Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/w3mN3ZqUlBV_Wf5qkfs4nBEp5vY.roa
File: w3mN3ZqUlBV_Wf5qkfs4nBEp5vY.roa (raw, json)
Hash identifier: FFvI1nc3nPmb8RCgg17gmFotC7Aoiu8jeUZc12RyqmY=
Subject key identifier: C3:79:8D:DD:9A:94:94:15:7F:59:FE:6A:91:FB:38:9C:11:29:E6:F6
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 018CC4924EC70003C266CA4C0EE03C38B7AE
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/w3mN3ZqUlBV_Wf5qkfs4nBEp5vY.roa
Signing time: Mon 01 Jan 2024 10:29:31 +0000
ROA not before: Mon 01 Jan 2024 10:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50209
IP address blocks: 193.104.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4e:c7:00:03:c2:66:ca:4c:0e:e0:3c:38:b7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Jan 1 10:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3798ddd9a9494157f59fe6a91fb389c1129e6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:14:e1:22:b3:a0:f5:40:07:56:b6:d3:75:
44:29:4f:6b:de:00:ed:68:00:b3:0e:03:4d:75:61:
92:46:b9:6b:6a:86:e8:90:63:4a:d7:b2:50:ef:ea:
f5:0c:12:2c:a8:e4:42:42:f4:69:74:8f:b1:2f:b7:
3c:89:81:64:69:ae:e8:3e:9b:52:5a:85:8d:f1:65:
26:b3:52:76:03:12:a7:c2:a0:42:b4:6e:05:f2:07:
3f:af:0f:e4:33:9d:c9:fd:45:00:c4:e8:59:ea:3f:
86:ab:87:c5:07:ef:00:ec:95:bc:ab:f5:c9:c2:0f:
ca:f1:16:d2:a0:7e:1e:f5:75:1b:c3:6d:7c:c0:bb:
7a:0a:d6:62:1f:55:c2:9f:17:4b:89:ea:d5:f7:70:
04:48:98:b1:e7:16:3d:37:25:0c:c5:f3:f7:7e:1d:
e9:cb:4a:f1:e7:68:a8:7a:79:4f:94:1d:d4:49:0c:
9e:11:c4:c3:17:89:e8:f1:cc:12:88:75:36:ae:e3:
7e:53:a1:8d:1a:0a:89:3a:2a:ab:3f:e1:21:e7:bd:
8b:3b:15:34:05:73:59:77:13:ac:98:a4:5c:2f:bc:
83:d6:80:45:81:13:c7:90:02:5c:e3:38:6a:ae:31:
b9:7e:1c:ac:6b:e6:76:eb:b9:b4:42:34:86:e6:a3:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:8D:DD:9A:94:94:15:7F:59:FE:6A:91:FB:38:9C:11:29:E6:F6
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/w3mN3ZqUlBV_Wf5qkfs4nBEp5vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.173.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2c:7e:e2:38:4b:4f:27:fe:1a:ff:e2:f4:71:0a:b0:eb:94:
bd:6b:06:5a:4b:c4:ed:72:75:5a:c4:17:c7:64:ef:f8:4f:be:
07:79:af:33:12:04:ab:9a:c9:bc:11:00:03:88:8a:97:a6:6a:
58:26:03:28:1b:6f:6f:d9:19:46:78:dd:9f:95:e2:94:56:65:
74:d6:13:6a:3c:fe:c9:9a:83:b5:6d:05:8f:0b:24:a6:61:e2:
ce:6c:84:7f:89:42:aa:ab:67:35:32:58:80:3e:7d:4a:b4:4a:
c9:24:27:4b:0a:16:15:c0:f7:2f:dc:20:09:7d:7e:45:60:e0:
89:b6:bf:c3:e5:f1:ec:81:01:a1:6f:a3:f7:45:9a:7e:25:df:
f4:45:8a:80:1b:aa:b3:79:0d:87:7f:c1:f2:5c:31:c1:98:88:
06:68:1d:90:38:10:30:b3:5a:c6:6b:1e:4f:12:f5:9d:a0:40:
15:31:9a:7f:47:2b:27:12:08:c4:ad:19:46:e8:c1:56:65:68:
a1:4b:07:5e:e1:fb:29:b6:91:6b:cb:9c:69:14:db:2c:48:ab:
c7:67:46:bc:c4:41:af:1f:cf:7e:52:4f:42:ec:6e:68:8c:60:
7b:76:cf:99:d5:9d:39:b2:1e:5e:95:9c:a5:33:62:ac:0e:13:
3d:a4:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:48 2025 by rpki-client