Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/PUrS27EQLS-hvd_fqj5UjJSDuU8.roa
File: PUrS27EQLS-hvd_fqj5UjJSDuU8.roa (raw, json)
Hash identifier: Ej8OmreGP8UATUTL7GamweZ8il7pEz3hEK4btmuwJTQ=
Subject key identifier: 3D:4A:D2:DB:B1:10:2D:2F:A1:BD:DF:DF:AA:3E:54:8C:94:83:B9:4F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB837091CE99D97C4EC4B7959D1BA60
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/PUrS27EQLS-hvd_fqj5UjJSDuU8.roa
Signing time: Sun 01 Jan 2023 09:44:50 +0000
ROA not before: Sun 01 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8376
IP address blocks: 81.52.144.0/21 maxlen: 24
81.52.152.0/21 maxlen: 24
90.84.64.0/21 maxlen: 24
80.10.32.0/21 maxlen: 24
90.84.72.0/21 maxlen: 24
80.10.48.0/20 maxlen: 24
90.84.80.0/20 maxlen: 24
80.10.64.0/20 maxlen: 24
81.52.224.0/21 maxlen: 24
81.253.96.0/21 maxlen: 24
81.253.104.0/21 maxlen: 24
80.10.8.0/21 maxlen: 24
80.10.16.0/20 maxlen: 24
81.253.112.0/21 maxlen: 24
80.10.144.0/21 maxlen: 24
81.253.240.0/20 maxlen: 24
80.10.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:37:09:1c:e9:9d:97:c4:ec:4b:79:59:d1:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d4ad2dbb1102d2fa1bddfdfaa3e548c9483b94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:3c:4d:c6:d0:15:ff:32:af:3d:8e:3e:93:
6f:00:9a:15:e1:56:7c:1d:2e:98:c4:e6:cd:1a:b4:
d0:fd:73:79:aa:7a:6f:32:fe:33:a7:b6:39:d8:29:
4c:71:97:c3:74:dd:e4:0b:8b:a2:74:99:80:4b:0c:
11:dc:4d:95:bb:82:ee:14:67:d4:80:9f:d2:e8:e9:
c8:19:f9:f1:31:5c:b6:5f:64:e0:8b:57:26:0b:bc:
2a:83:84:c5:b2:65:fc:c2:6e:e6:e8:6f:f8:8a:0d:
0d:bd:83:4a:d2:b5:25:73:f7:88:3a:b6:82:51:28:
33:d5:4c:29:c6:02:33:db:9f:17:15:58:f3:20:01:
1b:0c:7f:c4:94:12:a1:8e:fa:bf:79:0c:a2:79:0e:
64:72:e1:a1:8f:2c:b6:d0:9c:09:bd:70:63:75:4d:
a2:24:28:bf:44:82:07:3c:c6:a5:64:8d:9b:9f:33:
44:b2:6d:d6:f8:7e:e9:b3:42:6e:eb:68:48:2a:8f:
ee:b9:69:47:e4:fc:5a:cf:a9:fa:9d:51:43:da:af:
ae:0b:46:34:3b:89:83:3b:00:3e:ba:b0:21:86:69:
c4:7d:70:fa:d8:5a:79:5f:4c:78:f6:bb:c8:a7:ce:
fe:10:d5:75:76:13:b6:5b:12:49:62:ce:c2:f6:76:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:D2:DB:B1:10:2D:2F:A1:BD:DF:DF:AA:3E:54:8C:94:83:B9:4F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/PUrS27EQLS-hvd_fqj5UjJSDuU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.10.8.0-80.10.39.255
80.10.48.0-80.10.79.255
80.10.144.0/21
80.10.168.0/21
81.52.144.0/20
81.52.224.0/21
81.253.96.0-81.253.119.255
81.253.240.0/20
90.84.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:3b:9e:9a:2d:4f:fb:47:72:c5:7f:4d:3d:1e:c7:a2:d7:88:
b6:03:e8:2f:4f:9e:5c:ee:69:66:ea:ac:ac:89:39:07:78:8a:
2f:5b:05:75:d6:e8:3a:8a:42:e5:f6:b6:03:7b:3f:79:1f:26:
53:54:5e:63:38:b7:52:e1:30:ce:7d:36:4b:9b:ed:a8:3e:7d:
16:83:2c:44:c6:eb:9c:c0:bf:16:fa:a6:2b:bf:7b:a5:19:ad:
64:ca:11:93:08:b3:f0:a3:06:5a:f6:d1:bf:a5:ce:b7:46:bd:
fc:76:03:1b:9f:96:38:e2:f4:0e:a9:a5:a8:d0:33:84:d9:d4:
75:a0:58:40:4a:84:6c:4f:ba:41:8e:61:72:61:e3:7a:77:09:
62:d0:a0:3a:da:9a:f2:c5:8f:76:ae:71:54:da:fe:15:6a:2d:
8b:22:f7:cd:b0:56:65:9b:4d:1e:d7:24:b4:e5:4f:c7:b1:72:
1b:3c:fa:b6:3b:05:61:53:77:99:22:33:69:08:e9:a0:6d:54:
d7:21:6e:9d:e4:3e:b2:9a:f0:11:09:74:8d:10:ee:15:8c:4a:
5e:f5:2d:34:ae:25:f9:74:c3:97:1e:b0:eb:ae:74:e4:05:a3:
75:24:ef:13:75:f4:6e:0b:3f:5d:7a:ea:db:af:43:de:8e:1e:
24:79:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org