Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/p9jCnubfx0XSCoqTChCEvz8QSyo.roa
File: p9jCnubfx0XSCoqTChCEvz8QSyo.roa (raw, json)
Hash identifier: bSideGFmjbmUh+sTDnuEwssqzNt3LYhvSMwrnjTDyeA=
Subject key identifier: A7:D8:C2:9E:E6:DF:C7:45:D2:0A:8A:93:0A:10:84:BF:3F:10:4B:2A
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 018570396603DC798CF21F9A7F8B5374B684
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/p9jCnubfx0XSCoqTChCEvz8QSyo.roa
Signing time: Mon 02 Jan 2023 02:04:47 +0000
ROA not before: Mon 02 Jan 2023 02:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20703
IP address blocks: 193.104.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:66:03:dc:79:8c:f2:1f:9a:7f:8b:53:74:b6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Jan 2 02:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d8c29ee6dfc745d20a8a930a1084bf3f104b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:04:0d:a5:ad:2b:20:80:a8:04:2c:04:31:04:
ae:fd:a2:79:80:61:db:87:b0:3a:0c:41:5d:5e:37:
fd:b0:f9:08:58:97:c6:f9:79:ed:db:78:72:fc:cc:
dc:ac:64:25:25:fc:84:52:1f:8b:d7:ff:43:cd:7c:
80:c0:82:2a:9c:c0:f7:41:b0:84:02:81:15:34:7f:
fb:d9:03:cb:23:3e:51:91:2d:34:e5:80:17:b6:40:
c4:5a:d4:63:cb:a0:f7:52:99:79:a1:26:c6:03:a4:
87:b3:4b:cc:0b:67:df:4d:a9:b6:27:ee:fb:02:76:
a8:b6:8e:e8:67:e1:74:1d:7c:92:d3:4c:1b:1e:1e:
d0:29:04:cb:4d:86:d5:69:36:bc:d3:ca:05:37:fd:
84:97:7a:3a:56:43:20:55:d2:93:61:5d:fd:f4:2b:
28:33:e5:a1:45:29:4b:bb:10:9b:70:0f:44:f9:49:
96:77:35:88:89:dd:b5:62:41:b8:3b:29:ce:89:e7:
00:ce:9f:a3:82:a5:c1:83:78:24:5b:06:9f:3c:bb:
7e:5a:24:83:de:eb:ce:34:42:a7:91:17:c0:58:b8:
37:29:21:64:fb:90:51:15:f9:b9:e7:2a:d0:2e:36:
bc:9b:d5:5a:fb:0e:0f:ed:e2:54:a9:6f:a1:5f:d4:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D8:C2:9E:E6:DF:C7:45:D2:0A:8A:93:0A:10:84:BF:3F:10:4B:2A
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/p9jCnubfx0XSCoqTChCEvz8QSyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.30.0/24
Signature Algorithm: sha256WithRSAEncryption
75:25:a6:e4:10:e1:71:26:01:92:d5:e2:e1:b3:0b:fa:83:43:
7a:2d:21:b0:5f:fa:93:6f:24:6f:2d:47:62:cc:a6:71:9f:50:
58:95:df:d0:1e:37:bc:ef:16:e2:fc:82:71:57:e1:d8:76:9a:
dc:4b:f6:e9:69:27:6f:25:b7:a1:3c:41:d1:c9:80:72:77:a8:
cb:90:47:1b:0f:f2:63:01:d3:80:e9:e1:86:ae:fc:ee:14:fc:
1e:cb:22:d0:20:f8:9c:9f:0c:27:d7:d0:37:8b:d5:3a:7b:25:
91:61:70:4d:44:56:03:63:f8:89:48:29:12:61:c6:77:2f:2c:
cb:ce:8b:59:0e:6c:8a:2a:5d:74:58:db:67:de:9a:13:15:1d:
83:eb:74:55:9d:2a:0f:5e:85:10:d0:28:27:58:f2:37:80:38:
bd:63:66:02:26:98:a1:1e:ba:81:08:39:6f:63:0b:2b:56:d7:
02:f7:e1:32:aa:f5:4e:d0:3d:46:7a:78:1d:c5:b0:92:d0:6a:
c1:28:60:13:76:75:04:af:dc:d9:20:0e:1c:3b:d7:d1:83:ac:
15:22:55:df:0a:dc:b0:e0:31:0c:88:5e:66:fd:8f:5c:d6:29:
c4:c7:76:17:f0:a6:49:00:c5:40:86:c5:20:48:ad:bc:e9:14:
af:2f:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:44 2024 by rpki-client on console-fra.rpki-client.org