Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/PuHDhPnXmYcz9K3G8UesUBUPXWM.roa
File: PuHDhPnXmYcz9K3G8UesUBUPXWM.roa (raw, json)
Hash identifier: kGXxIulkI1z5gBS6XNt50y+OJLgOtTppHfjn5NodXJE=
Subject key identifier: 3E:E1:C3:84:F9:D7:99:87:33:F4:AD:C6:F1:47:AC:50:15:0F:5D:63
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 01856BDC8912188110D072AEE2C585A97763
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/PuHDhPnXmYcz9K3G8UesUBUPXWM.roa
Signing time: Sun 01 Jan 2023 05:44:53 +0000
ROA not before: Sun 01 Jan 2023 05:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208290
IP address blocks: 45.148.209.0/24 maxlen: 24
45.148.210.0/24 maxlen: 24
45.148.211.0/24 maxlen: 24
45.148.208.0/24 maxlen: 24
2a10:9f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:89:12:18:81:10:d0:72:ae:e2:c5:85:a9:77:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Jan 1 05:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ee1c384f9d7998733f4adc6f147ac50150f5d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:88:3c:53:2a:f9:0d:9d:f7:1b:41:a7:91:
f5:7a:32:74:78:e5:cb:49:8d:c8:65:ce:04:de:6a:
5d:e6:c1:32:05:df:09:1d:74:f1:ff:99:13:8e:7b:
b7:a5:46:a2:d8:99:37:20:e0:03:5c:e4:b0:31:95:
f2:69:10:e6:b1:f6:77:d6:e1:f1:b3:7d:d4:b0:e2:
ed:a4:50:b1:62:c7:85:ac:e1:60:0f:14:fd:7f:3e:
52:da:aa:5f:3e:dc:67:6d:6c:26:fe:88:c3:bb:f7:
95:dc:45:92:df:54:34:34:f1:70:06:54:29:d7:f6:
e3:df:9a:f8:a7:b5:1a:2a:3d:61:bb:ea:29:be:a1:
ad:21:93:f1:82:cb:64:9a:cd:36:89:5c:23:35:e1:
49:63:ae:07:42:67:e0:a2:69:1b:38:24:91:68:6b:
06:a0:35:67:f5:85:d8:f6:a7:8d:f7:88:b9:e0:e5:
b0:a5:b8:6d:c2:9a:e8:20:4c:8c:10:5b:6e:9d:0a:
7a:19:a8:02:70:b7:6d:f9:e6:f5:08:e9:fb:41:43:
a0:72:8b:06:2a:f0:a7:4e:1b:70:4b:f7:e7:3f:24:
72:1a:72:a3:6f:20:f5:92:bf:12:e0:73:a5:be:ef:
15:80:b5:5e:11:13:b4:e1:4f:cf:71:e1:ff:e9:20:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:C3:84:F9:D7:99:87:33:F4:AD:C6:F1:47:AC:50:15:0F:5D:63
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/PuHDhPnXmYcz9K3G8UesUBUPXWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.208.0/22
IPv6:
2a10:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
06:a4:a7:23:40:c6:ab:6d:d1:f0:0c:05:cd:f2:c8:0a:38:6f:
e7:19:61:57:13:1c:54:1d:6e:15:33:af:4e:82:f8:7d:72:f0:
2b:94:0e:a6:01:69:3c:3c:c6:71:8b:1a:ef:6e:ce:d1:ae:14:
63:06:4c:fd:e9:47:ae:5a:b3:92:2f:47:fd:b6:bb:5a:0b:23:
5b:05:04:46:1f:23:20:c2:dd:25:5b:13:06:96:3a:17:a1:9c:
4d:ca:94:52:6f:25:2f:e2:9a:45:ef:4f:32:60:0b:9a:a0:51:
19:8d:e7:d2:36:56:1a:93:d6:02:28:6f:4d:61:24:f6:40:11:
9d:01:f1:5a:b5:0b:f8:3b:be:be:18:cd:3b:1e:bd:b8:f3:d9:
7f:47:8d:c9:c9:65:63:2c:e9:51:05:d1:26:8a:6a:4c:bb:c3:
b4:e1:56:36:ea:08:90:1b:53:73:81:81:18:de:db:2c:82:78:
40:f6:fe:d7:80:7c:a5:b2:2e:6d:98:bd:1a:44:26:2c:94:07:
e0:af:97:55:bf:e8:eb:8b:44:68:de:c5:44:6c:3c:8f:cd:2a:
a7:d2:35:b9:e1:a2:b0:a4:90:6e:f7:96:b1:21:30:cf:64:14:
43:76:58:00:e5:6b:0b:79:83:9a:53:74:8c:3c:44:1b:4f:36:
34:de:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:51 2024 by rpki-client on console-ams.rpki-client.org