Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/1-_YTtgdfwaTPMGQQxx3MTDpq0sg.roa
File: 1-_YTtgdfwaTPMGQQxx3MTDpq0sg.roa (raw, json)
Hash identifier: w8CTQHK8J9wwVDJ1L84cA8EjjP+VhX+TK6txEp2U8/k=
Subject key identifier: FB:F6:13:B6:07:5F:C1:A4:CF:30:64:10:C7:1D:CC:4C:3A:6A:D2:C8
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01893E1B1A28665B9337076307BA0E83BA34
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/1-_YTtgdfwaTPMGQQxx3MTDpq0sg.roa
Signing time: Mon 10 Jul 2023 04:41:50 +0000
ROA not before: Mon 10 Jul 2023 04:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.43.166.0/24 maxlen: 24
185.255.4.0/24 maxlen: 24
31.43.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 03:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:1b:1a:28:66:5b:93:37:07:63:07:ba:0e:83:ba:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jul 10 04:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbf613b6075fc1a4cf306410c71dcc4c3a6ad2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:31:91:11:bc:ca:24:69:55:3c:94:4d:64:
ab:21:47:9c:b7:2e:82:ae:73:12:4b:3c:60:4f:49:
c5:45:18:ae:06:4b:21:1c:45:82:7b:6f:7e:09:7e:
16:ec:4a:40:0b:31:e2:17:47:f9:39:e8:d3:51:eb:
7c:b1:be:dc:3e:b2:4a:7f:89:bb:1e:59:90:d6:60:
82:88:39:8b:6b:4a:ae:84:b4:14:db:3e:2a:33:b8:
3f:23:4c:ab:2b:0e:e4:fb:4c:a0:66:32:ba:0a:c1:
0b:8d:6f:5e:c4:93:b3:ca:9b:6a:91:3d:bc:7d:ac:
4f:1f:6e:de:60:dd:c7:b6:d1:e2:50:ba:e3:c0:e6:
85:b9:07:36:8f:a8:d9:31:9d:69:fd:23:85:fc:34:
b1:e4:ae:f5:49:77:c2:f9:dd:f6:e6:90:b5:b0:eb:
d2:ca:c3:41:f8:98:70:96:05:ab:a3:43:a6:d7:3b:
f1:e0:50:f9:44:f0:69:49:a9:9a:3c:1f:b9:29:30:
dc:c9:43:d1:45:0c:01:7c:7a:b5:27:a6:f1:8c:f7:
4a:aa:2d:b4:1b:4c:9e:ad:ea:43:83:99:e2:a2:af:
16:30:a7:9b:4f:a8:e8:6f:9f:2b:29:f2:bb:a0:bd:
1d:91:67:c7:12:72:dd:86:68:ab:f8:e4:b1:2a:e8:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F6:13:B6:07:5F:C1:A4:CF:30:64:10:C7:1D:CC:4C:3A:6A:D2:C8
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/1-_YTtgdfwaTPMGQQxx3MTDpq0sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/24
31.43.166.0/24
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
46:04:f6:5e:94:01:79:96:2b:5e:db:41:07:fb:2d:05:8f:29:
18:d8:8a:cb:9f:eb:cc:3c:76:8f:d5:0c:e9:67:92:0e:7b:3c:
79:55:e9:2a:b1:76:ba:d6:a9:6e:b4:5d:fb:c0:f0:e9:0b:f7:
f6:0f:14:7d:35:e5:ef:88:fc:ca:e9:f5:7b:7d:08:76:7e:47:
1c:7a:88:92:a6:89:7d:1a:b3:e8:95:46:c8:5b:a6:c7:4d:d6:
b5:5d:62:41:02:7f:86:04:f4:2c:c7:08:03:2f:8d:f4:66:9d:
13:67:9f:5d:72:49:3f:68:01:c4:82:66:75:17:1f:d1:5e:ad:
63:20:a0:c0:26:ec:06:a3:8a:85:90:1e:fa:6f:b4:37:c4:c9:
f9:ef:49:eb:c7:5e:36:06:21:2b:38:30:ad:02:86:b4:58:0b:
df:04:4b:db:25:fc:2e:89:ad:71:a8:c1:72:a8:16:6d:63:1a:
82:40:36:2b:b4:6e:48:1f:8a:2f:7e:42:a3:2e:1f:15:05:56:
d2:d7:64:37:bb:d8:d7:b4:93:53:3f:0c:cc:4a:77:30:1f:9a:
8a:b7:6a:45:cb:4a:3c:59:8e:e0:93:d2:84:45:b8:8f:20:25:
85:32:5a:54:a0:71:f9:10:b5:bf:7f:c4:0a:a2:67:a5:0c:85:
a8:d4:e1:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org