Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DgI7Bnuywms2O2bWth86t31BbB0.roa
File: DgI7Bnuywms2O2bWth86t31BbB0.roa (raw, json)
Hash identifier: 0aDVy3xV1uNInys5tVo/6Ix3Zva6/Rzh3y2LLFbhkSE=
Subject key identifier: 0E:02:3B:06:7B:B2:C2:6B:36:3B:66:D6:B6:1F:3A:B7:7D:41:6C:1D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01856CAF25D44905A258FA1B38E1A495E941
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DgI7Bnuywms2O2bWth86t31BbB0.roa
Signing time: Sun 01 Jan 2023 09:34:55 +0000
ROA not before: Sun 01 Jan 2023 09:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 07:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:25:d4:49:05:a2:58:fa:1b:38:e1:a4:95:e9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 09:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e023b067bb2c26b363b66d6b61f3ab77d416c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:da:61:0d:f5:11:86:ad:21:7f:fe:19:f9:
69:33:de:8b:c6:29:80:d1:5f:23:5b:8a:a2:85:03:
28:bc:d5:d9:e7:73:cd:dd:b8:43:a5:b7:1c:2a:b3:
bf:f6:9f:d1:fb:8d:c3:60:15:b7:c8:0c:74:28:49:
09:54:c6:50:dd:9c:f0:f6:c2:73:92:d5:98:ec:46:
8a:e8:fc:e2:a0:a8:1a:6a:0a:32:84:dc:97:8f:8e:
f7:53:b9:7c:b2:61:61:87:ef:d8:5b:6c:be:a5:25:
9f:0a:c5:07:17:15:7e:3a:6d:65:a5:29:89:c1:84:
9e:87:ee:76:da:9d:c1:3c:2b:19:9c:ee:76:04:57:
5a:f4:ec:b8:9e:a0:b3:85:74:54:4c:a1:89:09:48:
73:80:cd:3e:ec:b1:b5:54:52:f8:f9:0b:fd:bf:53:
ab:52:36:38:c0:b8:97:0a:c3:e9:76:1c:1a:8b:c5:
fd:92:c9:d2:8d:c7:cb:b2:0a:13:2e:e4:8f:b7:04:
3e:14:7d:94:1f:ec:88:c0:1a:13:bd:b0:35:4a:9c:
42:61:62:de:3e:0d:58:94:62:8a:ac:30:70:8e:a7:
99:1e:8d:e4:b0:c7:3a:e8:c3:d7:0f:fe:7a:66:15:
ea:64:08:b9:0b:cd:87:77:5c:bf:0a:71:f3:d9:56:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:3B:06:7B:B2:C2:6B:36:3B:66:D6:B6:1F:3A:B7:7D:41:6C:1D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DgI7Bnuywms2O2bWth86t31BbB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:00:e9:56:fc:15:44:38:49:1f:9c:93:07:ef:0e:4c:1d:7e:
6d:d0:4d:a6:3f:c1:a8:99:32:64:72:e1:8e:60:27:10:eb:df:
fd:1c:32:4c:ee:ee:e8:89:07:3b:01:32:80:8c:26:4b:d1:11:
15:73:fe:52:19:49:6b:fd:60:36:9e:1d:96:3c:73:97:6d:cf:
89:4a:3b:21:ab:8c:1d:82:fd:e1:f2:89:34:d6:41:c4:14:39:
c5:67:0e:6e:2f:e7:21:c3:f0:ff:66:4a:a9:bc:de:8f:6f:2f:
d3:1c:3d:e6:3b:38:ae:e3:fa:2d:b0:3b:b1:96:7f:0a:e1:9c:
27:88:d5:33:fc:4b:ff:4f:34:9f:59:b7:90:65:51:19:96:c8:
6c:95:41:9e:47:c7:68:ae:cc:48:c7:83:5f:3e:a2:e0:52:03:
a7:ec:72:0f:fc:fb:e9:76:5d:79:8c:2b:4c:b5:48:77:2e:9e:
ed:85:6a:70:3d:fb:2b:48:23:a7:59:b4:9b:28:e1:14:9c:03:
37:9b:08:0d:e4:5d:ed:12:06:45:2f:81:7d:2c:82:99:e4:0e:
b8:82:b8:d9:b1:c7:18:12:80:86:d4:94:3a:83:c2:6c:c1:d4:
b0:77:21:be:e0:19:78:60:f4:a3:63:fc:54:f3:2f:1b:06:20:
70:b5:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org