Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PZPdZ01UYExZWSXt7DxabC-hSSw.roa
File: PZPdZ01UYExZWSXt7DxabC-hSSw.roa (raw, json)
Hash identifier: ngYpp6drHWzFmpdT+6m0ATBB8+Jw1Ev9laN86dfY5vg=
Subject key identifier: 3D:93:DD:67:4D:54:60:4C:59:59:25:ED:EC:3C:5A:6C:2F:A1:49:2C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79541721E533A0856A2026A7D771C92
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PZPdZ01UYExZWSXt7DxabC-hSSw.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 31.14.34.0/24 maxlen: 24
31.14.49.0/24 maxlen: 24
89.45.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 Feb 2024 13:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:41:72:1e:53:3a:08:56:a2:02:6a:7d:77:1c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d93dd674d54604c595925edec3c5a6c2fa1492c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:02:f9:f6:ba:c1:9a:ce:a3:f4:36:7f:c2:
83:50:d9:7f:eb:49:4e:01:37:ff:ac:70:fa:0d:49:
ac:3d:24:e7:d1:40:d8:be:31:a6:0c:c5:d2:06:81:
aa:dc:df:62:6c:ea:5c:0f:dd:b7:e7:4f:76:8d:1a:
91:e4:06:6f:58:24:33:fc:d9:39:4d:6a:09:91:36:
0b:ae:3a:42:b1:2f:0d:61:b6:3d:39:0f:b8:7a:14:
9b:46:95:d0:43:aa:32:c7:6a:47:c5:2a:9b:c4:ec:
cb:59:eb:cd:6f:c2:c6:fe:d9:45:36:f1:83:35:f3:
3a:ee:0a:8b:5d:9b:00:e1:94:32:eb:3b:bf:a5:32:
a9:eb:7d:89:7d:65:45:ac:f7:8e:ea:0b:2c:9b:89:
2a:34:42:ef:e2:89:77:87:81:f4:09:48:b3:b7:25:
37:39:6c:49:fc:56:95:44:d4:39:3c:f2:0a:98:b1:
85:6b:9e:5a:bd:8e:91:e6:ec:13:85:36:3a:ca:50:
27:7c:a4:a9:a0:4b:d6:78:7a:09:23:76:ca:f6:14:
fd:03:6d:e8:74:fe:1a:fb:f2:80:ca:f3:9a:35:b0:
29:9f:17:e5:ef:31:ab:d7:05:c1:78:6b:28:4b:93:
b1:6e:7e:65:8c:9f:0c:ff:f9:b4:72:84:be:7c:cf:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:93:DD:67:4D:54:60:4C:59:59:25:ED:EC:3C:5A:6C:2F:A1:49:2C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PZPdZ01UYExZWSXt7DxabC-hSSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.34.0/24
31.14.49.0/24
89.45.44.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:62:f0:d3:e2:a9:8f:e8:cc:a7:84:e1:57:b4:e1:90:4d:d8:
0c:8b:bc:2c:4b:1a:ac:8a:9d:88:3b:ff:e0:fa:da:b7:2d:6e:
77:7d:b3:59:22:aa:5a:57:d6:8f:69:20:71:44:95:bb:18:71:
58:bf:39:b1:5c:c5:82:08:f3:12:71:ad:06:8a:93:86:8e:18:
16:71:b4:3d:38:79:ca:2a:45:c1:72:71:e1:1f:16:d6:85:05:
ae:ee:75:e8:f0:91:40:48:22:a3:bf:e2:10:93:ed:51:fe:2f:
2e:01:be:e5:d1:e9:1b:ed:a3:ad:50:9b:6c:f9:ce:1a:02:16:
da:54:85:03:15:96:d1:cb:29:d8:e7:a1:7e:29:79:73:24:30:
6a:b0:a7:95:8a:ab:53:b8:79:c7:b1:4e:ca:7d:b5:51:ec:23:
50:06:5c:2c:2b:ba:18:7d:48:b1:ac:0d:33:59:41:7d:ca:7a:
c5:6e:64:ac:a1:f6:45:78:da:1e:26:5f:af:48:54:f0:c4:a2:
81:87:5f:48:b7:fc:7c:cb:8b:d7:4e:36:1c:4b:ee:8b:ea:f9:
1a:8b:09:13:0e:b7:90:97:0a:5e:ed:61:58:a1:7a:6f:2e:8e:
1f:fa:f0:3f:34:12:5e:81:ef:a3:a1:af:e3:c8:f1:d0:6f:74:
91:fc:07:98
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzHlUFyHlM6CFaiAmp9dxySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTAyMDAzMTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDkzZGQ2NzRkNTQ2MDRjNTk1OTI1ZWRlYzNjNWE2YzJmYTE0OTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUQC+fa6wZrOo/Q2f8KDUNl/60lO
ATf/rHD6DUmsPSTn0UDYvjGmDMXSBoGq3N9ibOpcD9235092jRqR5AZvWCQz/Nk5
TWoJkTYLrjpCsS8NYbY9OQ+4ehSbRpXQQ6oyx2pHxSqbxOzLWevNb8LG/tlFNvGD
NfM67gqLXZsA4ZQy6zu/pTKp632JfWVFrPeO6gssm4kqNELv4ol3h4H0CUiztyU3
OWxJ/FaVRNQ5PPIKmLGFa55avY6R5uwThTY6ylAnfKSpoEvWeHoJI3bK9hT9A23o
dP4a+/KAyvOaNbApnxfl7zGr1wXBeGsoS5Oxbn5ljJ8M//m0coS+fM9F4QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFD2T3WdNVGBMWVkl7ew8WmwvoUksMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1BaUGRaMDFVWUV4WldTWHQ3RHhhYkMtaFNTdy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAAfDiID
BAAfDjEDBAFZLSwwDQYJKoZIhvcNAQELBQADggEBAK5i8NPiqY/ozKeE4Ve04ZBN
2AyLvCxLGqyKnYg7/+D62rctbnd9s1kiqlpX1o9pIHFElbsYcVi/ObFcxYII8xJx
rQaKk4aOGBZxtD04ecoqRcFyceEfFtaFBa7udejwkUBIIqO/4hCT7VH+Ly4BvuXR
6Rvto61Qm2z5zhoCFtpUhQMVltHLKdjnoX4peXMkMGqwp5WKq1O4ecexTsp9tVHs
I1AGXCwruhh9SLGsDTNZQX3KesVuZKyh9kV42h4mX69IVPDEooGHX0i3/HzLi9dO
NhxL7ovq+RqLCRMOt5CXCl7tYVihem8ujh/68D80El6B76Ohr+PI8dBvdJH8B5g=
-----END CERTIFICATE-----
Generated at Mon Feb 5 17:24:25 2024 by rpki-client on console-fra.rpki-client.org