Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/jf-V-7gksHIxr8xkijyq272osEA.roa
File: jf-V-7gksHIxr8xkijyq272osEA.roa (raw, json)
Hash identifier: ZyePqCr0Ni89CdyIJb3n09MWgiS4lgW4SavkQOaYPNU=
Subject key identifier: 8D:FF:95:FB:B8:24:B0:72:31:AF:CC:64:8A:3C:AA:DB:BD:A8:B0:40
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018BEE8F29571086CFFBCD4742F7407CDE8F
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/jf-V-7gksHIxr8xkijyq272osEA.roa
Signing time: Mon 20 Nov 2023 21:07:21 +0000
ROA not before: Mon 20 Nov 2023 21:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Nov 2023 05:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:8f:29:57:10:86:cf:fb:cd:47:42:f7:40:7c:de:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Nov 20 21:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dff95fbb824b07231afcc648a3caadbbda8b040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:33:d4:a0:9f:6b:97:bf:e2:c5:ff:a2:db:
c3:51:c6:c3:83:9e:2c:aa:cc:e8:b5:a4:e8:e8:20:
b6:46:41:a0:dd:17:14:70:b4:7f:50:2d:54:f7:24:
6f:cb:22:76:c9:44:1a:9b:50:6d:09:2b:d3:7f:65:
7c:b2:ba:23:e5:35:50:3b:93:24:c4:13:62:b6:2f:
fc:b2:88:0f:2c:8e:aa:2e:3e:a1:49:c5:67:2d:e6:
4c:5b:e4:a2:65:fb:1d:27:9c:b3:01:41:1e:c0:dd:
f5:2f:d4:cc:61:93:4b:a1:d3:c9:e8:0e:f8:40:44:
b3:db:53:d8:b4:76:11:12:c9:68:36:8f:2a:2c:ec:
72:31:27:12:3e:4c:27:22:c9:08:69:9f:13:a3:0a:
b1:b1:78:ae:50:8f:fb:df:0a:ec:e1:d3:db:a0:19:
89:fd:6a:0e:84:38:a5:04:37:6c:d1:30:42:36:a4:
1d:10:fa:d5:ce:0d:af:69:46:da:2d:16:82:97:81:
ee:06:6c:5e:a3:25:19:74:6a:e7:fe:26:5d:54:c6:
f2:2b:13:6b:4e:3d:02:25:e3:90:45:0c:d4:cd:1d:
01:3d:52:c4:77:61:bd:1e:7b:8c:4d:c6:d0:38:d0:
92:30:fc:0b:e1:d8:46:99:b1:26:1b:26:2e:44:ec:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FF:95:FB:B8:24:B0:72:31:AF:CC:64:8A:3C:AA:DB:BD:A8:B0:40
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/jf-V-7gksHIxr8xkijyq272osEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:15:82:e2:3f:83:61:45:16:ac:91:b9:f6:e1:ae:23:4c:c0:
3b:e9:cd:e1:5f:89:58:f7:e7:2d:fc:d8:a0:0d:51:4b:6a:40:
34:f6:1a:73:c5:56:ae:d9:96:2d:b5:e0:43:a7:a5:26:60:a7:
0b:1e:d8:49:6f:bb:c2:be:d7:a2:a0:e6:ad:12:70:46:93:59:
ff:98:28:50:f3:6c:d6:3b:83:15:f9:15:2e:8a:f8:af:08:3e:
00:05:58:c7:d5:20:e1:87:e8:c1:9d:ae:02:b5:77:d4:13:70:
e9:5d:5d:8a:04:11:ec:e3:0b:7d:86:67:de:d5:55:fe:8f:04:
c6:69:b8:f1:db:a7:f2:d3:4f:53:ab:52:71:ee:5f:76:fe:a5:
f2:45:17:4d:a3:af:e7:96:24:a0:40:fd:9a:71:77:d1:c0:ad:
fc:2e:44:03:4c:f9:55:c6:54:f8:37:5a:19:3d:11:0b:1a:79:
b4:09:c2:d8:e3:fc:5a:5f:5e:4d:71:7d:b4:07:c2:06:37:5a:
96:77:7e:91:c1:2f:7c:54:9a:ef:d0:1f:d8:83:1a:b0:48:99:
5f:26:af:2a:79:1f:f0:73:c0:2e:c2:9e:3a:fb:18:a3:af:69:
0b:c3:c5:a8:f8:52:82:6e:89:2e:96:06:f1:5c:28:9c:70:84:
96:a3:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org