Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/PuLPruensPQNz2dFZVotx09oNvg.roa
File: PuLPruensPQNz2dFZVotx09oNvg.roa (raw, json)
Hash identifier: MAhTziJJbxq+KhbOTNCDRvY4TbsYjhaYal7VPmQLDmM=
Subject key identifier: 3E:E2:CF:AE:E7:A7:B0:F4:0D:CF:67:45:65:5A:2D:C7:4F:68:36:F8
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 01857356252A661518A31E031AC372500CF3
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/PuLPruensPQNz2dFZVotx09oNvg.roa
Signing time: Mon 02 Jan 2023 16:35:03 +0000
ROA not before: Mon 02 Jan 2023 16:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51206
IP address blocks: 92.45.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:25:2a:66:15:18:a3:1e:03:1a:c3:72:50:0c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 2 16:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ee2cfaee7a7b0f40dcf6745655a2dc74f6836f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:5c:bc:ba:05:e6:7f:41:e0:68:e7:94:1b:
d6:a5:b9:55:13:b5:17:e5:1a:5c:73:21:c5:e8:3b:
1d:0f:3c:28:b2:51:55:a4:a1:2c:1c:b2:3a:68:42:
76:36:01:c3:51:aa:ab:cc:52:3b:a1:af:8e:a1:cb:
76:c1:a4:9e:29:8f:75:4b:85:17:7b:f0:9b:6d:8b:
b1:35:84:8a:05:b1:98:7b:0d:ed:9b:26:f8:98:df:
f5:d4:31:b9:ab:96:50:e7:3f:3a:0b:c8:22:19:c9:
f3:44:12:4a:37:ed:1d:48:77:e9:b0:82:e9:d9:ee:
99:f6:5a:ea:35:6e:d5:b0:d5:64:e6:e2:b8:b1:4d:
11:9e:a6:a8:b2:2f:ed:1b:c9:99:8e:1b:1a:d8:2c:
f2:a8:6a:eb:49:85:95:3f:43:1b:75:bf:53:bf:a2:
a5:64:32:62:cf:0d:36:9d:fa:61:05:f2:68:63:4a:
f7:a8:41:5d:41:db:3e:c4:6e:1d:c6:52:82:69:27:
9a:3f:e7:b8:af:8d:da:13:80:7b:0e:df:6d:82:fc:
a1:b4:4e:fd:65:cb:24:3f:a9:b6:b5:4b:bf:e7:4d:
2e:44:45:75:34:de:08:1d:d4:e8:85:c2:97:e0:f6:
bf:44:8b:af:39:82:36:93:40:19:df:ac:ee:65:90:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:CF:AE:E7:A7:B0:F4:0D:CF:67:45:65:5A:2D:C7:4F:68:36:F8
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/PuLPruensPQNz2dFZVotx09oNvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.45.3.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9c:74:8f:9d:e4:a9:a5:79:b7:92:db:9e:86:47:5d:a9:fa:
93:71:02:e4:22:61:0e:b2:01:35:f1:fb:6c:99:54:e0:d2:be:
a6:1f:e3:1d:19:7f:08:12:58:03:87:49:8f:12:e6:44:56:6f:
70:3e:e1:8e:7f:93:00:21:bd:5a:51:a9:4f:3d:cf:bd:10:b6:
83:9d:47:03:a8:08:b6:1f:91:04:7a:b1:df:79:82:67:44:b6:
ef:d5:89:fc:33:79:84:d1:9f:5b:fb:22:7e:4b:03:42:18:12:
c2:ca:ba:61:e2:e7:c6:ea:7f:f1:0a:26:a0:fa:44:ef:6e:1f:
a1:de:c9:23:0d:64:f8:1f:91:04:2c:79:d1:82:43:bd:b0:6f:
75:ca:b6:95:b1:00:c6:eb:4a:34:97:6e:7c:01:46:57:f0:fa:
d2:83:91:3e:8e:bd:24:86:80:30:dd:90:9b:85:58:ca:cd:47:
8f:59:ce:ee:68:42:cd:8c:d5:37:4c:98:5c:f1:d9:9b:51:f2:
0a:df:fe:e5:65:c1:dd:bb:e0:43:b8:ef:ee:5a:af:88:2c:80:
7e:8b:c3:b7:1d:02:63:78:17:b3:a8:8b:a0:66:0d:61:ce:66:
be:0f:85:09:af:f7:20:a3:c1:da:bd:28:b1:00:f1:91:4f:7b:
ba:5d:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:00 2024 by rpki-client on console-ams.rpki-client.org