Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/2ZpnK4qaqgG6q4xRm2uvcJrB2Ic.roa
File: 2ZpnK4qaqgG6q4xRm2uvcJrB2Ic.roa (raw, json)
Hash identifier: NW8Sf2W6QjHAXjrbbXZsYGSl6sgRogJE6mb405xU8n8=
Subject key identifier: D9:9A:67:2B:8A:9A:AA:01:BA:AB:8C:51:9B:6B:AF:70:9A:C1:D8:87
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018D4ED10CF1424CB70EFE9034620C011CC7
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/2ZpnK4qaqgG6q4xRm2uvcJrB2Ic.roa
Signing time: Sun 28 Jan 2024 06:45:39 +0000
ROA not before: Sun 28 Jan 2024 06:45:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 18:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4e:d1:0c:f1:42:4c:b7:0e:fe:90:34:62:0c:01:1c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 28 06:45:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d99a672b8a9aaa01baab8c519b6baf709ac1d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:e8:6c:e6:ed:f7:9d:92:48:6b:01:6e:da:
07:77:d1:d8:eb:a8:db:2e:ba:fd:5d:c6:3a:b0:7b:
18:99:3b:52:a8:9a:3e:97:d2:9a:4c:66:e1:15:aa:
13:bc:99:8c:b1:2f:52:19:a1:ab:50:74:02:d1:d2:
f5:d0:67:ee:a4:b7:26:fc:f0:e1:48:ab:ac:a5:a8:
d4:a7:36:a0:f2:be:d0:e9:56:80:66:a0:32:22:f1:
5a:88:32:64:8b:3b:5b:31:e1:a5:5b:8a:17:28:19:
09:be:c4:a2:2a:62:c5:0e:ac:43:33:a5:62:dd:c6:
44:f9:15:86:65:7b:6b:aa:7e:bc:02:bc:ce:fc:b3:
69:da:8f:74:b0:c3:72:33:3b:fe:ca:99:9e:7d:0a:
06:d4:7f:fa:d3:b3:85:cf:32:82:01:17:7c:3e:e7:
77:af:54:48:a7:84:9e:23:d6:ca:9c:2c:31:ca:75:
52:1d:77:15:36:2f:4c:d5:7e:34:f4:e2:a2:8c:21:
d6:d6:d0:a7:c8:94:cc:e2:38:83:31:84:7a:ea:e6:
2a:4a:a3:ff:48:da:63:db:c8:8d:d7:21:ac:88:9e:
dd:d0:f4:71:09:ca:1f:ee:64:72:26:a2:3e:ed:cb:
5e:68:ea:7d:e0:58:44:64:bd:43:e7:a1:1a:0a:5c:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:67:2B:8A:9A:AA:01:BA:AB:8C:51:9B:6B:AF:70:9A:C1:D8:87
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/2ZpnK4qaqgG6q4xRm2uvcJrB2Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2c:10:78:c5:29:29:eb:14:76:ff:92:88:f6:88:55:68:3e:
2f:7e:d2:5f:03:0a:0c:fd:84:23:5b:0f:17:a0:8f:c9:de:9f:
55:78:b2:7d:ba:e6:6e:35:61:22:3f:d1:d1:43:c0:fe:11:7a:
4c:33:47:fb:36:7d:fb:76:58:09:d3:7b:9c:6c:55:06:4e:25:
82:41:bf:0b:c5:bb:4a:28:7c:97:01:57:02:d6:91:4f:8d:9a:
17:25:95:17:ef:86:6a:5b:d1:23:fd:89:42:3b:61:94:d6:dd:
6f:5b:e1:85:2e:49:dd:c4:4e:8a:10:78:d7:59:72:10:6a:00:
e1:6d:6c:06:58:ee:e2:a9:19:e1:df:52:dc:58:be:ee:5c:1d:
3c:c3:81:1f:61:89:f7:a0:67:e9:33:15:03:8d:8d:6d:7c:fc:
7d:5a:08:c4:ad:00:a8:b0:c8:5a:ba:90:9c:ce:6f:a8:99:23:
ec:5d:22:88:d2:04:3b:de:32:2c:7c:92:99:63:44:d0:43:8e:
5a:4c:c3:24:0d:29:8c:70:b6:5f:6b:43:32:69:51:53:9a:f6:
5e:1e:eb:8f:ce:bb:2a:13:87:b9:2d:64:40:8e:be:9f:0d:fb:
f8:d9:0d:84:42:a2:df:e6:93:59:49:15:4b:fc:e5:d8:4a:59:
ab:05:fc:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1O0QzxQky3Dv6QNGIMARzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjQwMTI4MDY0NTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTlhNjcyYjhhOWFhYTAxYmFhYjhjNTE5YjZiYWY3MDlhYzFkODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpbobObt952SSGsBbtoHd9HY66jb
Lrr9XcY6sHsYmTtSqJo+l9KaTGbhFaoTvJmMsS9SGaGrUHQC0dL10GfupLcm/PDh
SKuspajUpzag8r7Q6VaAZqAyIvFaiDJkiztbMeGlW4oXKBkJvsSiKmLFDqxDM6Vi
3cZE+RWGZXtrqn68ArzO/LNp2o90sMNyMzv+ypmefQoG1H/607OFzzKCARd8Pud3
r1RIp4SeI9bKnCwxynVSHXcVNi9M1X409OKijCHW1tCnyJTM4jiDMYR66uYqSqP/
SNpj28iN1yGsiJ7d0PRxCcof7mRyJqI+7cteaOp94FhEZL1D56EaClzD0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmaZyuKmqoBuquMUZtrr3CawdiHMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvMlpwbks0cWFxZ0c2cTR4Um0ydXZjSnJCMkljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyulMA0G
CSqGSIb3DQEBCwUAA4IBAQC8LBB4xSkp6xR2/5KI9ohVaD4vftJfAwoM/YQjWw8X
oI/J3p9VeLJ9uuZuNWEiP9HRQ8D+EXpMM0f7Nn37dlgJ03ucbFUGTiWCQb8LxbtK
KHyXAVcC1pFPjZoXJZUX74ZqW9Ej/YlCO2GU1t1vW+GFLkndxE6KEHjXWXIQagDh
bWwGWO7iqRnh31LcWL7uXB08w4EfYYn3oGfpMxUDjY1tfPx9WgjErQCosMhaupCc
zm+omSPsXSKI0gQ73jIsfJKZY0TQQ45aTMMkDSmMcLZfa0MyaVFTmvZeHuuPzrsq
E4e5LWRAjr6fDfv42Q2EQqLf5pNZSRVL/OXYSlmrBfwi
-----END CERTIFICATE-----
Generated at Tue Jan 30 21:19:54 2024 by rpki-client on console-ams.rpki-client.org