Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pupXwtTYbPs_PdlyTFON9Pq3kYc.roa
File: pupXwtTYbPs_PdlyTFON9Pq3kYc.roa (raw, json)
Hash identifier: Nik2oZHDh0V6nLRdSM1UVoBEfL5zYoGmeQHpt3KGCjk=
Subject key identifier: A6:EA:57:C2:D4:D8:6C:FB:3F:3D:D9:72:4C:53:8D:F4:FA:B7:91:87
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 018E14FC95BAB438035780A143B6C4003A20
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pupXwtTYbPs_PdlyTFON9Pq3kYc.roa
Signing time: Wed 06 Mar 2024 18:18:01 +0000
ROA not before: Wed 06 Mar 2024 18:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215356
IP address blocks: 194.26.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 09:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:fc:95:ba:b4:38:03:57:80:a1:43:b6:c4:00:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Mar 6 18:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6ea57c2d4d86cfb3f3dd9724c538df4fab79187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:2e:1c:d9:c8:dc:ab:e9:26:f8:90:7d:37:
ec:07:7d:bc:96:a7:57:6a:8b:44:cd:12:e4:f6:c4:
9a:0e:e8:fe:3e:33:1d:84:87:3d:5b:f1:cd:14:49:
a0:f9:01:b9:c0:70:ea:62:5f:a8:47:ea:a6:27:98:
2b:5a:40:00:76:73:5a:e7:89:37:32:31:ba:9c:d6:
cb:39:c3:1a:3c:a9:db:c4:59:d3:58:84:62:fc:6c:
12:c0:92:49:25:05:72:07:de:ca:68:83:69:e7:ac:
ae:37:d2:9a:db:47:99:79:95:fd:9e:55:df:bb:8a:
09:33:70:00:fa:4d:01:86:af:45:b2:ce:fe:9a:3f:
41:30:0d:87:08:ba:4c:30:03:97:bf:c3:24:6e:22:
f2:a6:5c:85:39:cc:4f:84:ad:17:14:56:49:95:ce:
8b:16:a4:c0:8e:2a:25:0b:60:c5:c1:cf:67:08:4a:
fb:8b:e2:16:69:c8:95:19:04:c8:86:d4:07:3d:61:
55:69:2e:b4:1a:96:7f:4b:b8:a2:cd:9e:25:ee:ea:
9a:c3:14:88:2e:31:ac:da:83:92:8f:c5:73:ed:47:
b3:12:64:90:60:cf:3a:09:5a:ff:4d:c8:7b:a8:ef:
86:6f:ad:00:dc:28:8d:ec:c3:d9:97:a9:aa:60:bd:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:57:C2:D4:D8:6C:FB:3F:3D:D9:72:4C:53:8D:F4:FA:B7:91:87
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pupXwtTYbPs_PdlyTFON9Pq3kYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:98:9b:58:20:0d:61:77:db:8f:89:30:b6:85:eb:ad:91:9e:
1f:eb:f0:a3:9a:96:4f:7d:75:94:d7:62:16:d0:e7:02:04:66:
61:9f:07:36:8b:38:62:bf:0e:06:37:59:1b:6a:76:e6:6a:7b:
57:36:89:80:b8:fa:f9:c4:fa:dd:6c:e3:6b:1f:74:95:60:2c:
26:64:79:5f:e3:56:f5:9d:e8:ca:61:b2:e8:15:59:82:c9:2f:
61:89:24:0c:1d:c5:53:55:fb:37:42:0e:80:4b:0f:2d:b9:c3:
60:48:f3:57:76:b2:b4:b2:d5:9f:cb:a3:d0:9e:2c:27:53:05:
10:a8:48:1c:6d:69:e0:a9:e7:a5:a0:db:b9:49:96:6a:f5:7d:
31:28:d9:99:40:7d:42:10:79:24:c6:01:5e:d8:a3:72:c9:7d:
64:f8:60:92:cf:02:f3:aa:ab:7d:82:a6:29:98:05:de:94:9a:
55:22:af:87:ee:2c:49:4e:c4:8b:de:e0:41:a5:40:09:ff:67:
20:f0:fe:7a:98:c5:c8:66:c1:fd:48:aa:26:51:eb:3a:ed:a6:
2a:a0:3e:f7:24:9f:88:10:26:36:81:a3:83:2d:2f:16:21:38:
04:93:42:d5:a1:d9:0a:35:c0:b7:17:b8:11:e3:84:03:d1:88:
b4:a9:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:20 2024 by rpki-client on console-ams.rpki-client.org