Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/PgpuBnrgSkYGp4b612bfk6FneXM.roa
File: PgpuBnrgSkYGp4b612bfk6FneXM.roa (raw, json)
Hash identifier: 1/ws10IjtUemBWjYsEuR8Gz1lcuv4/xEtXZKmnU78Gc=
Subject key identifier: 3E:0A:6E:06:7A:E0:4A:46:06:A7:86:FA:D7:66:DF:93:A1:67:79:73
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 01914FD190452F25A8D59484503760189151
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/PgpuBnrgSkYGp4b612bfk6FneXM.roa
Signing time: Wed 14 Aug 2024 07:36:59 +0000
ROA not before: Wed 14 Aug 2024 07:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47964
IP address blocks: 81.163.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 06:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4f:d1:90:45:2f:25:a8:d5:94:84:50:37:60:18:91:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Aug 14 07:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e0a6e067ae04a4606a786fad766df93a1677973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:38:42:ea:95:60:95:12:1b:b2:f4:52:f8:
ab:55:f1:45:be:6b:96:16:3f:da:46:05:70:0f:13:
9a:ee:01:20:4f:dd:86:20:90:4d:f4:fc:72:99:c7:
d6:74:b8:b8:c1:49:b8:56:5a:8c:1b:da:8e:89:73:
04:49:80:23:9c:1c:52:f5:fa:3e:af:a3:5c:16:0f:
b3:be:46:69:b3:e3:01:e3:11:c2:6a:b2:ca:2d:d1:
c9:82:ac:8f:c8:f8:b6:75:35:8e:76:5c:db:38:9c:
ca:c4:70:73:50:27:90:54:c8:89:a8:7b:4b:3a:3a:
51:67:82:38:ae:96:9e:58:a1:2f:d9:ed:4f:c9:0d:
da:5e:c2:60:73:05:d1:5e:62:40:cd:c9:45:24:aa:
fe:3c:1e:23:a3:50:38:e8:e3:f0:b8:d6:7e:c8:18:
7d:ed:aa:fd:e6:7a:2a:3f:d0:f8:fb:59:17:f4:19:
d7:e3:0f:1a:43:83:12:a2:43:a0:e7:a4:05:29:d5:
44:a1:e3:ef:86:08:94:1e:48:4d:38:1d:7e:f5:5b:
82:56:07:bb:dd:af:fb:31:65:4c:cb:c2:aa:a9:3d:
fc:92:0a:2a:11:a1:04:f3:52:35:c5:c0:e5:f8:da:
f1:ff:a9:83:ad:3e:c5:6f:19:ab:a6:56:9c:c3:e5:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0A:6E:06:7A:E0:4A:46:06:A7:86:FA:D7:66:DF:93:A1:67:79:73
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/PgpuBnrgSkYGp4b612bfk6FneXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.211.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5f:de:9b:ae:62:e3:2e:94:94:06:01:e2:ce:1a:43:5b:c7:
2d:dc:47:02:13:9b:81:1c:2c:14:4e:9c:2f:3a:40:c8:3c:c3:
64:83:90:9f:ad:2b:16:f5:6c:06:ca:4c:05:81:ac:ff:5b:71:
d5:e6:83:c5:ab:d0:9d:6b:8b:f4:fa:a8:16:82:7c:d9:4d:b6:
e7:15:24:cd:47:cc:c0:bf:f5:b3:3e:ed:82:c7:ce:53:d2:02:
a4:a6:73:15:5b:a5:2d:18:c8:c4:a3:00:fd:33:23:d1:bd:bf:
fd:aa:6b:ff:bf:88:fc:77:92:5e:48:6d:84:83:49:b3:7f:c3:
e0:eb:bb:a5:b2:7a:28:e1:2e:8f:31:52:90:a6:82:60:c4:28:
da:83:00:50:15:02:30:ff:21:9c:55:b4:42:1d:93:52:dc:d1:
5c:48:57:0c:bf:d2:d1:8e:67:08:5c:8b:1a:24:47:4f:10:90:
13:a6:e1:66:af:d2:1c:d6:cd:94:e2:7e:1b:06:70:fc:ad:ae:
af:a4:bc:8d:f2:6e:7e:f0:49:f3:f9:e7:bb:fd:a7:06:f4:a6:
bc:7f:54:8f:0d:96:64:55:8d:67:ef:7b:66:b5:50:52:95:96:
e7:70:e3:64:30:58:62:64:a7:50:06:d5:61:f5:36:f0:d4:7c:
f5:23:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:50:29 2025 by rpki-client