Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/dXSIQPN2rFc4uFtD5P0kOpJj2as.roa
File: dXSIQPN2rFc4uFtD5P0kOpJj2as.roa (raw, json)
Hash identifier: vPjh1dDmlYLjmHfqAy2izA0QGEyAvsp/m08nuegyGz4=
Subject key identifier: 75:74:88:40:F3:76:AC:57:38:B8:5B:43:E4:FD:24:3A:92:63:D9:AB
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018F5B40FCA8D6E494C21FCB12F83CFAB0B3
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/dXSIQPN2rFc4uFtD5P0kOpJj2as.roa
Signing time: Thu 09 May 2024 02:48:56 +0000
ROA not before: Thu 09 May 2024 02:48:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.108.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 10:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5b:40:fc:a8:d6:e4:94:c2:1f:cb:12:f8:3c:fa:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: May 9 02:48:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75748840f376ac5738b85b43e4fd243a9263d9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8f:4d:d4:99:a1:77:0d:92:c5:9f:11:49:bd:
0e:61:50:5e:b5:20:c5:f3:34:e4:c9:94:ff:b0:63:
24:92:5a:bf:2e:31:7e:ee:e3:42:5a:6b:b6:c2:7c:
00:90:ee:ea:1e:ae:61:06:c3:df:17:5a:ae:e4:5d:
35:3c:b5:3f:d2:f4:d4:ed:03:b6:6a:fe:1a:5a:2d:
2b:b3:c4:34:2f:e3:7d:d8:ac:2b:d8:28:64:c6:05:
1c:bc:39:6e:5e:ee:f4:75:9d:a0:12:aa:f4:03:27:
fa:b2:7f:19:60:a4:37:57:ae:34:53:2e:ec:c3:ed:
4a:af:b8:7d:73:4e:87:19:0e:7c:ce:b9:d9:ae:9f:
ea:f7:a1:3a:53:13:d4:02:b8:6a:1c:fc:b4:78:31:
79:3d:de:97:99:cd:4c:e4:5a:92:f6:8e:b0:d2:93:
bb:dd:4a:72:3e:9f:18:9f:99:eb:96:bf:20:a8:84:
e6:55:4a:38:80:ec:de:a8:76:1b:fb:1c:eb:67:d0:
7f:1d:72:71:c0:66:9a:4e:06:55:95:21:3a:05:d8:
14:3b:1c:8b:cc:35:95:77:fc:d4:65:86:50:ed:90:
81:a3:ee:23:d9:19:e0:e7:85:15:33:8a:d3:f1:2c:
f5:24:bf:b4:8f:42:ce:51:17:77:1a:6d:ae:1d:36:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:74:88:40:F3:76:AC:57:38:B8:5B:43:E4:FD:24:3A:92:63:D9:AB
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/dXSIQPN2rFc4uFtD5P0kOpJj2as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7f:a7:0e:33:62:b9:74:d7:49:1f:2c:3c:fd:6d:0c:90:db:
15:cc:45:68:06:56:f4:6e:02:20:6b:36:2a:66:c4:82:73:18:
9b:ed:62:3a:4a:90:6b:4e:c1:88:96:a2:73:e8:1e:51:89:93:
84:0a:e8:3b:18:5f:31:d4:ea:cc:29:3b:e2:de:0a:0e:b3:bd:
2e:47:85:59:42:7e:91:33:9f:27:e3:67:ca:7e:90:93:53:c9:
93:93:f2:2f:1a:d1:0e:44:20:b6:e7:aa:b7:f4:1e:0a:a3:5f:
6d:28:77:4f:fb:57:d9:1a:b4:9c:22:b6:7e:29:b7:68:70:ec:
b6:24:9a:12:e6:db:df:59:0a:d4:a9:00:2e:71:33:9a:6b:9e:
20:e8:c2:c1:b5:ee:2e:84:09:65:3e:83:55:c7:ce:b4:0a:bc:
e4:0f:67:74:8e:92:39:bf:57:74:ab:4a:04:f3:42:a7:3e:0d:
52:b7:08:5c:47:c1:2f:b4:6a:6f:07:2b:65:87:10:1a:7c:57:
4b:3a:93:58:1b:c5:17:2d:3c:2b:2f:39:47:d2:20:6e:be:77:
8a:fe:00:13:ae:21:e0:fe:a9:4e:f5:1f:ce:f4:4e:09:e2:94:
92:9a:38:cf:83:2e:fb:2c:30:0d:09:33:87:d6:60:21:62:91:
72:aa:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org