:D0:BE:2F:C6:AE:6B:D6:07:64:14
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/dL_lldh2BYPcs9C-L8aua9YHZBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1d:54:eb:bf:a4:4b:c8:90:11:72:34:30:7e:3f:53:cc:19:
52:ee:57:f9:2c:a7:70:1a:a6:63:4d:be:a9:8d:0c:cd:1e:37:
f3:b4:34:93:e7:4a:73:0a:ea:82:41:73:4d:d5:dd:af:47:b3:
15:4a:e7:24:a9:98:ba:82:7e:37:d3:19:a2:65:e2:4a:c7:0e:
e9:ef:4b:81:b3:55:bf:29:69:28:ae:71:01:8b:72:63:7f:85:
59:82:7d:c2:64:bd:fa:14:d7:3f:c5:bf:43:a1:d6:a9:1c:bd:
db:07:2b:fa:a0:d2:ac:44:b4:91:93:85:67:6b:f7:e7:7b:e6:
a2:88:8e:6a:fd:61:62:7a:7b:46:1d:e7:3f:2d:a7:de:85:57:
91:7b:a8:64:1e:13:c3:76:e7:69:cf:85:ca:a0:4e:b2:43:b4:
34:c2:2b:b3:86:31:56:96:60:43:ed:51:b5:76:90:41:25:8c:
17:9c:42:f6:01:de:df:c8:6d:94:fb:da:d0:e8:95:ae:2a:44:
e6:76:55:c3:89:11:ff:1d:e7:c0:e9:5f:8b:a7:ab:ec:7e:77:
ee:a8:2e:8a:a5:a1:01:cc:6e:25:8a:c5:7e:24:30:0c:65:b6:
13:50:3e:0d:2e:68:64:2e:f6:07:57:05:c2:f0:d6:00:94:b9:
47:79:87:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org