Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/x0hyZksDlS9R_UEaPIsX90BRswE.roa
File: x0hyZksDlS9R_UEaPIsX90BRswE.roa (raw, json)
Hash identifier: RVpeTmE/9OmQztLRNzQgXh8G9ZkbKzMe6Kty0Vznudk=
Subject key identifier: C7:48:72:66:4B:03:95:2F:51:FD:41:1A:3C:8B:17:F7:40:51:B3:01
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0187C72B127B74366B1DD130584677C81824
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/x0hyZksDlS9R_UEaPIsX90BRswE.roa
Signing time: Fri 28 Apr 2023 09:21:41 +0000
ROA not before: Fri 28 Apr 2023 09:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 03:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:2b:12:7b:74:36:6b:1d:d1:30:58:46:77:c8:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Apr 28 09:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c74872664b03952f51fd411a3c8b17f74051b301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:45:b1:f9:d1:47:70:69:a1:5e:26:ea:58:
17:ce:90:d7:da:de:b4:de:6e:5b:aa:45:7c:4f:4e:
98:b7:03:36:dc:ca:be:3b:b6:3b:e3:8f:a5:1a:7f:
f5:30:2c:34:1f:4c:87:64:53:54:5f:cf:19:19:75:
54:47:8c:52:f5:fb:c5:7e:12:94:80:1e:db:3b:77:
19:bf:2b:6e:7c:29:52:c3:ca:40:15:33:3b:db:f4:
be:73:c9:b9:e3:8e:82:4a:2a:8a:5f:e0:c2:09:7b:
69:bb:14:98:e0:5e:94:8e:aa:5b:78:4c:7c:ae:25:
4c:47:76:f8:13:e9:51:d1:28:78:af:80:20:86:3c:
57:3d:6a:a8:59:49:56:dc:16:06:d9:bb:21:71:de:
60:72:0f:6c:de:03:aa:4c:b2:2f:d1:df:6f:0c:d8:
5a:7b:cd:80:b2:d8:55:cd:20:85:17:4d:a9:f5:d0:
ce:e2:36:f5:65:c0:74:83:86:08:84:81:44:d5:d0:
a4:c1:9b:ef:2d:95:12:2c:b1:d0:7e:b0:24:1c:1b:
fb:52:e0:07:bb:ab:2e:ee:39:c4:54:19:9b:be:fa:
5d:b0:b9:df:05:0e:1c:53:a3:68:83:3f:25:a1:1a:
3f:21:94:e6:5a:7c:56:bf:64:42:a1:42:f4:b0:04:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:72:66:4B:03:95:2F:51:FD:41:1A:3C:8B:17:F7:40:51:B3:01
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/x0hyZksDlS9R_UEaPIsX90BRswE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
00:36:e3:24:0b:d4:5c:21:d8:19:e9:12:8f:1d:23:78:2f:4d:
7d:c4:22:16:e4:47:86:46:f6:e3:b4:04:68:91:4a:0e:e8:0a:
40:e9:f6:b9:f8:65:6c:bb:8a:6a:3b:6a:39:37:36:91:54:5a:
2d:20:c2:7d:66:75:a0:0e:e8:d9:e5:ff:f1:b5:45:80:5a:a1:
9b:10:5b:4b:d0:33:98:ae:ca:90:08:9a:a4:aa:57:d4:57:a3:
c2:60:fd:6c:89:ca:88:11:e0:7a:33:e4:46:0e:b6:34:0c:91:
77:3f:63:7d:7a:16:6e:30:73:33:b7:85:f0:bd:28:ac:81:ae:
80:50:ca:85:ae:ff:4f:b1:43:c8:49:30:fc:59:ca:3c:0a:7c:
73:20:71:46:b1:99:73:ce:bd:0b:d9:74:72:17:a5:8e:f3:19:
a4:36:34:be:19:27:92:dc:c2:9a:13:0f:00:f9:18:10:b4:34:
b3:11:60:70:44:6c:4d:17:65:f1:79:be:1a:c0:87:bd:cb:d1:
56:85:d8:f3:b6:41:51:3d:64:e6:45:f2:b5:88:50:bd:25:25:
5c:c3:96:5e:cd:ed:a3:a0:f3:27:b3:59:c2:d4:4f:05:6c:75:
7d:b0:9a:c9:0f:da:95:b8:cd:71:93:86:10:27:ec:ef:e0:22:
b3:89:8c:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfHKxJ7dDZrHdEwWEZ3yBgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjMwNDI4MDkyMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzQ4NzI2NjRiMDM5NTJmNTFmZDQxMWEzYzhiMTdmNzQwNTFiMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvBFsfnRR3BpoV4m6lgXzpDX2t60
3m5bqkV8T06YtwM23Mq+O7Y744+lGn/1MCw0H0yHZFNUX88ZGXVUR4xS9fvFfhKU
gB7bO3cZvytufClSw8pAFTM72/S+c8m5446CSiqKX+DCCXtpuxSY4F6UjqpbeEx8
riVMR3b4E+lR0Sh4r4AghjxXPWqoWUlW3BYG2bshcd5gcg9s3gOqTLIv0d9vDNha
e82AsthVzSCFF02p9dDO4jb1ZcB0g4YIhIFE1dCkwZvvLZUSLLHQfrAkHBv7UuAH
u6su7jnEVBmbvvpdsLnfBQ4cU6Nogz8loRo/IZTmWnxWv2RCoUL0sATLAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdIcmZLA5UvUf1BGjyLF/dAUbMBMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEveDBoeVprc0RsUzlSX1VFYVBJc1g5MEJSc3dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyulMA0G
CSqGSIb3DQEBCwUAA4IBAQAANuMkC9RcIdgZ6RKPHSN4L019xCIW5EeGRvbjtARo
kUoO6ApA6fa5+GVsu4pqO2o5NzaRVFotIMJ9ZnWgDujZ5f/xtUWAWqGbEFtL0DOY
rsqQCJqkqlfUV6PCYP1sicqIEeB6M+RGDrY0DJF3P2N9ehZuMHMzt4XwvSisga6A
UMqFrv9PsUPISTD8Wco8CnxzIHFGsZlzzr0L2XRyF6WO8xmkNjS+GSeS3MKaEw8A
+RgQtDSzEWBwRGxNF2Xxeb4awIe9y9FWhdjztkFRPWTmRfK1iFC9JSVcw5Zeze2j
oPMns1nC1E8FbHV9sJrJD9qVuM1xk4YQJ+zv4CKziYxN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org