Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: z6B7qPI6C49frPMv5SHqAk8auT1l5Pno1xVvMieV+wE=
Subject key identifier: 96:31:6D:EA:4F:65:63:42:4D:68:EA:39:4D:09:DC:8E:9C:B9:01:A9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1125947940972880215A81BBB362F16032078833
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS10103.roa
Signing time: Tue 03 Sep 2024 05:44:59 +0000
ROA not before: Tue 03 Sep 2024 05:39:59 +0000
ROA not after: Tue 02 Sep 2025 05:44:59 +0000
asID: 10103
IP address blocks: 85.208.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 14:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:25:94:79:40:97:28:80:21:5a:81:bb:b3:62:f1:60:32:07:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 3 05:39:59 2024 GMT
Not After : Sep 2 05:44:59 2025 GMT
Subject: CN=96316DEA4F6563424D68EA394D09DC8E9CB901A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:bc:36:16:53:51:7d:10:cf:57:26:3b:3d:
80:1d:06:0c:f6:0d:0c:fc:6f:4d:1b:9e:6c:b5:6c:
4e:35:0f:25:a3:fe:be:76:c5:93:13:d1:3f:e2:87:
15:39:7f:e8:28:29:45:bd:b2:22:de:73:a2:4b:b1:
0b:3c:28:3f:ec:6b:f9:55:1a:32:3c:c8:36:d8:3c:
17:43:1b:73:57:64:b6:11:dd:48:d7:92:4f:c0:fe:
3a:be:0a:c6:e4:b9:e1:aa:b4:a7:a2:59:a5:e0:e2:
8e:bb:8a:22:7b:82:16:66:5b:22:ea:69:1f:f7:47:
6f:a3:88:20:01:f9:42:e8:01:19:6d:1d:4a:bf:85:
5a:ed:ac:6a:90:5e:b1:ae:cd:2e:05:c2:90:87:e0:
fe:4f:fb:31:60:2c:8e:bb:fb:e0:6e:b3:1c:52:20:
83:34:aa:e7:d4:26:ff:36:38:dd:f9:86:6f:e9:d0:
8d:44:6f:e0:9c:a7:bf:94:7e:56:18:5b:dd:2a:53:
88:fd:4a:65:9f:70:0a:6a:c6:dd:98:52:30:dd:35:
79:34:15:a0:45:53:29:3c:d2:37:47:71:fa:8c:24:
0f:0b:ed:f7:11:d7:b7:b0:6c:9b:f6:5b:9b:d5:fd:
29:34:c5:0d:3c:d7:f3:66:11:59:60:8a:0b:ce:70:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:6D:EA:4F:65:63:42:4D:68:EA:39:4D:09:DC:8E:9C:B9:01:A9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.72.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b8:35:af:f4:30:f2:83:a4:3f:9c:3a:3d:06:8c:a0:1f:a4:
4d:90:30:8f:d2:7e:b2:55:c6:e1:16:9d:5e:d8:2c:46:7f:ad:
ed:4e:56:a4:a7:75:28:33:78:ab:e5:cd:03:80:6e:76:14:54:
2d:17:f0:83:cd:3d:02:be:a9:24:2b:f3:ac:56:b7:24:8e:2e:
43:71:3c:82:42:be:55:23:2a:e0:bd:a7:06:b1:e4:08:60:26:
c5:ef:01:8b:96:e8:a2:4b:dd:f4:64:f7:a7:39:c1:98:5e:56:
42:cd:37:d5:e6:69:ec:a8:65:ee:92:ae:7c:0e:03:4f:45:37:
37:e2:ee:92:91:a3:45:19:41:23:d7:b9:5f:a1:95:86:5d:52:
f5:02:95:96:0b:fb:6c:91:ca:1f:0b:0d:a6:2a:9b:fb:cd:a2:
e0:f0:00:b9:b8:af:ce:12:06:62:b9:6b:e6:db:e6:9b:c9:8b:
c5:03:2a:f3:c3:6b:4a:6c:9b:7e:bf:31:62:53:b1:d6:13:f7:
40:6c:f5:9e:12:f1:1c:31:09:e6:d7:b0:cc:eb:22:22:4d:4d:
ce:99:39:f6:5c:a2:be:ff:b7:f8:96:32:56:5c:62:06:8c:a3:
41:0d:0e:7a:33:e6:fa:8f:8a:13:64:fd:1c:81:7f:5e:37:7a:
42:66:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:11:00 2024 by rpki-client on console-fra.rpki-client.org