Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ggVnfPF9c-xNTvJkvs34AguDvhE.roa
File: ggVnfPF9c-xNTvJkvs34AguDvhE.roa (raw, json)
Hash identifier: r3Vxcj4eumNGw19rhACt7+wvwpalaXKrvlzyOkGQTbQ=
Subject key identifier: 82:05:67:7C:F1:7D:73:EC:4D:4E:F2:64:BE:CD:F8:02:0B:83:BE:11
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0189732A6C1E915EE71FAA6328C2E96AE923
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ggVnfPF9c-xNTvJkvs34AguDvhE.roa
Signing time: Thu 20 Jul 2023 11:58:27 +0000
ROA not before: Thu 20 Jul 2023 11:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 31.43.164.0/24 maxlen: 24
185.255.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:2a:6c:1e:91:5e:e7:1f:aa:63:28:c2:e9:6a:e9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jul 20 11:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8205677cf17d73ec4d4ef264becdf8020b83be11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:a2:57:bb:57:34:e7:e3:90:db:65:1b:22:
31:3f:35:1d:30:5d:d4:eb:ea:bc:bf:af:70:47:52:
31:69:79:d1:10:71:34:86:92:84:1e:de:66:39:05:
c4:87:8b:cd:4b:1a:96:d8:d7:02:76:27:f3:16:f4:
6e:1c:f1:56:e5:a1:ed:2c:41:b9:76:04:30:c6:de:
5a:ff:16:a0:19:ad:94:db:9c:ae:c4:ba:06:9c:a2:
80:e6:fe:97:fa:cb:25:8f:68:9a:fa:c9:22:11:35:
05:89:27:6c:68:48:46:51:76:06:12:96:ad:dc:7a:
61:3f:7b:18:9f:58:aa:35:29:02:8c:77:40:35:16:
98:68:54:5f:62:3a:a8:53:78:db:36:3f:bc:d9:da:
8c:07:31:40:80:f0:38:75:6a:2e:60:00:09:75:df:
82:1c:96:68:63:30:be:98:8d:33:d5:c7:3b:1b:46:
dd:ed:4f:5c:93:7f:76:a5:a0:c8:12:92:fb:cc:8a:
52:7f:9e:f5:7d:dc:fe:01:6a:3c:26:6e:9b:cc:2f:
5f:2d:4c:24:41:2d:91:78:2b:28:16:17:a9:3a:4b:
54:31:5e:7e:16:8b:96:0b:6d:61:f6:20:c6:d1:6c:
70:56:b9:8c:0e:9d:a9:20:6b:ad:d3:64:55:9f:c8:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:67:7C:F1:7D:73:EC:4D:4E:F2:64:BE:CD:F8:02:0B:83:BE:11
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ggVnfPF9c-xNTvJkvs34AguDvhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/24
185.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:52:e0:1f:3e:c2:ae:a6:0a:df:3b:d4:32:7a:fd:1f:4d:e5:
44:c9:7f:92:b1:3a:11:4b:df:f5:e3:40:90:96:ef:04:f0:02:
01:fc:1a:19:f8:6b:60:8a:db:c4:e4:26:18:55:b5:7d:b5:5e:
26:94:be:21:ff:e7:4f:76:ee:7f:0f:c6:7f:5d:00:19:65:33:
7f:e1:a4:df:ee:29:3e:b6:1e:3e:38:e7:a0:04:02:11:f2:45:
58:64:a8:58:94:db:d9:31:e7:b1:54:b0:24:9c:c1:92:33:3b:
55:93:d0:0f:b6:7c:ac:ed:d8:49:36:74:6f:bc:a5:1f:b5:a7:
e0:b5:e6:43:b8:3c:a7:ee:1f:d9:55:aa:19:a9:f3:a4:de:0e:
64:c3:cf:b3:6e:c4:a3:ab:55:99:eb:cc:cf:22:7e:e3:ed:de:
9b:ec:86:ce:b6:81:6d:9b:af:cf:70:5b:76:cd:35:d1:9a:d4:
a6:52:18:68:f0:cf:5d:25:70:2f:0f:27:dd:fe:0f:48:30:aa:
07:98:17:46:c9:1f:16:cc:8a:3d:f0:0e:a0:ea:9e:ec:9c:8c:
87:d7:28:4d:00:7a:10:f2:7f:10:b2:e1:7a:c5:88:74:b4:1a:
26:3d:2f:7f:39:25:c2:f7:d5:19:80:f9:b6:d2:6b:1e:3b:0d:
fb:32:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 10:15:00 2023 by rpki-client on console-fra.rpki-client.org