Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PsKeJdjGa6hx0PmJC0xkxCd30HE.roa
File: PsKeJdjGa6hx0PmJC0xkxCd30HE.roa (raw, json)
Hash identifier: vo/rz9tTUsHdnLBLY5+riEwiCbXYkB9/Cb1nclq9IoM=
Subject key identifier: 3E:C2:9E:25:D8:C6:6B:A8:71:D0:F9:89:0B:4C:64:C4:27:77:D0:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01937E3F7D1DEF93D885BAEA827C5D5FCCD5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PsKeJdjGa6hx0PmJC0xkxCd30HE.roa
Signing time: Sat 30 Nov 2024 18:05:10 +0000
ROA not before: Sat 30 Nov 2024 18:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215355
IP address blocks: 31.56.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 08:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7e:3f:7d:1d:ef:93:d8:85:ba:ea:82:7c:5d:5f:cc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 30 18:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec29e25d8c66ba871d0f9890b4c64c42777d071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:31:06:00:85:58:ad:6a:c0:bb:b4:e4:75:
ec:06:0a:f6:04:41:cc:0a:77:76:20:3c:aa:4c:f6:
c7:63:fa:6b:3e:fe:e9:23:45:5e:b4:bd:2b:07:dc:
68:6e:17:6a:9b:93:c8:78:b1:6e:95:ff:35:2f:e4:
60:d3:9f:87:06:fc:a8:90:70:78:07:a8:cd:fa:5b:
0f:e0:ca:0e:00:18:1f:48:99:0c:3b:f2:fd:0e:c3:
69:d3:e7:a7:c6:7f:f2:cc:76:cc:c0:db:50:69:e5:
fd:0a:62:b5:97:1d:37:2e:e4:7c:11:43:98:9b:20:
ab:c2:f6:e7:50:c9:ea:4a:90:72:a0:28:80:ff:c0:
02:0b:56:aa:18:c1:d4:f3:83:e9:90:42:a1:7f:09:
6a:95:16:8d:3c:cc:c7:52:b4:6a:d9:58:ef:fc:ef:
0f:7c:58:c9:88:43:2e:a6:67:78:87:41:22:c6:94:
6a:fe:2b:f1:e2:87:71:1b:b0:4c:a8:37:38:d2:cc:
09:46:c5:f1:01:6f:a9:42:f3:1a:79:d5:3d:71:94:
2b:34:55:88:5d:9f:a7:7b:44:dd:6c:e4:24:ab:90:
36:24:84:cc:e4:55:a8:09:5b:0f:13:a7:a8:7c:5e:
95:d4:c8:e8:4d:86:9c:41:86:41:15:0a:5f:9e:c9:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:9E:25:D8:C6:6B:A8:71:D0:F9:89:0B:4C:64:C4:27:77:D0:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PsKeJdjGa6hx0PmJC0xkxCd30HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
Signature Algorithm: sha256WithRSAEncryption
88:35:5b:82:4a:54:91:de:f7:96:cf:45:e9:4d:b4:94:3b:c9:
77:dd:59:7d:0e:07:22:c2:f6:81:07:f7:0b:06:f5:3c:df:09:
54:62:9a:42:0d:19:96:1d:c5:33:40:4f:f7:5d:70:ee:ed:fb:
bb:ea:56:43:44:e6:87:d4:64:18:34:c6:9c:76:01:dc:ec:c7:
ae:25:55:ee:fe:49:83:05:6c:14:87:d2:1f:9e:c9:2e:e6:b2:
e4:b7:fb:45:81:67:53:12:64:98:ca:af:c0:63:50:3e:49:4e:
e6:a8:25:54:59:07:3a:9e:3d:34:f7:84:5f:28:95:86:c4:2c:
cc:8a:03:69:a6:67:b7:ca:52:8d:d3:db:34:a7:35:22:b9:8e:
39:11:75:58:54:ca:a2:24:d2:2a:9a:f4:cc:9b:96:8c:b4:29:
d8:85:d6:a9:40:2b:5d:d6:47:41:88:06:48:d8:8c:ec:8b:b0:
cd:9c:11:a0:cb:db:b3:c0:b4:cd:80:dd:1c:2d:3d:1e:d5:20:
f7:2f:1e:fd:15:29:cc:19:0a:39:af:67:b8:9f:51:76:cb:56:
64:60:7a:e0:c8:ed:27:8e:4a:a4:8b:c5:e6:64:35:a4:a4:dd:
83:4e:31:9e:2d:3f:66:54:7d:d5:5b:2d:b3:fd:d3:fd:21:b4:
03:e1:af:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN+P30d75PYhbrqgnxdX8zVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTMwMTgwNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWMyOWUyNWQ4YzY2YmE4NzFkMGY5ODkwYjRjNjRjNDI3NzdkMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypAxBgCFWK1qwLu05HXsBgr2BEHM
Cnd2IDyqTPbHY/prPv7pI0VetL0rB9xobhdqm5PIeLFulf81L+Rg05+HBvyokHB4
B6jN+lsP4MoOABgfSJkMO/L9DsNp0+enxn/yzHbMwNtQaeX9CmK1lx03LuR8EUOY
myCrwvbnUMnqSpByoCiA/8ACC1aqGMHU84PpkEKhfwlqlRaNPMzHUrRq2Vjv/O8P
fFjJiEMupmd4h0EixpRq/ivx4odxG7BMqDc40swJRsXxAW+pQvMaedU9cZQrNFWI
XZ+ne0TdbOQkq5A2JITM5FWoCVsPE6eofF6V1MjoTYacQYZBFQpfnslHkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7CniXYxmuocdD5iQtMZMQnd9BxMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUHNLZUpkakdhNmh4MFBtSkMweGt4Q2QzMEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzg+MA0G
CSqGSIb3DQEBCwUAA4IBAQCINVuCSlSR3veWz0XpTbSUO8l33Vl9DgciwvaBB/cL
BvU83wlUYppCDRmWHcUzQE/3XXDu7fu76lZDROaH1GQYNMacdgHc7MeuJVXu/kmD
BWwUh9Ifnsku5rLkt/tFgWdTEmSYyq/AY1A+SU7mqCVUWQc6nj0094RfKJWGxCzM
igNppme3ylKN09s0pzUiuY45EXVYVMqiJNIqmvTMm5aMtCnYhdapQCtd1kdBiAZI
2Izsi7DNnBGgy9uzwLTNgN0cLT0e1SD3Lx79FSnMGQo5r2e4n1F2y1ZkYHrgyO0n
jkqki8XmZDWkpN2DTjGeLT9mVH3VWy2z/dP9IbQD4a9p
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:51:13 2025 by rpki-client