Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/X6dEPaYbBLg7mj7ba3K49ewZNsM.roa
File: X6dEPaYbBLg7mj7ba3K49ewZNsM.roa (raw, json)
Hash identifier: rkUWFMvV/w6m7AP1inl2C85eI/YbFaFKrvofnTMsgdY=
Subject key identifier: 5F:A7:44:3D:A6:1B:04:B8:3B:9A:3E:DB:6B:72:B8:F5:EC:19:36:C3
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0189ED4300076E6E41AD8F48D46359483AF5
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/X6dEPaYbBLg7mj7ba3K49ewZNsM.roa
Signing time: Sun 13 Aug 2023 04:58:58 +0000
ROA not before: Sun 13 Aug 2023 04:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.255.4.0/24 maxlen: 24
31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:43:00:07:6e:6e:41:ad:8f:48:d4:63:59:48:3a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 13 04:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa7443da61b04b83b9a3edb6b72b8f5ec1936c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:40:15:8f:70:fe:b2:de:92:f7:06:cd:5b:
03:6a:3a:7c:8a:b7:e4:40:44:36:70:a4:dd:71:a4:
09:db:56:2c:4d:00:07:5d:f8:42:a3:d1:34:b0:32:
36:c7:1c:55:d5:5b:60:c2:18:01:e7:46:ab:7a:eb:
18:74:24:6e:18:ff:06:e3:9c:77:a7:fe:6b:4f:c4:
a3:c4:c1:f4:cf:c0:c0:e5:bc:2f:cc:bf:d0:12:21:
7b:d5:68:f4:ec:14:c1:03:c0:4a:32:79:5e:bd:bf:
e9:b7:b8:bc:dd:3f:c1:77:04:7f:9c:ce:ad:42:0d:
ae:1a:81:11:01:12:e3:03:c8:be:3f:98:bf:5b:ef:
02:c0:0e:16:b5:4a:94:73:d8:fa:4b:35:14:71:6d:
cb:a7:7a:95:6c:0f:4c:2f:6b:ff:0a:40:7a:a6:9b:
d2:84:ae:72:1f:5b:ce:a4:1f:19:53:8a:70:e3:9a:
3e:d2:aa:df:79:6e:bd:56:72:25:2b:66:74:80:53:
94:92:3d:a8:d7:ce:fe:ef:bd:69:82:32:9c:4b:76:
39:d6:99:fb:d2:1d:8a:88:b4:d7:40:9b:64:af:2a:
af:30:6d:12:51:97:a0:18:62:0c:47:f5:cf:e5:fd:
57:82:4f:58:d0:fe:87:3c:06:93:90:15:c4:9f:da:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:44:3D:A6:1B:04:B8:3B:9A:3E:DB:6B:72:B8:F5:EC:19:36:C3
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/X6dEPaYbBLg7mj7ba3K49ewZNsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:9f:2b:1a:56:63:30:88:f6:11:13:04:c3:6b:0d:5d:07:
1a:29:13:06:6c:1b:e3:be:92:66:92:d5:f4:63:50:d2:76:1b:
e8:3d:f0:86:ea:e2:51:b4:c7:7d:bc:c0:af:91:ba:1c:6d:a6:
ca:45:eb:f7:58:59:6d:25:b0:d3:93:a5:94:44:34:ec:b6:18:
20:f2:84:bb:ee:ee:b1:59:25:1f:36:f7:41:e5:b5:b2:ae:01:
16:4f:f1:9d:4a:68:e1:7e:65:45:ea:62:42:8b:b7:fa:83:3b:
03:54:e3:c9:50:ad:8e:28:45:31:9f:ef:1b:a6:09:d0:0f:a6:
20:a1:1e:1f:cf:58:a7:57:e2:b5:52:fe:ab:eb:01:67:c7:30:
d5:f4:70:dc:cf:c1:e1:cf:cf:13:65:48:dc:48:8b:fa:b2:00:
a5:e9:c2:96:01:f4:48:df:cf:8d:1a:2a:ab:e2:6e:1e:19:aa:
76:d6:19:34:23:58:04:12:a5:76:36:86:24:61:f9:89:bf:64:
19:7f:41:68:78:6e:e2:49:01:c0:09:66:b4:f0:81:ae:20:86:
7c:1d:70:d2:d8:7b:97:4f:79:df:ae:3a:df:83:8d:be:58:f9:
5b:1d:32:a8:37:a4:60:f8:d5:37:ed:8a:a3:d1:46:3f:45:8e:
b2:e8:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 12:17:40 2023 by rpki-client on console-ams.rpki-client.org