Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/iddnIpphkUGQYiw9eHwxoJi9vLE.roa
File: iddnIpphkUGQYiw9eHwxoJi9vLE.roa (raw, json)
Hash identifier: 7ox8zOKUAzFfpEOSmQAjbSbdC2DDCci6prXZnL4N9K8=
Subject key identifier: 89:D7:67:22:9A:61:91:41:90:62:2C:3D:78:7C:31:A0:98:BD:BC:B1
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0189D49C6E23BB9D5865A0A946878969C7A3
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/iddnIpphkUGQYiw9eHwxoJi9vLE.roa
Signing time: Tue 08 Aug 2023 10:06:08 +0000
ROA not before: Tue 08 Aug 2023 10:06:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.255.4.0/24 maxlen: 24
31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Aug 2023 05:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:9c:6e:23:bb:9d:58:65:a0:a9:46:87:89:69:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 8 10:06:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89d767229a61914190622c3d787c31a098bdbcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:eb:d0:7a:f5:a6:d3:33:9d:22:1a:7e:d8:
04:64:3c:8c:e6:7a:7f:47:ed:31:fc:00:3a:56:e7:
49:99:74:c4:19:27:0c:2f:2f:b7:df:11:1f:99:6a:
31:a1:b9:ba:5b:48:2d:30:d6:81:27:71:65:99:17:
8e:27:df:90:da:b1:f7:66:d7:19:31:89:98:f2:47:
a3:57:a1:56:60:8d:1c:d4:3a:77:40:8f:88:68:9e:
4e:e3:c9:d9:2d:d4:cd:7f:fc:d6:c3:3e:f6:85:8f:
ec:e6:89:7b:66:4f:ae:90:e7:66:40:5c:47:cd:46:
fb:75:1e:42:40:a4:54:d0:a0:6f:d0:52:bc:b7:fc:
db:00:95:86:0d:6e:31:74:17:f6:3c:36:38:81:d0:
bc:7b:66:b7:69:74:f9:6b:be:af:31:9a:cd:07:8e:
10:e7:0a:0c:ce:bf:b3:dd:3a:23:b3:76:2e:fe:9a:
7c:c0:43:7f:ac:f4:7c:cc:3c:b6:0f:35:57:1d:a7:
66:4e:6d:25:c3:69:0e:76:f5:26:0c:37:72:6c:bb:
c6:b4:b2:79:15:9e:b4:f0:89:a9:dd:6d:2a:b1:ff:
8b:a1:09:0e:32:2c:3b:f6:e9:39:14:85:ee:29:34:
48:8c:ad:ea:e3:43:ac:2c:07:d6:ee:d4:27:51:8b:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:67:22:9A:61:91:41:90:62:2C:3D:78:7C:31:A0:98:BD:BC:B1
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/iddnIpphkUGQYiw9eHwxoJi9vLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ca:a0:8f:95:d5:fb:f2:50:f7:12:7c:6d:11:f8:0c:7f:a0:
cc:48:5b:71:97:ca:64:e7:c7:31:8d:71:95:c6:27:b1:b7:c7:
3f:6b:74:17:fd:95:ae:bf:09:ad:3b:9a:44:75:35:fd:c6:7c:
ea:d1:25:3a:5f:01:56:31:1a:9f:0d:29:b9:d1:47:03:d3:26:
c9:61:20:03:26:5e:d6:76:5e:af:ec:08:0d:cf:37:69:b3:76:
c2:a7:5a:79:0b:e3:68:83:5b:ed:82:11:6f:ab:b2:f8:79:77:
ca:db:6e:f3:83:d5:53:76:f2:c0:8b:d5:c4:6c:81:42:78:ba:
80:9d:cd:5a:98:00:2f:98:e1:7f:9f:14:9f:03:a2:b8:2a:4b:
33:7a:14:b9:e6:93:f2:66:6b:28:56:65:e8:13:3b:6e:77:4b:
df:64:d0:70:1c:17:9f:3c:f6:da:01:d2:82:b2:be:bb:a9:60:
cc:f6:dd:d1:99:82:43:98:19:e5:cc:61:92:ac:72:88:24:18:
0f:18:74:dd:64:8c:0f:e3:96:98:8f:34:7c:dd:a2:32:80:99:
6e:6a:32:dd:ee:63:a6:51:22:e9:80:ef:eb:0e:bd:04:ab:91:
31:0b:d6:40:90:21:ff:7c:4f:64:68:12:74:67:6c:0e:31:8b:
cf:a2:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org