Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/z_RN-3lfWwQPhGLcj4HcCKhN4Ik.roa
File: z_RN-3lfWwQPhGLcj4HcCKhN4Ik.roa (raw, json)
Hash identifier: lLUeeMXRqBF0BYJ1LnqT2MJ/wssQhu95vUWPGbzntzg=
Subject key identifier: CF:F4:4D:FB:79:5F:5B:04:0F:84:62:DC:8F:81:DC:08:A8:4D:E0:89
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94DDBFF7FA32C53F988FE89B50645A
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/z_RN-3lfWwQPhGLcj4HcCKhN4Ik.roa
Signing time: Sun 01 Jan 2023 23:05:05 +0000
ROA not before: Sun 01 Jan 2023 23:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136744
IP address blocks: 103.35.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:dd:bf:f7:fa:32:c5:3f:98:8f:e8:9b:50:64:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cff44dfb795f5b040f8462dc8f81dc08a84de089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:37:ef:4f:4d:0a:fe:bd:48:0a:b8:8f:29:
61:0a:43:ad:ff:63:ce:ee:5a:b6:38:62:7e:61:81:
fe:08:49:51:df:a9:f7:8e:79:a9:60:2e:2b:42:f4:
4a:e8:10:fb:f0:00:3c:db:7d:cb:8a:54:a3:5f:50:
18:80:2f:83:b1:9a:9c:d6:8f:d6:e9:27:3b:ca:18:
3e:d6:fa:06:05:4b:77:94:1c:c2:35:5a:4b:2e:bc:
70:fd:25:5d:3a:59:50:ba:f3:0b:12:f6:61:f9:67:
a4:b5:f4:e1:b9:bb:e5:4f:59:54:55:61:bb:01:2a:
65:2f:51:16:20:16:60:49:a0:ef:b1:fc:af:e2:79:
3d:4b:8d:1a:03:88:c4:95:11:23:61:92:5e:53:d0:
c2:82:48:9a:f1:fe:cf:5c:b5:d0:e5:57:2b:f3:07:
4e:1d:e8:96:6d:f4:d6:9d:2e:6d:c1:be:4b:62:e2:
dd:b7:61:15:ec:02:6d:d6:0b:f9:c5:fd:d6:86:55:
7a:5c:6d:27:db:b6:53:f9:6d:c5:1c:c5:ed:97:88:
36:bf:08:b1:7a:98:da:91:b1:c6:37:62:78:93:13:
dc:64:16:73:06:a4:f1:47:47:8f:24:c0:23:a5:6e:
84:ed:1c:ad:16:df:92:01:0c:05:77:78:4d:b7:35:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:4D:FB:79:5F:5B:04:0F:84:62:DC:8F:81:DC:08:A8:4D:E0:89
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/z_RN-3lfWwQPhGLcj4HcCKhN4Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:4e:b4:48:e7:a7:6a:65:8b:7d:04:3c:9e:7f:4b:f0:f6:b1:
36:81:7e:55:12:1b:bf:34:0c:68:43:d5:22:ba:ff:49:45:3f:
47:7b:c7:b8:17:f9:a9:57:69:93:c9:a4:ce:f9:e5:66:17:76:
24:fd:e9:39:66:02:bc:40:e6:c2:02:35:24:68:55:ec:dd:82:
48:65:4a:0b:17:e2:e9:3a:ba:e6:19:33:bc:4b:36:eb:14:0c:
54:c5:19:ed:e9:40:f7:15:b7:8c:7a:69:ec:df:64:65:16:aa:
79:fd:e3:13:6c:d0:72:3f:5f:11:5d:cd:39:48:62:be:bf:d3:
f6:3d:8f:fc:04:bc:0e:7f:fe:ab:20:c0:73:29:6a:e3:a6:d3:
24:4d:b9:d0:63:b0:2b:27:f4:1b:2a:3b:04:11:8e:52:f5:03:
af:54:3c:dc:fa:37:a1:cf:d0:ee:94:1a:e4:eb:30:df:13:e1:
c1:32:83:50:d0:19:d8:5e:0f:b1:72:a2:1f:e8:01:fd:12:b8:
37:2b:48:d0:09:d1:23:5b:30:76:91:1b:ee:47:28:08:3e:82:
6c:0a:f3:cb:0e:96:b5:54:38:1b:a0:90:3e:fa:2f:59:46:c7:
09:00:43:c5:87:a0:b9:43:7a:bf:b6:39:43:88:ed:2a:93:bd:
10:53:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:08 2024 by rpki-client on console-fra.rpki-client.org