Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hLwnS7nodGCGV-Y3vcnmUV7felU.roa
File: hLwnS7nodGCGV-Y3vcnmUV7felU.roa (raw, json)
Hash identifier: M/wDHMrzx2meisGZbAF3H29sFux9a3Y93r5V/Ex7nbM=
Subject key identifier: 84:BC:27:4B:B9:E8:74:60:86:57:E6:37:BD:C9:E6:51:5E:DF:7A:55
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018F616E1B9B3E0F3855D768E9057FA3D8D8
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hLwnS7nodGCGV-Y3vcnmUV7felU.roa
Signing time: Fri 10 May 2024 07:35:56 +0000
ROA not before: Fri 10 May 2024 07:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 43.225.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 11:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:6e:1b:9b:3e:0f:38:55:d7:68:e9:05:7f:a3:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 10 07:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84bc274bb9e874608657e637bdc9e6515edf7a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:59:ad:be:a4:c3:fc:d9:5d:7b:61:27:13:03:
61:64:5d:79:d0:86:3e:dd:aa:8e:1d:14:38:e0:f5:
cf:cd:c2:1c:40:1b:4e:69:42:7f:1f:45:c6:78:8c:
a4:00:f8:10:4d:5d:37:0b:04:36:ac:ed:5c:b9:68:
c4:9e:98:6e:88:20:e0:a0:a8:a3:44:56:95:db:9a:
c1:80:29:1e:d1:ea:84:65:eb:e4:02:99:e8:25:63:
60:ed:eb:ec:74:14:aa:5d:72:b9:eb:67:bd:2f:9a:
f1:e5:a2:46:64:60:76:0c:27:6d:78:8a:81:10:d7:
63:2d:f1:75:7c:37:a2:d2:58:e6:c8:7a:ec:32:ba:
b6:11:0a:27:23:33:1c:58:d0:aa:df:79:cc:ac:6c:
af:ff:25:bd:86:50:63:56:90:40:0e:be:48:02:6f:
74:09:73:4c:78:cc:27:1e:7e:39:ad:9f:b8:35:a9:
44:36:25:5d:dd:d1:73:42:a6:d9:32:b4:52:9a:a4:
b8:b8:a8:ed:1a:be:bd:c5:89:52:a6:2a:e4:62:a9:
58:51:2b:45:f8:ef:09:c0:3f:8c:e2:35:db:c6:08:
ae:64:21:45:c3:48:fe:42:6c:a5:f3:66:b2:7f:b2:
12:56:54:33:92:ec:81:c4:dd:97:59:9f:73:bf:12:
57:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:27:4B:B9:E8:74:60:86:57:E6:37:BD:C9:E6:51:5E:DF:7A:55
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hLwnS7nodGCGV-Y3vcnmUV7felU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.88.0/23
Signature Algorithm: sha256WithRSAEncryption
51:72:da:eb:61:13:41:1b:79:e8:ef:17:3b:85:ff:f9:54:a5:
79:45:dc:66:54:0b:ee:70:66:1e:27:b5:ed:ec:43:f7:0f:12:
c4:c9:67:69:76:1e:ab:e6:3e:c3:26:cb:8a:2e:57:79:2c:60:
ed:04:e6:e1:13:8d:8a:9d:9c:5b:d6:fc:07:98:6c:b7:a8:f5:
d0:b3:82:b2:51:40:48:79:80:be:21:4f:45:39:68:cd:ed:75:
33:53:45:c4:73:09:a0:2a:93:20:76:e9:8d:1d:df:e0:27:87:
84:13:75:ce:25:f2:e8:ea:3a:80:f3:49:27:83:bb:0c:5d:d1:
fb:db:06:40:4d:c8:4a:17:bc:60:29:b7:38:32:24:f6:bd:5d:
87:b3:30:68:90:4d:7b:32:80:e9:e3:26:67:78:68:ea:e8:0a:
10:bc:5a:ab:61:a8:41:7d:c0:4c:32:32:a6:a1:ff:3e:8c:3b:
0d:ab:3d:f6:95:9a:bc:24:f4:c7:1c:22:79:3e:c5:73:67:88:
09:cf:41:e2:be:1b:31:f3:a5:56:ee:86:cf:d9:eb:cc:7f:f8:
ba:19:95:f6:02:0e:df:ed:06:f4:90:ce:fb:0d:36:93:24:fa:
c6:9c:a3:49:4c:06:e5:50:9e:5f:a7:3c:85:1e:e7:96:5c:17:
7a:79:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:45:30 2024 by rpki-client on console-fra.rpki-client.org