Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Puwj9br8qC6rJ-BrBprt9Ztt5QQ.roa
File: Puwj9br8qC6rJ-BrBprt9Ztt5QQ.roa (raw, json)
Hash identifier: NLI/9EXQBuDzX23K+2O6sYLxL3OHhJWSsgZp9X4Wtio=
Subject key identifier: 3E:EC:23:F5:BA:FC:A8:2E:AB:27:E0:6B:06:9A:ED:F5:9B:6D:E5:04
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0187696A88E8FD867CCB2257B1390441E17F
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Puwj9br8qC6rJ-BrBprt9Ztt5QQ.roa
Signing time: Mon 10 Apr 2023 04:26:42 +0000
ROA not before: Mon 10 Apr 2023 04:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.225.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 05:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:6a:88:e8:fd:86:7c:cb:22:57:b1:39:04:41:e1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 10 04:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eec23f5bafca82eab27e06b069aedf59b6de504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:97:4c:98:cc:07:bb:87:cb:c6:c6:65:f7:
b7:58:65:7b:05:8c:07:a2:b5:f0:91:9f:d1:e8:55:
8f:a0:1d:0e:92:f9:c5:c0:a7:b4:ff:df:f7:94:16:
bf:f9:01:f3:00:2b:1d:27:49:bb:ad:ec:dc:ac:eb:
9f:45:87:7a:35:69:dd:01:1b:46:2e:1c:e8:98:dc:
c4:78:8c:00:38:f1:02:81:90:46:b5:73:4d:b3:d7:
20:e2:88:d6:da:b7:e5:d6:a2:37:9c:2d:aa:f3:7e:
09:b3:c5:f9:aa:35:57:41:9e:f6:de:76:02:98:a6:
9f:b2:ba:40:b7:99:8d:70:cd:85:bb:37:c5:bc:31:
53:93:df:d8:60:99:b2:de:6d:59:47:e4:d4:d0:4a:
91:98:00:32:c7:24:f4:86:07:22:0a:2a:90:19:1c:
38:17:f8:e8:73:71:5c:62:ae:15:61:70:07:8a:2a:
51:3d:00:4a:68:45:11:5d:28:4b:b4:ca:01:0a:8b:
3c:fc:4d:05:b2:fb:94:9e:60:20:5e:bd:61:c9:d0:
51:e0:23:b0:14:a7:41:bf:82:7e:88:1f:3d:0b:38:
57:b8:00:4d:34:1d:71:d1:40:62:fa:a7:1a:b9:a8:
be:22:35:db:7d:00:35:d2:87:63:24:ec:03:13:83:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:23:F5:BA:FC:A8:2E:AB:27:E0:6B:06:9A:ED:F5:9B:6D:E5:04
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Puwj9br8qC6rJ-BrBprt9Ztt5QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.226.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8a:fd:ad:ab:a0:6c:d1:d9:5a:24:b2:72:41:a5:26:e0:fe:
eb:d7:cb:89:b3:48:5d:92:83:4a:f6:7b:bb:ff:84:92:67:4f:
b4:82:d3:36:3b:83:dc:df:77:b1:3f:41:3f:86:78:2c:dd:14:
91:fd:3e:82:e4:9b:45:40:ff:13:f7:fd:1a:a4:05:4b:9f:c4:
c8:b7:cc:10:97:02:82:58:2c:3d:7c:8d:94:09:ec:6d:94:8c:
6a:a7:2f:14:1a:8f:6b:62:de:30:d2:1d:c2:ce:89:2f:ad:9f:
ee:f6:fd:82:d1:02:59:5e:53:0c:07:44:6a:96:e9:26:d1:31:
98:18:8b:16:80:e6:7f:3b:a7:21:76:94:b6:d1:38:b4:87:d4:
f7:3d:ec:58:22:d0:62:79:e4:1d:78:36:22:8d:97:ec:4a:06:
f1:91:90:17:41:27:21:c3:80:7e:4e:1e:56:c6:04:f9:15:73:
90:b4:60:a9:8b:b2:25:16:c3:97:b7:f3:a7:7a:16:a5:5a:20:
18:bb:b5:21:d4:a3:51:16:dd:1e:39:5c:b4:41:93:91:16:a6:
af:ba:68:dc:46:ee:56:92:d6:cc:51:fd:35:c6:38:3e:9c:33:
a8:2f:b3:e3:63:b4:af:ca:92:aa:74:5b:34:36:d7:6a:ea:8d:
21:df:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org