Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/1-0NWcuWbnA5HhJV-jPiPDNCsRr4.roa
File: 1-0NWcuWbnA5HhJV-jPiPDNCsRr4.roa (raw, json)
Hash identifier: QyK6lEsogx14XlUNjeREa3Ttb75qW9VKRyle80Yh0pU=
Subject key identifier: FB:43:56:72:E5:9B:9C:0E:47:84:95:7E:8C:F8:8F:0C:D0:AC:46:BE
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018CC50110557E610C3E4601263CF6A4579F
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/1-0NWcuWbnA5HhJV-jPiPDNCsRr4.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 06:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:10:55:7e:61:0c:3e:46:01:26:3c:f6:a4:57:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb435672e59b9c0e4784957e8cf88f0cd0ac46be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:b2:9c:91:4b:87:bf:b8:9f:33:18:45:d3:
4e:ad:4a:7d:65:7b:44:aa:9d:67:ab:7c:42:97:be:
90:6e:58:05:1a:6b:d3:e5:39:a2:59:d8:22:22:fe:
9a:db:5d:f5:bc:1f:13:8a:4d:6d:a3:cb:03:96:81:
18:cb:d9:00:7e:40:7b:80:88:cd:84:84:a7:35:41:
d2:cc:ff:6e:28:d2:0c:6e:87:ea:7b:d0:bd:8f:cd:
a5:4d:48:d7:46:6b:9a:f5:82:98:08:28:35:39:ae:
db:cf:4f:8d:16:89:08:d2:15:63:b9:70:de:d0:c4:
6b:cf:6c:7d:62:e1:df:2a:d7:ad:ba:6f:fb:a7:eb:
71:dc:34:fc:7d:cd:c7:38:ce:8e:72:d6:b6:7d:d8:
77:e9:70:15:e0:fe:97:09:bf:80:f0:d1:28:5b:a1:
5b:76:54:63:f1:65:fb:23:29:f5:05:ed:b0:a0:ba:
ca:7d:94:3b:0a:da:ff:11:fe:40:51:33:97:8e:90:
48:70:81:ef:88:1f:54:8f:a7:0d:4e:a9:bb:65:0f:
99:b4:c1:f4:29:98:c5:88:2d:ef:e0:91:9a:32:2c:
e7:33:9c:67:88:c4:c5:d0:ce:9b:2e:30:ee:77:de:
86:24:ef:ce:58:88:ea:80:5d:a9:0d:ce:8e:0e:e5:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:56:72:E5:9B:9C:0E:47:84:95:7E:8C:F8:8F:0C:D0:AC:46:BE
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/1-0NWcuWbnA5HhJV-jPiPDNCsRr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
21:57:0e:61:bc:73:ab:cd:59:f1:70:d6:a0:31:7d:f3:3c:a2:
cd:ed:10:36:52:a5:cd:97:25:aa:75:02:b5:9c:ec:b4:31:ed:
cd:0a:84:c2:f2:be:30:12:67:eb:6f:40:50:50:a0:d4:eb:2c:
6f:77:c3:a8:17:36:e9:c9:be:67:c4:45:bd:a1:db:29:ab:40:
7b:a3:56:c7:7e:e7:2c:1d:42:df:d0:6b:8e:58:2a:6f:1a:64:
0b:b8:ab:da:c7:8c:dc:f3:d4:fc:53:5a:82:f0:a4:67:d0:35:
02:f8:95:14:fa:67:6a:3b:b7:82:67:af:47:a3:7e:81:ef:70:
1e:ca:d0:26:d4:8b:71:26:6b:7e:11:6b:d6:87:28:4f:7b:03:
76:e3:a4:8e:52:30:03:0e:30:ad:6c:b3:7b:36:c5:6b:54:c4:
35:0a:0a:b5:92:e0:af:bc:d8:58:76:b4:35:65:50:9a:b2:97:
54:86:b4:01:84:fb:5d:fa:40:85:20:aa:f6:f4:76:1c:c9:f4:
e4:79:93:08:56:cb:57:64:78:13:45:16:94:61:61:f1:e0:b3:
d5:e5:6a:9e:de:34:54:31:ba:04:b0:86:b7:c7:42:67:15:b4:
7f:71:b1:ce:eb:8f:ee:3b:ba:58:a8:b1:c3:fc:bd:a8:99:7f:
26:10:87:80
-----BEGIN CERTIFICATE-----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Generated at Sun Jan 28 07:19:08 2024 by rpki-client on console-fra.rpki-client.org