Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/03k1oq3nbC-8btzf-f6ng_K0SXM.roa
File: 03k1oq3nbC-8btzf-f6ng_K0SXM.roa (raw, json)
Hash identifier: CqqnJd5b7lutvB0LQGyi5CDj7BWPrLVo+9hF+7C0sD8=
Subject key identifier: D3:79:35:A2:AD:E7:6C:2F:BC:6E:DC:DF:F9:FE:A7:83:F2:B4:49:73
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 018CC6B81DC07057B69E13A1E1BDFA453AAD
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/03k1oq3nbC-8btzf-f6ng_K0SXM.roa
Signing time: Mon 01 Jan 2024 20:30:04 +0000
ROA not before: Mon 01 Jan 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204873
IP address blocks: 193.104.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 21:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:1d:c0:70:57:b6:9e:13:a1:e1:bd:fa:45:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jan 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d37935a2ade76c2fbc6edcdff9fea783f2b44973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:1a:7c:59:f1:a8:8e:e4:96:a2:f4:a5:68:
1e:4c:98:f8:a2:16:a4:0a:f8:b7:24:9d:35:22:40:
03:f1:5f:19:d7:84:f4:78:2b:79:c3:53:fe:eb:51:
fb:0c:47:0a:7b:14:8c:7f:d8:de:c4:3e:1a:ac:63:
4d:09:58:b2:00:26:40:ce:1b:4b:83:bd:35:46:31:
7c:d8:c6:da:b4:0f:9e:0a:c8:53:e0:0a:cd:84:40:
3e:47:48:b3:63:5d:e4:71:e4:11:0e:7a:a6:90:45:
8f:39:58:ac:c4:82:2c:09:52:41:0f:22:ee:61:67:
d3:e0:ea:85:f6:ba:3d:47:94:6d:80:b8:f0:41:7c:
41:a1:0a:ed:36:20:bf:9f:a1:23:24:5c:5d:0c:c2:
7f:cf:4e:3f:f5:07:d7:6e:f3:0d:0d:2c:09:9a:96:
35:65:a4:46:03:4f:ef:1b:6b:0f:b9:f2:71:01:e3:
fb:54:9a:e4:4a:39:5d:ed:b9:6b:91:a2:af:0a:bf:
e8:94:e4:6c:ab:29:8f:af:3f:37:bc:34:36:cb:c8:
7d:a8:1a:28:c1:88:50:74:27:ae:64:be:3c:f5:0a:
ee:69:61:4b:02:7e:5e:b8:25:16:20:2a:18:ae:88:
57:af:70:e7:a4:83:6d:18:5a:b7:1d:23:ee:5f:f4:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:35:A2:AD:E7:6C:2F:BC:6E:DC:DF:F9:FE:A7:83:F2:B4:49:73
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/03k1oq3nbC-8btzf-f6ng_K0SXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:63:ac:bb:bd:e1:e8:20:c0:b9:33:f9:3c:2a:70:35:82:ef:
4c:ae:65:f0:a6:e1:9c:38:08:7a:d3:c4:80:c9:f3:4b:d2:a0:
15:52:0a:47:e1:ca:ba:c1:03:75:9d:aa:4c:ae:99:77:8b:d1:
aa:85:ca:73:4f:5c:ce:d4:a4:26:b2:e0:d1:9a:58:36:90:8e:
43:53:b9:84:c2:bb:3f:9a:43:f6:55:2e:9c:ff:f4:27:75:e3:
1f:96:c7:88:ae:cb:9e:9c:37:d6:cd:d7:b3:bb:09:83:f7:02:
6c:11:03:af:93:99:b9:29:7d:9f:e3:01:f8:ff:c1:6e:e5:2d:
df:64:fe:4b:02:02:46:06:eb:b0:8d:ad:ba:2b:e0:63:de:9f:
42:12:3e:d5:ee:bf:33:2f:cc:77:64:38:60:97:4f:65:33:e4:
07:9f:50:b3:6e:0a:23:1f:d3:72:d4:63:ca:89:c2:c9:a2:29:
06:37:ed:bd:8c:ea:9d:ce:78:3c:88:94:01:40:e2:ef:18:a5:
66:39:f3:11:2f:9c:85:b6:ae:0a:de:01:5d:a8:6a:47:5a:83:
67:3c:b2:3e:cc:fb:f6:be:32:51:e3:6f:88:4d:f6:97:cc:bc:
b7:00:60:6f:ce:54:5a:dd:b5:4a:80:03:83:c4:3c:84:ce:6f:
03:31:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 00:45:29 2024 by rpki-client on console-ams.rpki-client.org