Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/puP-_ueMuwYswfYBsBcVnu_kwRA.roa
File: puP-_ueMuwYswfYBsBcVnu_kwRA.roa (raw, json)
Hash identifier: TaN3qX5lJByP6ippp8OOu9VeOrh25qRGpAEOMNxLIh0=
Subject key identifier: A6:E3:FE:FE:E7:8C:BB:06:2C:C1:F6:01:B0:17:15:9E:EF:E4:C1:10
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 01856D0AE9F0DC45AB4D5869EC7E64E5B17F
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/puP-_ueMuwYswfYBsBcVnu_kwRA.roa
Signing time: Sun 01 Jan 2023 11:15:09 +0000
ROA not before: Sun 01 Jan 2023 11:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50741
IP address blocks: 79.173.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e9:f0:dc:45:ab:4d:58:69:ec:7e:64:e5:b1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 1 11:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6e3fefee78cbb062cc1f601b017159eefe4c110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:29:2a:3a:ea:53:d3:3e:79:4e:58:20:46:
93:bc:b3:73:e1:45:e5:e8:06:50:b2:65:c4:6d:6a:
e0:2b:55:d3:cc:95:c1:8a:2d:17:c8:01:30:90:b8:
b9:46:28:4b:87:2f:6c:bd:8a:1f:02:b4:c3:b1:77:
39:2c:2b:b7:b9:0e:1c:86:8e:d1:67:a4:8d:3e:f2:
b0:ac:51:9e:8a:4c:c7:44:bd:0a:f9:8b:76:99:11:
17:cf:96:82:86:df:19:39:db:7a:80:80:7a:89:cb:
b3:18:f0:2f:77:8c:cd:16:14:97:02:02:08:b9:96:
8f:83:58:44:fc:2b:bc:3b:74:d0:d0:de:8e:a7:c7:
0c:56:59:39:0f:f8:75:24:ad:73:e3:77:df:cb:2a:
e7:b7:d7:f3:b1:9a:9a:bd:cb:f7:51:8c:c9:6f:ee:
f1:4b:4a:10:30:ad:dd:d5:89:4f:a6:f7:9b:66:85:
fe:46:26:a6:dc:cb:22:fd:62:9b:28:6d:f4:95:4f:
02:72:0c:61:14:39:74:d8:a6:ae:c9:83:58:fb:c5:
a6:31:3d:83:72:25:a0:81:c5:68:33:c6:04:69:49:
11:49:5a:b3:24:da:c6:91:3d:30:26:3c:59:37:1e:
d2:ba:06:46:a7:93:e7:21:b6:dc:fd:9a:79:cc:91:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:FE:FE:E7:8C:BB:06:2C:C1:F6:01:B0:17:15:9E:EF:E4:C1:10
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/puP-_ueMuwYswfYBsBcVnu_kwRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bf:d3:fc:20:7b:b8:3b:cd:5a:a4:2c:49:89:97:cc:44:35:
2f:55:92:89:07:77:d4:ff:a0:d2:47:5b:18:1b:a7:17:8d:d2:
87:d4:7c:ea:22:bd:a4:a4:1e:ee:6d:6d:8f:1f:0c:c4:a1:ba:
71:bc:e1:6b:76:de:5c:d5:2a:35:51:9d:1d:0e:da:9c:a3:d7:
af:1d:2e:f3:95:1d:f5:87:9c:07:2c:9e:b7:82:c6:41:68:3d:
96:6e:a5:59:be:17:b5:29:a9:19:17:51:15:43:43:40:2c:91:
19:36:0e:ea:f7:59:7f:98:4e:44:cd:b1:c8:43:0b:65:a8:6f:
42:d3:61:c2:8f:0c:d1:12:9a:d1:23:48:65:51:49:2c:9a:ee:
1f:bb:f5:d6:b6:f3:48:e8:32:b4:1f:0b:77:ce:4f:08:3e:1d:
fd:ff:0e:bc:56:2e:0d:bf:89:34:51:d1:d2:78:d4:3a:ec:46:
8d:0a:8b:79:97:09:3d:77:d4:85:0c:3c:21:71:f6:88:b8:31:
d4:fb:71:6c:e3:67:b7:75:01:03:1c:7d:cc:31:b6:85:12:ec:
b5:29:ad:45:b6:e7:10:56:03:c4:53:b7:61:f3:5c:6a:a6:23:
9d:91:14:bd:df:ed:52:d3:a0:cf:c8:1f:3f:91:6c:8d:b1:ac:
74:5c:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:59 2024 by rpki-client on console-fra.rpki-client.org