Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/PunyyxZvYHN1lbiO-1PLfKu7V2c.roa
File: PunyyxZvYHN1lbiO-1PLfKu7V2c.roa (raw, json)
Hash identifier: hMuS92QMwrNy2c5rBLA2DUmVHX+0olxjPwuk8nr91v4=
Subject key identifier: 3E:E9:F2:CB:16:6F:60:73:75:95:B8:8E:FB:53:CB:7C:AB:BB:57:67
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 018DF025BCE1D74800D846774FEFE68B5FD4
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/PunyyxZvYHN1lbiO-1PLfKu7V2c.roa
Signing time: Wed 28 Feb 2024 14:37:01 +0000
ROA not before: Wed 28 Feb 2024 14:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49367
IP address blocks: 83.136.104.0/21 maxlen: 24
94.198.96.0/21 maxlen: 24
94.198.101.0/24 maxlen: 24
95.141.32.0/20 maxlen: 24
158.58.168.0/21 maxlen: 24
158.58.172.0/23 maxlen: 24
2a02:29e2::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 14:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:25:bc:e1:d7:48:00:d8:46:77:4f:ef:e6:8b:5f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Feb 28 14:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ee9f2cb166f60737595b88efb53cb7cabbb5767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:2d:e9:7a:75:99:ad:08:00:e4:e4:88:8f:
df:b3:21:5e:b4:0e:1e:66:9a:22:10:04:49:1d:57:
4b:a3:e6:8c:f5:db:44:11:50:1a:61:d2:4e:04:d0:
63:51:62:84:75:44:50:34:82:2f:69:ff:04:6d:18:
48:8d:dc:c2:e4:d1:d2:db:61:ba:73:74:0c:92:3c:
23:61:4a:62:7d:01:b5:af:cb:9f:ac:13:7e:16:0e:
ca:d9:b6:0c:99:76:12:54:5c:7c:28:ed:b9:28:4c:
66:cb:ed:ab:a1:0c:d0:81:2d:75:d0:bc:2d:ef:c0:
e3:25:5d:20:bd:88:84:d2:28:81:7e:08:ad:2f:e8:
29:30:fe:cb:e8:f4:a5:63:f1:e3:a8:bf:95:5b:f7:
0b:c6:20:57:3a:e6:d8:4d:96:ac:8d:39:9f:bd:a9:
1a:86:eb:67:10:cf:4a:0d:a4:69:87:b1:75:1f:64:
e8:fa:e9:8e:62:0f:d6:aa:44:50:e7:c0:65:f9:45:
0d:7d:83:a8:65:01:14:cc:e9:57:47:45:a5:90:18:
89:6a:ef:01:f4:c9:36:c3:b1:bd:c7:db:e2:a7:8d:
33:9b:3d:5a:82:60:e2:c9:b1:f4:d9:56:d2:4d:5f:
45:e9:a6:70:c4:31:3c:ae:17:37:4b:62:bb:38:7c:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:F2:CB:16:6F:60:73:75:95:B8:8E:FB:53:CB:7C:AB:BB:57:67
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/PunyyxZvYHN1lbiO-1PLfKu7V2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.104.0/21
94.198.96.0/21
95.141.32.0/20
158.58.168.0/21
IPv6:
2a02:29e2::/32
Signature Algorithm: sha256WithRSAEncryption
bd:a3:bb:bc:3b:e2:bc:fb:f7:6d:63:50:08:88:80:f1:09:af:
85:8b:df:c9:cb:78:09:4d:b9:2e:e6:70:0e:22:1b:97:cf:3a:
d0:6e:99:37:84:db:7d:05:4a:c3:a2:fb:bf:c4:a8:e8:84:70:
b1:05:f1:13:4e:a1:83:1b:5d:1a:46:ea:6e:25:b0:43:e0:fc:
39:0c:29:32:76:1d:0a:b8:8e:ce:05:f8:39:b8:21:e4:f1:8f:
d6:99:46:b7:8d:14:6e:3b:7b:29:3e:e1:1d:3a:b0:bc:35:b6:
10:82:7e:06:cf:45:71:c1:10:ae:6d:14:a1:44:d2:aa:38:b5:
45:91:23:c9:c7:8b:7b:67:b7:5d:0e:6b:9e:99:d5:2d:36:59:
28:23:a5:b8:75:9c:6e:32:a7:86:e7:03:23:93:e3:2b:91:34:
c8:60:f8:8b:eb:ae:3a:1b:9a:56:fe:3b:f8:5d:ec:e2:af:7b:
4f:78:24:38:5a:7b:b7:88:ca:ae:a9:40:81:1d:d8:f2:0d:be:
2a:aa:74:20:3e:90:87:8c:8e:c4:3b:26:ce:2f:28:8c:e1:0a:
d7:4c:cc:53:4b:aa:a3:99:b7:2c:74:80:05:e5:df:45:c1:47:
b1:02:0f:3f:51:b8:32:7a:bd:3c:6a:c3:7c:10:96:1c:9d:14:
93:57:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 20:12:26 2024 by rpki-client on console-fra.rpki-client.org