Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/qTLO1LRzyypJAPhEG9XgC4Yh_fU.roa
File: qTLO1LRzyypJAPhEG9XgC4Yh_fU.roa (raw, json)
Hash identifier: fC4+m2/sQUJ0L/ZC7JPxq+IG/9SKyw4J+Qog5gtPRSE=
Subject key identifier: A9:32:CE:D4:B4:73:CB:2A:49:00:F8:44:1B:D5:E0:0B:86:21:FD:F5
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01857139C4F6D1159366A0D3B6E4024A4E19
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/qTLO1LRzyypJAPhEG9XgC4Yh_fU.roa
Signing time: Mon 02 Jan 2023 06:44:49 +0000
ROA not before: Mon 02 Jan 2023 06:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.43.164.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jan 2023 07:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c4:f6:d1:15:93:66:a0:d3:b6:e4:02:4a:4e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 2 06:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a932ced4b473cb2a4900f8441bd5e00b8621fdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:09:f0:80:1b:9c:a2:ec:71:8a:35:73:92:
66:2d:7e:92:50:55:3a:1c:00:9a:5b:1e:bc:3d:2d:
6a:60:44:4b:1e:c8:8d:24:e0:e2:a4:5e:af:e7:43:
76:b9:e6:34:51:ed:26:42:68:d4:f9:4e:ec:58:7b:
07:38:d2:96:66:dd:a5:04:67:9f:72:fb:9e:ad:44:
7f:32:83:ee:e6:db:a0:f6:01:35:a1:b6:3a:53:2e:
f5:d7:a0:1e:21:c2:9e:07:05:4b:af:db:ba:75:19:
05:f2:a2:c0:9d:a5:b1:29:3a:57:f3:40:d2:7e:90:
c0:84:56:a0:c8:12:b2:7c:ec:59:4e:1c:7a:ed:f3:
fc:76:2b:15:08:31:89:52:0d:69:3b:2a:da:7b:e5:
0d:5d:82:4a:16:27:6f:82:b2:9d:3e:70:49:32:da:
15:1e:3b:54:cf:b0:31:e0:da:33:d8:39:1f:14:a0:
4f:19:dc:a0:e9:c0:0a:e2:cf:6a:e4:c1:7d:6d:6e:
aa:5e:e4:a7:2a:ea:4a:47:01:53:7d:1b:06:9a:9f:
0f:c2:57:66:20:33:ef:07:77:e2:60:86:27:10:3c:
6c:0c:36:16:e2:aa:b0:19:4c:2b:89:49:bb:8e:04:
36:44:21:32:c7:bf:39:5f:ca:f9:dd:1f:1c:71:77:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:CE:D4:B4:73:CB:2A:49:00:F8:44:1B:D5:E0:0B:86:21:FD:F5
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/qTLO1LRzyypJAPhEG9XgC4Yh_fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/23
Signature Algorithm: sha256WithRSAEncryption
52:23:64:04:96:02:0b:72:43:98:36:22:cf:eb:b4:dd:1e:d1:
ec:a8:f8:e4:7a:b5:0c:1d:5d:62:89:c7:de:2f:c0:0e:89:89:
da:11:b4:33:ba:96:2f:b1:fa:2e:e9:d7:f0:1a:14:60:26:d7:
b2:6d:ae:61:3c:43:10:f6:bb:65:47:41:c1:52:85:d2:b7:66:
92:f9:de:58:f4:00:a6:18:04:66:be:01:e2:b1:1a:dc:bd:e3:
8f:47:e8:a5:3e:e4:da:6e:94:11:8a:a4:e1:3b:12:0b:ab:f8:
51:52:f4:73:c6:b3:c6:2f:9f:71:ad:03:c9:d7:e1:d9:af:b4:
89:d8:0e:8d:1b:c8:6b:2f:3c:5b:1c:6f:42:b1:d8:5e:31:0e:
4f:72:f6:a9:a9:c6:b4:9f:fa:77:5b:c6:ec:c8:05:97:c1:6b:
6c:d3:5e:83:d2:3f:3c:bc:70:6f:05:e7:14:a3:a9:9c:9e:9f:
1f:b1:57:39:f9:ef:07:3d:b3:de:fc:26:34:48:d4:31:11:48:
21:6f:38:69:84:3e:4e:12:f0:51:15:a9:18:a5:af:26:7c:c2:
27:9f:e6:fb:7f:fd:4c:b5:61:f4:42:71:56:d7:dc:56:65:60:
f9:e7:4f:da:06:f7:f7:01:cc:db:1a:79:12:7e:f1:6d:72:1a:
96:b1:0b:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOcT20RWTZqDTtuQCSk4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjMwMTAyMDY0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTMyY2VkNGI0NzNjYjJhNDkwMGY4NDQxYmQ1ZTAwYjg2MjFmZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFgJ8IAbnKLscYo1c5JmLX6SUFU6
HACaWx68PS1qYERLHsiNJODipF6v50N2ueY0Ue0mQmjU+U7sWHsHONKWZt2lBGef
cvuerUR/MoPu5tug9gE1obY6Uy7116AeIcKeBwVLr9u6dRkF8qLAnaWxKTpX80DS
fpDAhFagyBKyfOxZThx67fP8disVCDGJUg1pOyrae+UNXYJKFidvgrKdPnBJMtoV
HjtUz7Ax4Noz2DkfFKBPGdyg6cAK4s9q5MF9bW6qXuSnKupKRwFTfRsGmp8Pwldm
IDPvB3fiYIYnEDxsDDYW4qqwGUwriUm7jgQ2RCEyx785X8r53R8ccXfn2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKkyztS0c8sqSQD4RBvV4AuGIf31MB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvcVRMTzFMUnp5eXBKQVBoRUc5WGdDNFloX2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyukMA0G
CSqGSIb3DQEBCwUAA4IBAQBSI2QElgILckOYNiLP67TdHtHsqPjkerUMHV1iicfe
L8AOiYnaEbQzupYvsfou6dfwGhRgJteyba5hPEMQ9rtlR0HBUoXSt2aS+d5Y9ACm
GARmvgHisRrcveOPR+ilPuTabpQRiqThOxILq/hRUvRzxrPGL59xrQPJ1+HZr7SJ
2A6NG8hrLzxbHG9CsdheMQ5Pcvapqca0n/p3W8bsyAWXwWts016D0j88vHBvBecU
o6mcnp8fsVc5+e8HPbPe/CY0SNQxEUghbzhphD5OEvBRFakYpa8mfMInn+b7f/1M
tWH0QnFW19xWZWD550/aBvf3AczbGnkSfvFtchqWsQt6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org