Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/PSZLkHYLDB7_vZwx_868K1nUhsw.roa
File: PSZLkHYLDB7_vZwx_868K1nUhsw.roa (raw, json)
Hash identifier: HhOP33iPGen9eYnIKOwygKH2Jg0emMefCVOmkGxiI0M=
Subject key identifier: 3D:26:4B:90:76:0B:0C:1E:FF:BD:9C:31:FF:CE:BC:2B:59:D4:86:CC
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0191C1F150494BE476ECA4736F76A6FD5177
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/PSZLkHYLDB7_vZwx_868K1nUhsw.roa
Signing time: Thu 05 Sep 2024 11:28:22 +0000
ROA not before: Thu 05 Sep 2024 11:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197868
IP address blocks: 31.44.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:f1:50:49:4b:e4:76:ec:a4:73:6f:76:a6:fd:51:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Sep 5 11:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d264b90760b0c1effbd9c31ffcebc2b59d486cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:6d:6a:67:f5:4f:c5:83:1b:f3:45:00:b2:
12:c4:52:f5:9b:7c:d3:9e:f5:7a:79:0b:75:50:50:
55:89:46:57:dd:ac:f5:e6:c3:e2:19:e0:8e:a9:7f:
ef:a3:5d:3a:1b:26:b8:87:3b:f4:53:3f:be:90:e9:
95:0e:29:03:9a:2c:8e:16:50:f9:a3:b2:c6:88:42:
f5:2a:1c:5e:2d:2a:9c:29:29:f6:01:35:be:7f:65:
39:60:fc:59:a0:f0:a5:9e:8a:e9:b4:40:95:c2:da:
d3:cc:4f:bd:37:8d:7e:c6:05:47:66:40:a4:a4:d2:
86:59:fc:77:ad:42:c0:af:90:42:cd:0a:9a:db:a3:
ae:aa:c8:f7:b4:64:5c:d7:1e:9a:a4:be:3d:d1:2e:
e8:ae:05:32:ba:b7:a3:f1:aa:ea:f6:2b:97:98:64:
95:7e:fc:8c:3e:16:db:d4:b8:e0:a4:49:4a:90:db:
d0:dc:ba:82:3f:5b:f2:3d:04:d8:a0:b7:f0:30:fd:
5a:6f:41:c4:b7:b8:2a:d3:f9:09:9e:c6:bd:84:be:
28:3e:df:3b:7c:a6:f5:0b:e3:03:2e:00:d0:d2:a0:
bf:e4:3e:df:39:96:a3:e4:f6:4d:21:a9:73:13:51:
1f:be:ea:b2:c7:34:a7:30:8e:d0:56:e1:85:62:92:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:26:4B:90:76:0B:0C:1E:FF:BD:9C:31:FF:CE:BC:2B:59:D4:86:CC
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/PSZLkHYLDB7_vZwx_868K1nUhsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f8:06:80:41:5e:ad:6f:26:d1:4d:64:b8:be:db:39:c9:ba:
84:29:21:ab:1d:fb:15:9a:38:80:64:dc:1f:46:ce:49:5b:de:
cc:e4:93:b8:89:c7:e7:0e:fa:0e:3a:8b:25:62:29:68:d6:6c:
1a:64:c9:75:fd:6a:18:24:d0:b9:7a:13:3a:4c:0f:ae:10:dd:
7d:ae:e8:b9:e1:5e:f5:5c:8a:0b:a8:8e:11:5a:49:6f:f8:e3:
b6:44:8f:78:b8:cf:19:79:8e:2c:18:5e:22:ab:9d:39:8d:9f:
fa:45:4f:b7:4b:52:f6:48:64:22:e7:6e:2e:9a:4d:8f:b8:05:
5b:14:dc:d8:f6:29:e1:66:97:b1:f5:f8:2f:a7:64:52:4d:63:
4a:f1:b4:5f:4b:8e:33:05:f6:e7:10:8e:cb:f9:3f:18:e8:43:
ff:4e:83:00:f5:d3:3e:86:52:1b:ec:82:c1:af:96:0c:29:eb:
00:f7:be:b6:fc:cb:db:f5:9e:ab:8c:f4:b0:38:19:69:97:87:
89:2d:4c:d1:02:b8:82:4f:99:ec:a3:14:dc:ea:92:9e:9e:6a:
e6:8e:9c:f9:b1:ea:2b:1a:1c:fb:54:14:41:92:56:02:76:c7:
5c:50:56:9a:46:35:1f:d1:f3:fa:07:ea:31:ca:6a:20:63:f0:
76:b0:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:15 2025 by rpki-client