Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/Puf5HA_47EIDZdEM-cmOwi-5c2s.roa
File: Puf5HA_47EIDZdEM-cmOwi-5c2s.roa (raw, json)
Hash identifier: 9e205sgm0b9V9dj6bWPfeTn66VidWllNTV+/hvKnAy4=
Subject key identifier: 3E:E7:F9:1C:0F:F8:EC:42:03:65:D1:0C:F9:C9:8E:C2:2F:B9:73:6B
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 01856BDC8CF59D99D84345D4E26C822C7886
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/Puf5HA_47EIDZdEM-cmOwi-5c2s.roa
Signing time: Sun 01 Jan 2023 05:44:54 +0000
ROA not before: Sun 01 Jan 2023 05:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206123
IP address blocks: 91.247.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:8c:f5:9d:99:d8:43:45:d4:e2:6c:82:2c:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Jan 1 05:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ee7f91c0ff8ec420365d10cf9c98ec22fb9736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:54:0d:f7:56:87:ca:2a:2e:31:70:5f:17:
0b:b1:11:6b:f2:b9:b8:2a:01:21:eb:85:41:5c:41:
cb:a0:f8:8a:a3:25:11:b7:9c:9e:9e:9b:aa:3e:4c:
fb:02:2b:89:18:e5:7d:0e:a7:70:9a:e2:27:5f:dc:
80:cc:d9:02:bb:18:3e:26:a2:b8:d8:0e:fe:b4:1a:
c0:a2:61:88:38:78:ef:f6:2b:a7:90:74:03:16:17:
4f:9f:ed:8a:a5:4e:58:d0:f6:5b:2a:3e:b9:6d:4a:
2b:9f:51:94:1b:20:e5:67:63:49:25:be:9a:b0:4c:
39:a4:f4:79:d9:9d:e8:d4:e0:f9:73:cd:62:d3:54:
28:04:d6:e9:fc:85:12:c9:9d:e8:8c:74:91:9e:d0:
d9:1a:3b:c4:f0:60:fd:1b:29:06:00:5f:fd:13:45:
5c:3f:f8:02:b6:12:1b:31:e0:8a:c1:6c:ce:b4:35:
de:ff:91:c4:96:d2:33:bf:c7:24:08:74:84:7d:bd:
39:9b:a3:01:b7:fe:9e:82:f4:c5:ec:4d:f0:a6:f1:
f3:72:ae:17:0f:8f:ca:d9:39:86:d1:4e:69:f9:17:
55:00:c8:38:90:5f:24:7f:a9:a3:5b:91:d3:73:c9:
56:a4:74:19:c6:78:0c:fc:4f:a6:ea:b1:59:d7:3a:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:F9:1C:0F:F8:EC:42:03:65:D1:0C:F9:C9:8E:C2:2F:B9:73:6B
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/Puf5HA_47EIDZdEM-cmOwi-5c2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.253.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ce:c7:ab:3e:38:a5:01:07:11:b3:d3:ad:d8:c8:c4:80:7a:
71:19:4e:0d:53:d5:1c:35:be:f1:8d:55:e0:d5:5a:0a:68:1f:
0f:99:0a:6b:c4:25:5e:3b:3b:dc:e3:f5:a7:9f:b4:1b:c5:25:
25:43:5c:8e:73:57:8d:3c:f7:f5:a5:9a:9d:01:9a:aa:2b:f8:
c0:8f:4a:fd:46:68:b8:20:ab:f8:19:90:4d:0b:74:b1:45:74:
c9:52:db:ae:ba:71:e3:7f:12:e8:74:ba:69:4f:27:94:ac:9b:
77:80:af:f5:c2:94:1c:a2:7d:84:4b:c4:65:65:85:b4:e0:6a:
00:b1:93:87:aa:ce:92:e9:d5:89:6d:1b:07:f1:92:d9:38:52:
f0:f7:a6:71:5f:29:2a:5e:d6:da:3f:17:36:4d:8a:9c:f6:c8:
39:df:1d:47:7a:39:34:bf:07:c3:2f:b1:6a:a4:ff:e2:80:3b:
89:0b:03:27:9f:06:fa:20:bf:65:c3:ed:9c:d5:35:06:9d:0e:
f3:b7:b8:e8:e0:40:79:ff:e6:61:62:97:33:01:56:95:fb:21:
6d:32:92:af:a7:5b:bb:11:91:9d:ba:a3:4a:5a:3c:6d:f0:49:
ac:64:b5:75:af:00:44:13:40:46:06:d3:e0:dd:f0:c7:66:57:
fa:d7:f3:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr3Iz1nZnYQ0XU4myCLHiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOThjNTA2YTE3NGNmMmNhZDljMWE2YzViODFkNmU4OTg4
NjM2MmQwHhcNMjMwMTAxMDU0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWU3ZjkxYzBmZjhlYzQyMDM2NWQxMGNmOWM5OGVjMjJmYjk3MzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ9UDfdWh8oqLjFwXxcLsRFr8rm4
KgEh64VBXEHLoPiKoyURt5yenpuqPkz7AiuJGOV9DqdwmuInX9yAzNkCuxg+JqK4
2A7+tBrAomGIOHjv9iunkHQDFhdPn+2KpU5Y0PZbKj65bUorn1GUGyDlZ2NJJb6a
sEw5pPR52Z3o1OD5c81i01QoBNbp/IUSyZ3ojHSRntDZGjvE8GD9GykGAF/9E0Vc
P/gCthIbMeCKwWzOtDXe/5HEltIzv8ckCHSEfb05m6MBt/6egvTF7E3wpvHzcq4X
D4/K2TmG0U5p+RdVAMg4kF8kf6mjW5HTc8lWpHQZxngM/E+m6rFZ1zpdLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7n+RwP+OxCA2XRDPnJjsIvuXNrMB8GA1UdIwQY
MBaAFC6YxQahdM8srZwabFuB1uiYhjYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjIt
NmJiYTdmYzMxNzI4LzEvUHVmNUhBXzQ3RUlEWmRFTS1jbU93aS01YzJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjItNmJiYTdmYzMxNzI4
LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/f9MA0G
CSqGSIb3DQEBCwUAA4IBAQAwzserPjilAQcRs9Ot2MjEgHpxGU4NU9UcNb7xjVXg
1VoKaB8PmQprxCVeOzvc4/Wnn7QbxSUlQ1yOc1eNPPf1pZqdAZqqK/jAj0r9Rmi4
IKv4GZBNC3SxRXTJUtuuunHjfxLodLppTyeUrJt3gK/1wpQcon2ES8RlZYW04GoA
sZOHqs6S6dWJbRsH8ZLZOFLw96ZxXykqXtbaPxc2TYqc9sg53x1Hejk0vwfDL7Fq
pP/igDuJCwMnnwb6IL9lw+2c1TUGnQ7zt7jo4EB5/+ZhYpczAVaV+yFtMpKvp1u7
EZGduqNKWjxt8EmsZLV1rwBEE0BGBtPg3fDHZlf61/MV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:50 2024 by rpki-client on console-ams.rpki-client.org