Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/PuoZtvbLp2j1psg6PD0-9a7BqEQ.roa
File: PuoZtvbLp2j1psg6PD0-9a7BqEQ.roa (raw, json)
Hash identifier: pyKEm/oC8Q5e+msYjnN3e1g735xgUtvYIKxNRlfQo5s=
Subject key identifier: 3E:EA:19:B6:F6:CB:A7:68:F5:A6:C8:3A:3C:3D:3E:F5:AE:C1:A8:44
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 01877B47D8BF4877ACE24C45930C7AD8B2DA
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/PuoZtvbLp2j1psg6PD0-9a7BqEQ.roa
Signing time: Thu 13 Apr 2023 15:41:58 +0000
ROA not before: Thu 13 Apr 2023 15:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 212.81.40.0/23 maxlen: 23
171.22.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:47:d8:bf:48:77:ac:e2:4c:45:93:0c:7a:d8:b2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Apr 13 15:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eea19b6f6cba768f5a6c83a3c3d3ef5aec1a844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:e1:8e:be:8d:6d:9f:5f:0e:d6:49:70:b5:
64:cb:32:0c:ee:ec:41:88:95:b4:87:c7:41:72:85:
a7:5a:d1:f8:50:63:90:7a:35:70:ed:4f:74:98:22:
f8:f0:63:ce:46:13:20:23:ae:ac:41:b9:fe:fd:34:
f3:6e:c5:a8:b6:39:66:b0:c3:af:fc:dd:80:52:f8:
f6:9a:8d:37:58:8a:c7:68:62:c2:1a:79:96:da:b2:
45:88:43:f6:0b:c9:9a:19:c6:de:fd:aa:ef:c1:96:
43:74:32:81:0d:38:6c:5e:fe:c8:27:0e:b9:e6:a2:
a2:a0:7d:17:83:36:a5:37:71:bf:4c:a1:32:fe:9f:
a7:de:8c:e1:bf:63:f6:af:1c:8e:9c:73:05:6a:bd:
87:7f:92:db:fd:73:00:c4:59:c4:c7:55:b7:2c:c8:
0f:5a:05:f9:f9:97:db:f2:3b:ff:64:16:c5:8b:84:
71:19:93:5b:bb:ab:89:92:52:99:06:98:d0:a5:6a:
1b:35:dc:4e:b1:e7:fb:9f:c8:f9:52:ea:cb:05:1b:
fb:7a:32:83:7d:f1:5f:27:61:e2:8a:87:d7:19:59:
3c:af:2e:c5:d3:1d:80:c1:df:85:27:74:c4:b2:89:
36:e6:d1:98:a4:ca:ac:16:d8:6f:9b:56:ce:ee:c2:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EA:19:B6:F6:CB:A7:68:F5:A6:C8:3A:3C:3D:3E:F5:AE:C1:A8:44
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/PuoZtvbLp2j1psg6PD0-9a7BqEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.191.0/24
212.81.40.0/23
Signature Algorithm: sha256WithRSAEncryption
92:cf:d4:07:e0:0f:f0:58:63:44:cc:ac:4c:5d:df:e3:82:94:
03:d2:f5:47:4b:b8:f8:c4:00:08:52:93:d8:67:25:88:53:45:
fa:be:ab:37:d6:d9:fe:e9:5f:56:c7:4a:2c:da:4a:14:fc:96:
1a:8d:ce:58:7a:6f:16:63:36:1d:14:2c:9d:7d:2f:a3:4a:b9:
e5:e2:58:64:39:89:14:05:6e:7a:d8:e0:5f:bc:da:81:fa:b0:
5b:95:c2:42:81:21:72:d9:55:34:39:57:a7:1b:66:50:08:0c:
9b:3f:6a:2d:cb:ac:94:f8:ac:44:70:66:6b:ff:b5:6c:65:8f:
b1:9f:c2:38:f5:04:1c:04:d1:07:84:76:be:52:dd:64:c3:7a:
d1:e8:be:04:61:50:6c:25:7e:25:dd:24:34:21:33:66:fe:91:
f4:61:54:e4:d1:d5:ca:cd:26:64:f9:d5:c2:3c:be:f6:58:8d:
26:02:f5:02:05:ad:69:cb:7a:e0:5d:72:8e:0d:78:12:ea:e7:
47:41:1f:56:65:6c:e1:80:00:6f:d2:51:26:4a:b6:8a:a2:4f:
17:36:72:d1:91:82:00:50:8f:a8:5e:41:96:00:33:34:0b:d2:
af:df:e3:5c:21:a7:a9:d1:27:33:ce:7a:4a:a9:b1:ca:10:9b:
7e:b4:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:31 2024 by rpki-client on console-fra.rpki-client.org