Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/4_3UYgP0olVDkgVqKWBc7F-XdVI.roa
File: 4_3UYgP0olVDkgVqKWBc7F-XdVI.roa (raw, json)
Hash identifier: P91Vl6PtUeefIRyQV0Ijpi3qlI9KAiexwr78AmysiGY=
Subject key identifier: E3:FD:D4:62:03:F4:A2:55:43:92:05:6A:29:60:5C:EC:5F:97:75:52
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 018B471FC65D58770851A6A238D92D4B96CC
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/4_3UYgP0olVDkgVqKWBc7F-XdVI.roa
Signing time: Thu 19 Oct 2023 08:49:06 +0000
ROA not before: Thu 19 Oct 2023 08:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 193.104.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:1f:c6:5d:58:77:08:51:a6:a2:38:d9:2d:4b:96:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Oct 19 08:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3fdd46203f4a2554392056a29605cec5f977552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:54:a7:89:8c:16:b0:bf:e1:8a:4f:50:c3:
7f:e6:57:97:e2:54:d9:30:9c:0f:f1:28:a3:df:82:
6c:0b:3a:e0:cc:7e:ac:38:3f:67:09:42:e5:3d:ae:
2f:86:38:66:02:6c:07:d4:57:1f:37:bd:82:0f:2d:
2b:3e:66:cc:ee:94:e3:80:bd:20:30:83:88:78:4a:
ea:56:24:1d:d5:27:fe:c8:9f:68:e3:f4:86:47:0d:
c4:b2:ae:5f:f9:d2:61:d2:ca:2a:31:5b:bb:e4:f2:
6e:3b:bd:21:df:8e:90:c9:e3:0c:77:76:34:a2:00:
73:b1:99:e2:d9:6d:8a:be:96:a8:70:95:17:41:c0:
3f:c7:3a:62:7b:d0:97:8d:81:21:70:07:3c:fe:f5:
6c:02:e1:43:5d:87:2f:df:fd:a1:15:0b:58:4f:09:
c5:16:9d:7d:94:a9:7d:f4:0d:45:d1:37:98:0b:54:
1d:44:f8:34:d7:65:74:ec:23:22:9e:bd:43:df:a8:
c9:d8:43:1d:a3:ca:d2:38:f0:2b:80:f6:d1:07:e9:
ab:89:b2:b9:d9:fb:37:8e:ee:83:ce:cc:f5:2f:75:
4a:99:d5:e0:b4:90:20:39:07:f6:94:84:77:37:78:
c7:b6:1c:b6:48:72:f4:b2:c7:88:60:03:d9:7b:0c:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FD:D4:62:03:F4:A2:55:43:92:05:6A:29:60:5C:EC:5F:97:75:52
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/4_3UYgP0olVDkgVqKWBc7F-XdVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.167.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1b:4b:84:a8:fc:6f:68:0a:35:51:0b:d4:99:2c:53:f5:ea:
c4:5c:92:60:50:cd:17:8f:e9:cd:3a:82:09:97:b9:c6:d0:7d:
84:1f:38:40:ac:7a:ea:a8:e1:83:37:93:80:76:ba:c8:8a:a5:
7c:73:54:a5:72:23:d2:9a:a4:28:be:bb:64:9a:6d:ab:e7:e4:
94:57:ed:13:0e:a4:55:9d:f6:3f:b6:88:89:d8:a5:68:e6:0e:
b5:4b:ef:73:82:cf:b9:03:e7:75:aa:65:e9:ae:a3:34:81:d5:
c3:05:d2:d8:74:75:34:26:0e:6e:25:65:e1:c2:09:a7:ad:d3:
ba:5e:8f:fe:43:44:b0:d0:6c:7e:d3:20:c0:1d:fb:84:c4:d4:
d4:d7:86:8e:e6:cd:fc:c1:f4:a5:2c:7e:23:d2:4c:9e:e5:b9:
8e:46:25:2d:ee:7a:6a:df:a1:50:74:cc:af:2c:97:bd:e5:f7:
36:06:12:98:5c:5b:36:b6:21:be:c4:74:d0:ab:16:97:a2:11:
79:13:30:e3:75:26:48:f9:b5:b2:ba:29:66:6f:b1:36:84:ac:
4c:48:94:f6:08:3a:52:fb:a3:da:62:26:62:0b:15:ff:72:0a:
22:11:00:e7:a3:56:66:eb:55:8a:5c:3b:e3:a8:4c:71:5c:63:
25:3e:94:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtHH8ZdWHcIUaaiONktS5bMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTQwMzQ4NDYzYzYwY2U5ZmM2OTQwNjBhMzdmNDY4MzA5
M2YwNDUwHhcNMjMxMDE5MDg0OTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2ZkZDQ2MjAzZjRhMjU1NDM5MjA1NmEyOTYwNWNlYzVmOTc3NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqNUp4mMFrC/4YpPUMN/5leX4lTZ
MJwP8Sij34JsCzrgzH6sOD9nCULlPa4vhjhmAmwH1FcfN72CDy0rPmbM7pTjgL0g
MIOIeErqViQd1Sf+yJ9o4/SGRw3Esq5f+dJh0soqMVu75PJuO70h346QyeMMd3Y0
ogBzsZni2W2KvpaocJUXQcA/xzpie9CXjYEhcAc8/vVsAuFDXYcv3/2hFQtYTwnF
Fp19lKl99A1F0TeYC1QdRPg012V07CMinr1D36jJ2EMdo8rSOPArgPbRB+mribK5
2fs3ju6Dzsz1L3VKmdXgtJAgOQf2lIR3N3jHthy2SHL0sseIYAPZewy3gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOP91GID9KJVQ5IFailgXOxfl3VSMB8GA1UdIwQY
MBaAFDTkA0hGPGDOn8aUBgo39Ggwk/BFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYt
MWI5OWZkMDk3NjNlLzEvNF8zVVlnUDBvbFZEa2dWcUtXQmM3Ri1YZFZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYtMWI5OWZkMDk3NjNl
LzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWinMA0G
CSqGSIb3DQEBCwUAA4IBAQBoG0uEqPxvaAo1UQvUmSxT9erEXJJgUM0Xj+nNOoIJ
l7nG0H2EHzhArHrqqOGDN5OAdrrIiqV8c1SlciPSmqQovrtkmm2r5+SUV+0TDqRV
nfY/toiJ2KVo5g61S+9zgs+5A+d1qmXprqM0gdXDBdLYdHU0Jg5uJWXhwgmnrdO6
Xo/+Q0Sw0Gx+0yDAHfuExNTU14aO5s38wfSlLH4j0kye5bmORiUt7npq36FQdMyv
LJe95fc2BhKYXFs2tiG+xHTQqxaXohF5EzDjdSZI+bWyuilmb7E2hKxMSJT2CDpS
+6PaYiZiCxX/cgoiEQDno1Zm61WKXDvjqExxXGMlPpSM
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:39 2024 by rpki-client on console-ams.rpki-client.org