Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/xxG-XSp9sYqFda8pQRMt41wiEaA.roa
File: xxG-XSp9sYqFda8pQRMt41wiEaA.roa (raw, json)
Hash identifier: mGcGujKm/TJsTKiRd0/WNUwGAK9rMN6x7XUMCqXC1JM=
Subject key identifier: C7:11:BE:5D:2A:7D:B1:8A:85:75:AF:29:41:13:2D:E3:5C:22:11:A0
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0189E84E96D6C6AA4F0FEA808B1C02866950
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/xxG-XSp9sYqFda8pQRMt41wiEaA.roa
Signing time: Sat 12 Aug 2023 05:53:31 +0000
ROA not before: Sat 12 Aug 2023 05:53:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.43.166.0/24 maxlen: 24
185.255.4.0/24 maxlen: 24
31.43.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 04:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:4e:96:d6:c6:aa:4f:0f:ea:80:8b:1c:02:86:69:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 12 05:53:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c711be5d2a7db18a8575af2941132de35c2211a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:10:74:67:60:ff:f7:bd:a7:37:d3:db:83:13:
68:92:ab:be:b7:a6:74:9a:4c:29:e4:cf:52:60:79:
e7:7b:4c:e8:4c:0b:88:cf:b3:8f:75:88:4f:90:5c:
25:98:18:08:c4:2c:1f:50:b9:34:f4:36:11:f3:64:
44:74:dd:cb:be:fc:bc:f5:7d:c1:4a:3a:ba:97:4c:
be:b4:e8:c4:50:90:e6:db:9e:f8:16:19:82:5d:bd:
3d:4d:04:68:87:03:12:0c:2c:04:1f:33:42:33:e4:
ad:0b:d5:35:3b:b0:a6:4f:d4:3a:bd:7c:9f:f0:f4:
0a:50:e0:77:6c:30:77:6b:a6:23:62:b8:3a:8c:54:
55:a6:fd:63:21:5a:73:88:a8:4f:d9:32:92:16:63:
8c:a7:17:10:25:be:e5:01:18:de:d1:52:16:ba:96:
ff:09:c0:28:56:b8:86:b6:f4:c7:12:0a:4a:a2:fe:
1a:b2:c0:e9:8b:8d:6d:27:23:76:8c:71:39:9c:08:
7a:e6:f8:1b:ae:c5:5e:79:c9:a0:a9:d4:4d:1d:6c:
4b:64:e3:83:51:56:16:26:12:b6:99:af:d3:43:aa:
fc:67:bf:b5:d1:ff:81:c4:b2:5e:66:34:0a:88:0e:
80:e5:c5:35:ea:1e:0e:de:4a:0a:30:e1:c6:70:40:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:BE:5D:2A:7D:B1:8A:85:75:AF:29:41:13:2D:E3:5C:22:11:A0
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/xxG-XSp9sYqFda8pQRMt41wiEaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.165.0-31.43.166.255
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:51:5b:05:83:07:e3:96:41:4e:0e:1e:6b:9d:33:06:dd:a7:
67:54:98:bc:99:ed:fc:d1:a3:06:dc:56:97:a6:45:01:c3:c8:
1d:65:ce:d1:a3:c5:1d:a6:fd:12:06:2c:a8:a0:f8:16:1d:56:
37:9d:c7:0f:e5:9e:3a:c7:62:39:87:74:98:aa:0d:12:b5:59:
c1:82:16:d2:d7:92:e1:ac:8c:ba:6a:30:bf:3a:7e:ef:41:a0:
84:4d:6b:cb:7f:3c:8f:51:bd:04:ef:1d:60:9c:25:fd:bd:19:
b1:7a:67:32:f6:cb:1f:d3:97:98:71:d7:9e:50:62:38:a2:7b:
b8:89:7c:f5:31:b6:4f:e3:65:18:87:b7:fc:c3:e9:b0:38:fb:
92:87:c5:72:09:49:fd:b2:e0:db:1b:8c:08:43:69:91:8e:45:
21:e3:4f:a0:11:16:43:65:88:f1:d1:6a:10:8f:83:71:4a:3a:
f7:24:a4:1e:a2:4b:48:ac:04:8f:51:ff:dd:86:c1:a8:d6:74:
1e:9d:ce:23:77:d1:34:2c:e6:3b:bb:71:83:30:17:69:b2:1b:
e3:d8:37:11:6c:14:a2:7e:1e:3d:17:9a:47:d9:10:99:bd:94:
b3:d9:a4:8d:c2:94:e1:28:22:c8:20:81:a0:5d:d5:8c:4c:bf:
f8:55:14:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org