Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/IUHahnT4yz9f2IxpUa7iw7dv5bc.roa
File: IUHahnT4yz9f2IxpUa7iw7dv5bc.roa (raw, json)
Hash identifier: 1XfYXtbMsDNGel+2ZA8KcKXuG/UErbpFC05HDkMJzE8=
Subject key identifier: 21:41:DA:86:74:F8:CB:3F:5F:D8:8C:69:51:AE:E2:C3:B7:6F:E5:B7
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01890C125D9F09A7838670705DAB3D3D4935
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/IUHahnT4yz9f2IxpUa7iw7dv5bc.roa
Signing time: Fri 30 Jun 2023 11:31:17 +0000
ROA not before: Fri 30 Jun 2023 11:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.255.4.0/24 maxlen: 24
31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jul 2023 12:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:12:5d:9f:09:a7:83:86:70:70:5d:ab:3d:3d:49:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jun 30 11:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2141da8674f8cb3f5fd88c6951aee2c3b76fe5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:67:a1:ab:c4:ca:64:23:4d:46:a1:84:e9:
75:fb:58:6a:f4:c0:86:97:2d:cd:4d:12:35:69:8b:
8b:2b:31:b2:8f:01:10:52:1e:e7:09:59:6a:09:76:
09:0f:db:fe:5e:b1:15:82:37:fc:3f:32:d4:d3:f9:
26:31:b4:09:fc:19:03:8b:e9:94:3b:51:3a:f5:bc:
b7:57:36:e3:2c:8d:06:01:4d:3c:4d:4d:d1:67:eb:
57:2c:03:83:22:36:5b:d8:5a:60:ac:95:d1:3b:ae:
af:44:49:8c:af:bf:7b:83:58:5b:3a:8a:86:b8:56:
88:0b:85:cf:20:d4:66:67:cc:6e:25:fa:aa:a8:9b:
51:2b:60:d9:67:94:cd:1f:e2:6b:22:21:52:d4:49:
43:96:87:b6:4c:2b:69:7c:f2:4e:09:6b:11:e1:f8:
1a:65:77:42:b1:30:5c:88:a9:63:0b:d1:f4:38:15:
0b:f7:b6:0a:04:9d:47:dd:cc:70:59:c1:0f:bd:5d:
20:92:2b:84:08:04:fd:48:6d:8a:5b:f8:f2:01:d7:
cd:bd:b6:13:ee:e5:fa:a2:dd:a4:0f:9c:eb:4b:5d:
0c:88:72:25:35:dc:5a:2b:30:01:76:e7:d8:ce:6d:
f5:2e:fc:c0:12:7e:65:72:43:15:e7:7a:d6:3b:d2:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:41:DA:86:74:F8:CB:3F:5F:D8:8C:69:51:AE:E2:C3:B7:6F:E5:B7
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/IUHahnT4yz9f2IxpUa7iw7dv5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0c:6b:9e:28:44:cd:42:e8:ef:9c:b6:9c:0c:dd:64:a9:ac:
83:47:61:9a:43:7f:6a:7e:eb:26:f5:72:46:df:e9:9e:a4:42:
a8:f4:a7:17:0d:da:da:6f:d8:27:47:4e:03:04:f5:03:ac:d9:
33:ec:a5:3d:04:dc:d7:f3:83:fa:ea:52:af:f7:8f:44:92:38:
1d:4f:2c:be:27:92:75:d5:a2:5d:c5:c2:f3:ff:eb:41:f9:51:
62:ac:0e:c8:63:f2:13:4f:e6:9c:96:4c:b6:0d:b7:a9:69:48:
2a:36:eb:6d:d4:ad:10:11:37:a1:e7:f5:e3:40:6c:fe:f9:62:
60:10:ed:20:35:ed:63:04:15:98:22:ca:a5:63:88:8a:18:83:
7f:9d:28:4a:a6:7a:7c:7f:1c:76:5b:2a:09:a0:ce:92:d0:20:
ee:5b:bc:1b:20:77:1c:79:b9:5e:e4:0b:30:dd:4c:65:79:7b:
98:60:d2:c2:b7:f1:99:a8:e8:90:86:ee:6d:22:04:3c:d2:d6:
99:a0:3b:91:35:87:37:81:5a:8a:a4:98:34:cb:dd:5e:fa:2a:
97:96:c1:52:b3:98:a2:f6:23:db:28:6b:91:3e:09:21:2c:85:
63:cf:8f:d9:a1:a4:65:f8:7d:35:0d:b5:0a:08:50:5b:0b:ad:
3f:68:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org