Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PUIzZvdIiswxw3iMyD8kI1Low1Y.roa
File: PUIzZvdIiswxw3iMyD8kI1Low1Y.roa (raw, json)
Hash identifier: Dbud+2zKSdkbV/aqU/rnJbd1JiD8A4Xtt/QQu7DStRc=
Subject key identifier: 3D:42:33:66:F7:48:8A:CC:31:C3:78:8C:C8:3F:24:23:52:E8:C3:56
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018BF08C31B7505049FE8091308FA909F3AE
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PUIzZvdIiswxw3iMyD8kI1Low1Y.roa
Signing time: Tue 21 Nov 2023 06:23:21 +0000
ROA not before: Tue 21 Nov 2023 06:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24768
IP address blocks: 92.61.97.0/24 maxlen: 24
92.61.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:8c:31:b7:50:50:49:fe:80:91:30:8f:a9:09:f3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 21 06:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d423366f7488acc31c3788cc83f242352e8c356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:72:1c:47:77:45:91:d5:fa:f4:0f:34:50:
a2:e8:36:d7:64:f7:02:f0:5a:dc:c4:3a:49:d1:6b:
29:25:e1:34:80:89:f5:8b:f9:24:9a:1d:0d:40:a4:
c2:cb:47:24:33:99:a9:06:be:8a:d5:dc:d2:92:9a:
46:01:6b:30:94:77:b6:34:a4:5f:3b:b0:23:cb:8f:
85:76:08:bc:b8:60:1c:7d:4a:d9:00:5b:85:88:e9:
1c:e2:be:73:22:0a:a0:16:c2:fc:e9:45:5a:94:bb:
e6:35:63:4c:a3:6c:f5:a7:2a:a9:1b:17:a9:77:92:
7d:91:28:97:1d:16:3a:0b:2b:0d:ef:6e:91:e4:6c:
7a:81:b8:b9:88:3c:16:54:02:3e:a7:de:5d:87:16:
dc:e7:ef:5e:5d:9d:19:c3:ea:40:cc:22:1b:d2:a6:
22:06:20:ba:f8:2e:26:19:c3:1f:06:1b:ff:8d:ff:
e5:a4:64:23:45:db:38:8a:26:69:a0:6e:33:d7:27:
fd:72:b5:20:56:67:b0:0e:c3:3b:68:0c:59:00:98:
c8:3e:80:d4:06:9c:3d:a5:13:ec:93:b1:35:b5:97:
fb:66:ad:af:ff:08:a8:fd:54:90:4d:cd:5f:75:89:
63:1b:14:f5:7b:9c:36:5f:e3:94:2c:31:66:b4:65:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:42:33:66:F7:48:8A:CC:31:C3:78:8C:C8:3F:24:23:52:E8:C3:56
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PUIzZvdIiswxw3iMyD8kI1Low1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.97.0/24
92.61.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:74:c1:f1:b6:f1:7b:d7:45:fb:ca:3f:18:fd:e4:36:ab:f8:
cd:af:f0:c6:43:75:a6:8a:18:e1:27:92:94:92:f2:81:e3:9e:
b5:df:cc:75:6a:5f:c6:9c:5d:8e:a6:b2:e1:65:61:2e:2f:1d:
b5:0f:48:7e:d3:21:1e:5d:2e:d7:02:31:45:7f:09:7e:5b:fe:
23:68:cd:e0:f1:44:b2:c9:39:95:18:e1:a4:37:60:33:e9:55:
d4:df:57:af:63:ec:f9:96:e1:63:78:ff:c0:d2:51:8b:de:80:
59:b6:55:4d:5a:28:1f:f8:1a:da:7e:aa:2d:5e:0a:4a:17:a3:
d5:82:05:2e:cf:58:ab:d8:6c:59:91:c8:20:4f:58:c7:b0:06:
05:5d:cb:f7:47:85:02:e1:6c:0e:f0:ff:56:26:01:b6:a1:c2:
6c:0b:a1:ae:cd:3a:26:18:7b:ba:27:62:4e:ac:19:45:7a:39:
33:67:c4:9f:55:cb:b2:0f:44:00:b5:1f:28:0c:9f:29:6a:27:
e9:60:06:01:37:87:c9:8c:d2:9e:0e:d0:df:ca:88:f1:73:88:
9a:58:bb:9d:54:9e:0c:78:f3:ea:61:c6:73:85:d5:d0:13:c1:
c7:b8:d9:48:24:9b:ae:31:df:60:26:74:06:c3:7d:f2:c7:f7:
e4:f2:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org