Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/mRsNVXZ0SeYUcmnz5TWZm1zaxZ0.roa
File: mRsNVXZ0SeYUcmnz5TWZm1zaxZ0.roa (raw, json)
Hash identifier: hnl2hQ2s6/jClTkHO2esOljz3LE6lJB51pjwhsCeJz0=
Subject key identifier: 99:1B:0D:55:76:74:49:E6:14:72:69:F3:E5:35:99:9B:5C:DA:C5:9D
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018A9904BBDCFD7E207681B82501A0B9774C
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/mRsNVXZ0SeYUcmnz5TWZm1zaxZ0.roa
Signing time: Fri 15 Sep 2023 13:25:38 +0000
ROA not before: Fri 15 Sep 2023 13:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.255.4.0/24 maxlen: 24
31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:04:bb:dc:fd:7e:20:76:81:b8:25:01:a0:b9:77:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Sep 15 13:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=991b0d55767449e6147269f3e535999b5cdac59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:fa:70:ca:4e:78:df:12:f8:0e:91:11:b3:
1c:a3:78:4f:0f:3d:d8:57:9e:14:17:3b:41:d3:90:
62:af:94:c3:1f:39:d3:7b:84:f0:d6:5c:7d:17:b3:
cb:2c:66:53:e7:37:99:87:d3:c5:54:c3:ea:83:9e:
53:58:d6:cf:b9:57:c0:cb:ee:74:ff:1f:1a:ee:77:
22:82:4d:f4:74:f9:d5:c7:92:85:c9:32:22:a3:e7:
ca:a4:de:29:8a:3d:36:21:84:8f:54:66:ff:a8:f7:
55:2f:7a:78:72:63:b5:77:36:3e:e6:5d:a1:39:4c:
45:29:86:2a:fb:5c:f7:97:b9:93:d2:f7:d5:3c:d1:
3b:07:62:7a:91:31:d1:74:47:c0:2f:c2:95:43:14:
b2:80:01:c3:90:9b:c4:63:7f:8c:c1:39:e1:51:92:
db:e2:e6:99:27:f2:de:3b:1d:33:70:ff:32:e5:dd:
32:74:91:25:2c:62:15:1c:59:f9:56:bd:6d:8a:89:
13:f3:85:32:45:fe:85:4b:7e:84:e8:88:2d:f4:19:
60:93:9a:8c:67:80:fd:ac:8c:f2:c1:fa:b1:1a:b5:
e0:e0:b1:e3:27:63:a5:60:76:93:f0:73:49:1a:e5:
11:24:e0:c1:30:f7:91:ef:17:8c:42:5e:8a:12:03:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:0D:55:76:74:49:E6:14:72:69:F3:E5:35:99:9B:5C:DA:C5:9D
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/mRsNVXZ0SeYUcmnz5TWZm1zaxZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0/24
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2e:45:72:81:2d:c3:dd:ab:07:4b:28:47:3a:6b:b9:e6:d7:
d1:6a:63:e1:5e:ca:ee:7a:b9:4f:f3:11:4a:b6:7a:5b:08:42:
d7:a7:c0:03:3b:2c:ca:1f:0c:1b:eb:e4:b7:46:e6:44:02:7c:
0c:56:b2:81:50:34:40:6a:bb:7b:61:cf:e4:86:86:c3:2a:3c:
6c:32:05:a2:1f:c1:6d:2c:7c:9b:7a:85:ad:e7:f5:0c:8b:62:
1d:f0:1c:b8:b4:b0:c1:a1:8d:62:37:fb:6a:7b:a2:84:9b:63:
69:3d:76:60:75:46:ec:31:0a:60:c8:09:74:f0:b8:90:8c:c2:
06:4b:da:8f:c7:d0:3f:3a:7d:6c:51:e7:15:98:94:af:29:00:
a0:27:53:70:46:b6:d9:57:8c:1e:8f:6d:7f:6c:c7:74:fc:f9:
ab:81:cd:8b:08:74:5c:14:28:fd:47:be:b3:71:45:51:1e:d6:
65:9c:05:64:f3:a7:65:9e:41:d0:c6:db:34:57:74:b4:fc:15:
1b:42:96:b8:e1:c2:21:06:9d:99:b2:4b:d3:e2:3f:e7:21:71:
52:5f:2e:df:1d:d6:fe:62:f2:37:a7:a2:c5:44:5e:87:ec:e8:
c0:bc:17:e8:12:ff:e3:e1:69:5f:42:33:c2:03:6e:f6:41:33:
3e:88:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 04:49:54 2023 by rpki-client on console-fra.rpki-client.org