Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/PRUR5sot2qKjeX5GYiNDFhsHlPM.roa
File: PRUR5sot2qKjeX5GYiNDFhsHlPM.roa (raw, json)
Hash identifier: 6SdGj5itMRn8Sgkdo5SOmIVbNTSYlmYWJV+ncSWz8yo=
Subject key identifier: 3D:15:11:E6:CA:2D:DA:A2:A3:79:7E:46:62:23:43:16:1B:07:94:F3
Certificate issuer: /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Certificate serial: 018CC64B02F59A17EDC9B29258A9CA83142F
Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/PRUR5sot2qKjeX5GYiNDFhsHlPM.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207533
IP address blocks: 212.6.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:02:f5:9a:17:ed:c9:b2:92:58:a9:ca:83:14:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d1511e6ca2ddaa2a3797e46622343161b0794f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:f2:96:6c:f6:cc:b1:78:7b:c5:63:4d:ca:
4e:46:6c:68:c1:cf:b1:7a:00:0e:d2:ad:98:23:fd:
d2:85:7a:63:fc:26:52:4a:6c:27:0b:52:2b:41:57:
1a:02:47:47:d1:5d:63:91:79:a6:74:98:af:ba:e8:
b7:e0:3b:ed:82:75:1d:4d:b7:04:57:da:3a:26:e7:
62:b9:67:d1:5c:2d:63:29:2c:77:b5:48:40:d2:35:
7c:c6:be:99:b2:ab:2f:f8:2e:a6:27:22:2c:75:6e:
a1:d3:99:cb:dc:aa:34:3c:91:b3:f4:5d:39:31:03:
4f:a5:34:07:52:12:ca:9a:2c:0d:b7:0f:3b:9c:b2:
52:9d:27:01:dc:f1:65:2c:72:30:de:36:f8:e5:5d:
7c:d0:cf:9c:2c:98:5c:37:50:1a:0d:40:38:a6:9f:
68:ce:26:d9:7c:ad:5c:8c:1c:f1:47:f6:0a:b7:da:
4c:ac:a7:3d:a9:15:1f:c3:0a:c9:10:66:03:49:fd:
57:06:c9:9c:76:af:01:fc:eb:fa:07:48:cd:ee:cc:
11:a5:fb:d5:de:11:c4:f5:1d:4e:75:64:9e:e2:5b:
b7:98:da:0b:c7:b1:e4:ba:a3:4d:bb:f9:0c:8a:e2:
fa:23:bc:22:c8:05:87:18:87:9c:9e:7e:81:7a:4a:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:11:E6:CA:2D:DA:A2:A3:79:7E:46:62:23:43:16:1B:07:94:F3
X509v3 Authority Key Identifier:
keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/PRUR5sot2qKjeX5GYiNDFhsHlPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:14:d1:15:88:b2:3f:2a:d2:2f:8c:12:33:4f:0b:80:d1:b1:
a7:b2:f9:91:0e:cb:89:4b:e4:99:18:e4:e1:41:8d:2c:80:07:
c1:1e:98:a8:ce:a2:70:c1:7a:56:2a:5e:08:3e:c3:e2:24:3d:
6b:3d:cd:bd:e0:6f:71:a4:e5:a4:b8:56:99:b1:74:d9:5a:18:
3b:31:3d:7a:54:86:c7:e3:ff:02:83:c1:6c:90:78:fa:9e:87:
97:81:3d:04:24:85:69:2f:fe:8e:4d:5d:71:13:79:ed:6c:b2:
b5:cb:e3:91:93:5b:3d:48:bd:c2:8f:44:3d:15:77:f8:45:34:
f7:de:d0:4f:e0:92:d5:e1:e3:1e:0b:3b:96:3d:c2:0f:43:d6:
cb:f2:2e:11:ad:86:24:79:9e:99:f8:7e:00:18:85:31:eb:0d:
26:d0:f5:62:81:99:54:44:be:7c:46:cf:51:f5:b9:c7:fe:ca:
e7:7b:50:8a:b7:d8:56:b7:27:39:5a:6e:fb:c6:26:f2:46:0d:
52:c6:a8:5f:ae:48:74:32:54:d3:e4:79:a9:71:c1:3f:61:12:
2b:96:4d:24:35:4a:52:87:97:e8:ad:bf:16:41:35:bf:74:20:
0b:c3:d6:e5:76:3a:10:d0:f6:9e:6c:f9:f5:6f:07:7d:7f:50:
c4:91:24:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:08 2025 by rpki-client