Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/zNzTeZ8PpSkYX6yIChH-CB_jFoA.roa
File: zNzTeZ8PpSkYX6yIChH-CB_jFoA.roa (raw, json)
Hash identifier: YeSgCVCREJWm78E/oaNTj18xu0J4t2kKvK0aeziJ8y8=
Subject key identifier: CC:DC:D3:79:9F:0F:A5:29:18:5F:AC:88:0A:11:FE:08:1F:E3:16:80
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018AABAA777C84C40D78852DA2AEC88FF88B
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/zNzTeZ8PpSkYX6yIChH-CB_jFoA.roa
Signing time: Tue 19 Sep 2023 04:19:50 +0000
ROA not before: Tue 19 Sep 2023 04:19:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51308
IP address blocks: 31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 21:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ab:aa:77:7c:84:c4:0d:78:85:2d:a2:ae:c8:8f:f8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Sep 19 04:19:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccdcd3799f0fa529185fac880a11fe081fe31680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:d4:c4:71:4c:02:80:4f:34:b2:c5:e8:6d:
d0:e6:a0:22:7c:3d:83:a9:2c:03:27:9a:41:45:f5:
2a:98:77:bf:f6:37:76:8d:84:86:8f:4a:4f:9b:1c:
6d:33:6d:c0:a2:d7:f8:35:4b:02:6c:a1:99:30:99:
a2:57:68:18:7d:a4:a1:43:63:de:a6:5f:6c:18:77:
95:ce:fa:87:f9:0f:b2:ad:f3:cc:57:f1:c7:2d:d6:
a2:a6:41:e6:b8:53:ca:48:07:1e:8c:7e:f5:0a:d6:
e6:6e:75:b1:ec:c1:3f:89:a1:15:47:b5:46:84:70:
32:10:f7:48:9c:d9:cd:d5:78:cc:2e:9e:d9:3b:92:
2a:6c:ad:1e:a4:fc:d6:02:ed:a5:38:ab:2f:5d:6c:
95:06:51:67:22:c6:b8:88:a7:ed:79:85:77:bf:56:
4d:6e:c7:4b:c4:bc:1e:d6:42:46:5f:84:a8:ef:e9:
26:3a:04:49:04:ba:44:28:7b:5f:05:76:28:37:a1:
c1:bb:ba:34:69:76:ea:1a:71:a9:24:dd:85:2e:d0:
c9:70:73:7e:07:2b:c3:fc:50:54:28:ea:f7:32:a3:
9e:8d:05:ca:4e:a4:e2:a4:28:8a:c0:d5:ea:a5:b6:
5a:14:33:77:93:3c:ba:e6:bd:b1:b6:68:a5:ba:a9:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DC:D3:79:9F:0F:A5:29:18:5F:AC:88:0A:11:FE:08:1F:E3:16:80
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/zNzTeZ8PpSkYX6yIChH-CB_jFoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
43:07:d4:00:fe:c8:5e:df:0c:ac:b8:9f:f7:e1:67:08:23:e2:
ca:78:de:3a:da:36:71:b3:06:2c:dc:70:a6:c9:24:4a:5e:0e:
14:d2:e0:b4:72:fe:fe:e7:47:0a:c5:9e:99:7d:8b:63:39:52:
78:3d:c8:80:b7:4b:9b:1f:6b:ca:be:c5:ce:02:9e:77:cb:d3:
be:30:71:2f:b2:1d:0e:c9:7b:4b:92:45:23:97:4d:7b:ef:6d:
80:e7:e7:15:2f:15:44:50:05:f3:48:04:b1:56:67:69:2d:a3:
bd:1e:3d:88:58:55:b4:ad:64:40:26:1e:1d:31:71:f0:15:e5:
56:a7:81:97:ff:88:54:41:3e:06:25:81:18:e3:4d:c3:f6:a1:
13:68:51:a8:ca:e2:3f:0d:c7:16:27:5a:a2:5b:eb:fb:17:d0:
c4:0d:98:e3:08:10:da:a2:46:02:4b:4b:92:d6:5f:21:0a:9c:
c2:62:85:3b:df:96:ac:05:6f:5f:93:d2:e4:87:a6:76:99:4e:
82:cd:e6:c7:bc:36:f3:f2:76:9e:61:5c:b4:9b:fe:0e:03:2b:
d7:a9:98:93:df:16:2b:4a:ae:40:aa:f4:ac:85:69:da:cf:74:
fd:e9:32:8d:9b:0d:25:5f:eb:20:cc:90:04:e8:dd:70:67:6d:
da:31:a7:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqrqnd8hMQNeIUtoq7Ij/iLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjMwOTE5MDQxOTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2RjZDM3OTlmMGZhNTI5MTg1ZmFjODgwYTExZmUwODFmZTMxNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTjUxHFMAoBPNLLF6G3Q5qAifD2D
qSwDJ5pBRfUqmHe/9jd2jYSGj0pPmxxtM23Aotf4NUsCbKGZMJmiV2gYfaShQ2Pe
pl9sGHeVzvqH+Q+yrfPMV/HHLdaipkHmuFPKSAcejH71CtbmbnWx7ME/iaEVR7VG
hHAyEPdInNnN1XjMLp7ZO5IqbK0epPzWAu2lOKsvXWyVBlFnIsa4iKfteYV3v1ZN
bsdLxLwe1kJGX4So7+kmOgRJBLpEKHtfBXYoN6HBu7o0aXbqGnGpJN2FLtDJcHN+
ByvD/FBUKOr3MqOejQXKTqTipCiKwNXqpbZaFDN3kzy65r2xtmiluqk8RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzc03mfD6UpGF+siAoR/ggf4xaAMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvek56VGVaOFBwU2tZWDZ5SUNoSC1DQl9qRm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyulMA0G
CSqGSIb3DQEBCwUAA4IBAQBDB9QA/she3wysuJ/34WcII+LKeN462jZxswYs3HCm
ySRKXg4U0uC0cv7+50cKxZ6ZfYtjOVJ4PciAt0ubH2vKvsXOAp53y9O+MHEvsh0O
yXtLkkUjl017722A5+cVLxVEUAXzSASxVmdpLaO9Hj2IWFW0rWRAJh4dMXHwFeVW
p4GX/4hUQT4GJYEY403D9qETaFGoyuI/DccWJ1qiW+v7F9DEDZjjCBDaokYCS0uS
1l8hCpzCYoU735asBW9fk9Lkh6Z2mU6CzebHvDbz8naeYVy0m/4OAyvXqZiT3xYr
Sq5AqvSshWnaz3T96TKNmw0lX+sgzJAE6N1wZ23aMadC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org