Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/U_80so1cxIjB1CY5wEAjMUzcU1U.roa
File: U_80so1cxIjB1CY5wEAjMUzcU1U.roa (raw, json)
Hash identifier: 3/aXBnegS5cJe5yvggzapKu2TNcl7NbZhw/UIAza59o=
Subject key identifier: 53:FF:34:B2:8D:5C:C4:88:C1:D4:26:39:C0:40:23:31:4C:DC:53:55
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 0188BE1BA7F67B96163E59850DC05FB0F059
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/U_80so1cxIjB1CY5wEAjMUzcU1U.roa
Signing time: Thu 15 Jun 2023 08:11:03 +0000
ROA not before: Thu 15 Jun 2023 08:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48789
IP address blocks: 193.104.229.0/24 maxlen: 24
2a12:6cc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:1b:a7:f6:7b:96:16:3e:59:85:0d:c0:5f:b0:f0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jun 15 08:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53ff34b28d5cc488c1d42639c04023314cdc5355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:5c:9d:34:75:e0:01:c7:26:38:04:fe:4d:
10:7e:dd:88:be:4a:e3:1a:a3:b6:0f:a4:d8:86:f6:
57:04:30:65:ca:a6:f5:26:a8:89:8a:b3:f7:04:05:
25:21:f3:90:6a:30:1d:94:12:60:27:4e:b8:1a:ff:
c3:c4:a1:3c:65:5e:4a:1e:0c:85:09:fc:f4:3b:e2:
78:e5:43:8e:72:ce:2e:57:ef:fb:6f:49:ca:72:72:
cc:b0:38:82:3e:35:40:de:95:61:1d:61:39:cd:49:
89:88:01:ff:f1:37:46:45:aa:97:11:38:c0:b9:03:
b5:16:84:fb:99:3f:ad:c1:07:d2:39:57:f1:58:03:
6b:c0:09:11:ac:2e:a2:cb:80:bf:39:02:d5:98:27:
ec:a7:9d:1c:ae:01:13:67:f4:5a:d9:05:0b:42:76:
4a:fe:b2:59:52:86:c6:e0:f4:86:93:f6:69:a2:29:
c4:6e:50:6f:cb:20:31:7b:00:e3:0b:40:bd:33:7c:
ab:9b:6f:c0:76:ff:9f:27:3a:f3:fc:83:3e:f0:71:
51:f6:db:8c:e7:a0:2c:52:88:de:c4:44:3f:96:ab:
43:90:5d:df:9b:2e:a0:fc:53:37:93:d8:8f:87:c4:
ba:b5:21:8a:b4:0f:25:55:eb:48:38:97:7c:86:b1:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:34:B2:8D:5C:C4:88:C1:D4:26:39:C0:40:23:31:4C:DC:53:55
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/U_80so1cxIjB1CY5wEAjMUzcU1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.229.0/24
IPv6:
2a12:6cc0::/32
Signature Algorithm: sha256WithRSAEncryption
47:44:94:91:4e:5f:ce:79:e9:22:54:36:c9:bd:70:17:66:95:
ca:10:c7:fb:00:6c:74:21:5b:16:26:b5:36:21:c1:62:31:74:
09:d5:a3:3e:ab:0b:75:8c:77:f7:b2:7d:ee:26:a2:31:8a:5e:
77:b9:77:67:e4:ba:cf:27:53:1f:fa:77:0e:32:43:8b:83:1f:
32:6f:ed:07:5f:e2:59:51:2c:a5:3c:07:49:d1:fa:d6:11:50:
13:ea:01:8a:07:67:31:14:0a:12:37:f8:16:0a:af:4a:9b:53:
90:af:3c:f6:30:e8:e6:44:91:48:c7:18:f1:1a:92:95:9e:e4:
b9:55:c8:ff:b4:50:42:d6:22:fd:c7:fd:13:7f:ec:b8:a4:44:
1b:de:ea:3d:2e:14:80:55:e1:46:6d:01:df:c8:bc:de:fd:56:
56:44:33:8b:c1:63:af:6a:5c:cf:cf:a3:02:91:7f:37:e4:bd:
8a:6c:d8:f4:ce:1e:44:6f:8a:d8:34:43:6f:34:a3:cb:82:05:
7a:83:58:62:dc:78:ec:96:77:f2:9c:93:bc:e6:dd:d0:b5:54:
3b:7f:90:5b:8e:c0:f8:21:b7:8b:e9:15:74:a5:15:38:b3:2a:
7a:f3:9b:16:f0:a8:ea:4e:6e:36:77:0f:50:bb:99:27:f3:22:
71:e0:2b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:35 2024 by rpki-client on console-fra.rpki-client.org