Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/puqrnnjWz5saAz83fXffXFqyWd0.roa
File: puqrnnjWz5saAz83fXffXFqyWd0.roa (raw, json)
Hash identifier: kTaSHME0aEJMps5oRdiuHZ142v7AgpE6OfRsOFUmuHY=
Subject key identifier: A6:EA:AB:9E:78:D6:CF:9B:1A:03:3F:37:7D:77:DF:5C:5A:B2:59:DD
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 018576E86C8A2C824B3B185389E993AA822F
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/puqrnnjWz5saAz83fXffXFqyWd0.roa
Signing time: Tue 03 Jan 2023 09:13:41 +0000
ROA not before: Tue 03 Jan 2023 09:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8368
IP address blocks: 193.243.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 10:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:e8:6c:8a:2c:82:4b:3b:18:53:89:e9:93:aa:82:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jan 3 09:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6eaab9e78d6cf9b1a033f377d77df5c5ab259dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:04:f2:1c:6c:a5:9e:a2:18:64:6e:25:b0:e9:
91:8b:55:38:8e:7b:8d:58:88:a2:2a:b1:f7:52:62:
26:67:8a:c0:9b:19:f6:e3:84:91:eb:31:c8:ad:f8:
8c:a3:49:15:4d:cf:66:23:3d:f0:79:d8:ef:a4:94:
0b:c8:36:d2:0c:dc:88:34:0c:40:0b:6c:35:3d:ad:
28:44:bf:7f:ae:82:41:b0:84:08:32:cf:2c:38:e3:
62:ce:c3:eb:98:89:5f:77:8b:c8:70:98:d1:f1:57:
6b:73:89:8c:1d:df:cf:ec:8f:e2:ed:78:f3:37:38:
51:12:cd:db:1a:25:13:fd:75:ba:a7:ff:ab:ed:41:
a2:a9:f8:15:d4:26:ed:c2:ea:38:ed:b8:06:c5:f4:
94:aa:bd:62:00:3a:de:20:ca:dc:89:b2:67:da:e4:
f8:7d:82:db:1a:d9:fa:3e:69:4c:a0:18:5e:c6:2c:
e1:19:e2:2e:13:e6:1b:43:d9:45:80:aa:1a:f3:59:
16:f2:6e:88:e9:40:fa:01:5e:f2:78:e7:be:34:ef:
df:b1:4f:ae:ce:6d:bd:5c:47:1a:1c:e9:b7:ad:b8:
2a:28:07:dc:95:d9:f6:cd:fc:ae:8d:ff:f9:6e:77:
ce:f1:9c:6d:ce:b6:3c:6c:bd:d0:ba:6f:fa:84:56:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:AB:9E:78:D6:CF:9B:1A:03:3F:37:7D:77:DF:5C:5A:B2:59:DD
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/puqrnnjWz5saAz83fXffXFqyWd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a8:aa:b0:eb:87:39:a1:1d:48:48:0c:da:34:54:f6:e6:98:
e4:84:fc:45:65:02:f3:27:97:09:b5:60:1b:c7:f4:36:6b:d7:
7d:b4:8a:9f:ad:8d:fc:07:d8:38:20:7d:90:de:89:7c:cf:ad:
e9:7e:6b:92:b1:0b:b9:3b:33:75:d4:36:e3:f3:1a:69:cb:17:
16:5b:c8:4c:1b:28:19:c6:30:fe:9f:07:0d:d7:b6:59:e6:bd:
5a:5c:40:77:f6:f9:93:da:0d:10:ed:1c:e1:6f:30:a1:00:8a:
08:90:4e:f3:d7:44:4a:56:c3:c1:fd:86:d5:a4:fe:ca:ec:5f:
34:aa:5e:37:4a:e3:9a:8d:7e:00:40:ed:c8:cf:a4:6e:ec:6d:
a5:43:bf:5e:27:28:bd:12:7e:01:46:8c:a8:ed:7c:f3:3f:80:
5a:b6:8f:9f:19:ec:f5:16:e3:9c:67:a6:ee:f1:51:bc:4b:e8:
3e:e9:75:8c:f6:64:79:09:a4:c5:89:86:77:94:9b:f0:04:aa:
37:b6:a9:d3:ea:e8:8e:cd:53:df:00:03:df:68:18:fb:10:78:
3f:44:61:88:fb:ef:bf:b1:74:e5:e7:7d:e7:27:81:78:55:71:
3c:2b:46:61:70:3c:6a:d9:5a:1a:cb:a7:d4:d3:46:d1:dc:21:
2c:12:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org