Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7L55_N-GGVHljL-QAz3N994ge3U.roa
File: 7L55_N-GGVHljL-QAz3N994ge3U.roa (raw, json)
Hash identifier: 8vJS19eA7pJ+5JovWbPE5l2PcUsYpz2/bztFKRobunE=
Subject key identifier: EC:BE:79:FC:DF:86:19:51:E5:8C:BF:90:03:3D:CD:F7:DE:20:7B:75
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018EC5DB6082EA21DA6A6E23F3161C26036F
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7L55_N-GGVHljL-QAz3N994ge3U.roa
Signing time: Wed 10 Apr 2024 02:34:32 +0000
ROA not before: Wed 10 Apr 2024 02:34:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 193.108.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 02:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c5:db:60:82:ea:21:da:6a:6e:23:f3:16:1c:26:03:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Apr 10 02:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecbe79fcdf861951e58cbf90033dcdf7de207b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:6b:eb:11:40:13:3b:e6:b8:fa:aa:1d:20:
26:62:dd:1d:bc:ed:cc:c7:87:44:03:aa:bc:41:7a:
b0:37:eb:73:10:05:37:cc:c1:52:bb:f3:06:86:9c:
dd:3a:5a:f9:66:ba:73:8e:d2:5f:90:ed:f6:aa:b4:
65:b3:4f:db:e6:ac:d6:31:90:a8:25:91:9e:db:69:
51:f7:a7:76:e2:3f:95:fa:35:71:28:d0:35:e4:4c:
20:0f:80:b0:63:16:49:76:a1:a8:27:b3:6f:74:3b:
22:e6:4f:4b:d7:bc:c4:a7:8a:77:bb:ed:a7:d1:03:
17:a0:66:53:7f:28:33:bf:a7:5e:2e:ca:8a:6a:c0:
98:12:ee:c4:55:f2:12:65:38:35:b2:b4:59:9f:66:
9e:8e:af:fc:32:f2:bd:26:05:b6:f4:e0:93:fa:63:
2e:c8:3d:92:d5:5c:87:a7:01:e3:bc:f8:4c:50:51:
78:d4:eb:39:8b:61:e4:55:0f:bd:f9:4c:31:70:38:
eb:55:02:7b:ce:d4:ae:22:51:4e:b1:bb:71:9c:ff:
1e:55:0f:a6:b9:d6:e0:78:b9:77:39:50:69:6a:6c:
ad:0e:e1:55:7f:d4:55:36:a0:a2:dc:93:65:7b:e0:
e4:13:e4:b8:b0:7a:b4:5b:54:9d:49:b7:91:7c:ec:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:79:FC:DF:86:19:51:E5:8C:BF:90:03:3D:CD:F7:DE:20:7B:75
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7L55_N-GGVHljL-QAz3N994ge3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.104.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b3:b0:32:b2:a4:d8:e5:e7:4e:e9:e3:3c:9f:98:fd:3e:f2:
04:38:4c:85:6c:e3:f6:6f:02:df:a6:b1:65:ca:b9:81:ce:1b:
5f:95:9f:53:6c:94:d2:3e:22:5f:27:c5:d8:e7:5f:32:c8:db:
1a:fd:04:7e:5f:11:59:f3:8c:97:19:3a:3c:40:02:9a:6e:c9:
43:93:67:ea:9a:e6:9a:1d:33:92:aa:f3:cd:fe:fb:e2:66:c5:
a4:d0:5a:51:e5:f9:f6:b2:67:db:bc:84:37:fa:e4:1a:e6:20:
59:d7:81:3b:09:d8:6c:0a:d8:0b:f7:c9:04:5d:eb:ba:ff:4c:
9d:91:f4:7c:42:15:57:6a:9a:13:d9:a2:91:80:40:a2:91:6f:
5c:79:8d:ac:4c:a3:c2:c9:4e:1d:48:cb:29:84:5c:f7:39:00:
4a:bb:f3:7d:6b:8d:7e:50:d5:14:60:81:b1:44:ee:88:35:9f:
41:ab:c3:58:1f:9a:f7:2a:81:0c:cd:c3:bb:2d:43:e2:98:40:
1a:77:12:b5:12:ae:84:55:0b:4b:be:4d:f5:bc:96:36:64:b7:
d4:c3:b3:0a:cc:5c:0c:19:c7:7f:26:16:ec:59:d3:49:ea:68:
3c:23:ec:4c:2e:c4:83:46:d6:28:85:fe:a2:e2:48:29:d1:d8:
28:34:b9:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7F22CC6iHaam4j8xYcJgNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjQwNDEwMDIzNDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2JlNzlmY2RmODYxOTUxZTU4Y2JmOTAwMzNkY2RmN2RlMjA3Yjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxpr6xFAEzvmuPqqHSAmYt0dvO3M
x4dEA6q8QXqwN+tzEAU3zMFSu/MGhpzdOlr5ZrpzjtJfkO32qrRls0/b5qzWMZCo
JZGe22lR96d24j+V+jVxKNA15EwgD4CwYxZJdqGoJ7NvdDsi5k9L17zEp4p3u+2n
0QMXoGZTfygzv6deLsqKasCYEu7EVfISZTg1srRZn2aejq/8MvK9JgW29OCT+mMu
yD2S1VyHpwHjvPhMUFF41Os5i2HkVQ+9+UwxcDjrVQJ7ztSuIlFOsbtxnP8eVQ+m
udbgeLl3OVBpamytDuFVf9RVNqCi3JNle+DkE+S4sHq0W1SdSbeRfOxUFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOy+efzfhhlR5Yy/kAM9zffeIHt1MB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvN0w1NV9OLUdHVkhsakwtUUF6M045OTRnZTNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWxoMA0G
CSqGSIb3DQEBCwUAA4IBAQA2s7AysqTY5edO6eM8n5j9PvIEOEyFbOP2bwLfprFl
yrmBzhtflZ9TbJTSPiJfJ8XY518yyNsa/QR+XxFZ84yXGTo8QAKabslDk2fqmuaa
HTOSqvPN/vviZsWk0FpR5fn2smfbvIQ3+uQa5iBZ14E7CdhsCtgL98kEXeu6/0yd
kfR8QhVXapoT2aKRgECikW9ceY2sTKPCyU4dSMsphFz3OQBKu/N9a41+UNUUYIGx
RO6INZ9Bq8NYH5r3KoEMzcO7LUPimEAadxK1Eq6EVQtLvk31vJY2ZLfUw7MKzFwM
Gcd/JhbsWdNJ6mg8I+xMLsSDRtYohf6i4kgp0dgoNLnk
-----END CERTIFICATE-----
Generated at Thu May 9 03:32:43 2024 by rpki-client on console-fra.rpki-client.org