Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/DZAzMLH_eBbbMvTCBmyAr-ffLwg.roa
File: DZAzMLH_eBbbMvTCBmyAr-ffLwg.roa (raw, json)
Hash identifier: LZGia3jqkfUAya8cGtJyWgh9ckRGWjmWNCqXSfIOh0A=
Subject key identifier: 0D:90:33:30:B1:FF:78:16:DB:32:F4:C2:06:6C:80:AF:E7:DF:2F:08
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01856F42BFCB1138B7B27A2D64E61EBFFC0F
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/DZAzMLH_eBbbMvTCBmyAr-ffLwg.roa
Signing time: Sun 01 Jan 2023 21:35:23 +0000
ROA not before: Sun 01 Jan 2023 21:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 31.7.64.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:bf:cb:11:38:b7:b2:7a:2d:64:e6:1e:bf:fc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 21:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d903330b1ff7816db32f4c2066c80afe7df2f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1d:63:f3:5a:76:46:0e:46:74:56:22:02:a4:
3d:22:70:ac:da:22:fe:cc:34:4e:ca:90:fb:62:73:
c3:99:b1:03:8b:15:23:ab:6a:ef:22:6c:ce:95:6d:
a2:dd:4f:58:b2:65:e6:4a:bd:92:53:ae:3d:2b:df:
e5:8a:61:8d:90:65:6e:b2:f5:f5:ca:01:d0:fc:6a:
31:ea:a8:ed:77:59:99:75:26:51:99:4d:e8:81:ae:
90:d5:ad:4c:2b:84:23:3d:b9:a2:97:8f:77:ea:ba:
70:64:cd:7e:d3:5f:9a:0e:ad:1d:2c:d5:c2:de:a3:
7d:cd:81:94:83:d2:d3:c2:59:6d:2b:e1:c7:9e:74:
d2:f7:47:fc:33:e6:44:f1:c9:9d:d9:c7:62:75:d4:
58:cc:e0:84:47:37:85:b9:b1:15:fb:0c:1a:ac:29:
fd:ca:21:fd:e8:02:57:8e:58:b8:be:8d:d8:75:42:
4d:16:90:38:c6:eb:50:11:f3:37:ee:7b:f2:7d:17:
54:3e:17:62:ba:bc:e4:08:d3:a6:2f:dd:43:c4:eb:
cf:8a:7d:9c:b7:69:5e:af:cc:a5:f8:18:e0:cc:82:
1f:9f:6c:47:3c:58:3d:ba:cb:4e:1a:ab:da:52:42:
8e:35:91:a8:9e:24:f5:26:d9:f0:f1:1c:06:74:63:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:33:30:B1:FF:78:16:DB:32:F4:C2:06:6C:80:AF:E7:DF:2F:08
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/DZAzMLH_eBbbMvTCBmyAr-ffLwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d4:3e:4e:c2:b7:f3:a5:0b:44:b3:0a:76:bd:42:a0:bf:3f:
54:4a:a9:97:e7:4d:1c:bb:30:d3:26:84:6f:fe:ed:c5:25:1c:
d8:89:e4:69:63:ab:42:56:00:c2:a7:d7:73:c9:3a:43:22:36:
2a:91:27:e5:ea:7f:ac:87:79:83:04:63:7b:bd:12:c2:f8:63:
77:cf:86:86:42:84:9c:cd:30:83:d9:03:97:9a:17:0b:f4:92:
07:f1:c4:bd:8f:bd:49:28:d9:e6:c8:fa:90:c2:b6:31:88:c5:
6b:61:78:87:60:16:d1:98:df:bd:17:bd:65:b8:3c:0b:8b:47:
43:26:0b:ab:5f:0c:45:55:ce:d1:e3:ad:ec:f5:e4:7b:a0:57:
d2:af:47:b3:35:98:eb:eb:33:19:01:ac:dd:a3:cb:60:17:cc:
5e:1f:8c:80:fd:1a:6f:03:97:7a:48:bc:0d:ed:57:d0:72:91:
00:09:5a:10:62:28:79:49:8f:7f:45:57:7f:f9:da:67:ba:95:
fa:a0:aa:da:ed:7a:6d:8c:93:7b:c5:e2:43:84:e3:ba:23:2f:
8f:2a:72:21:73:db:81:32:54:a0:21:ab:b9:19:05:2b:bc:0f:
e4:c5:66:d5:a4:9c:5c:ad:13:c7:da:29:1b:af:32:fd:ec:14:
71:69:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:07 2024 by rpki-client on console-fra.rpki-client.org