Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/cPhLkDXoEhdZRZPhf--umuYRTY8.roa
File: cPhLkDXoEhdZRZPhf--umuYRTY8.roa (raw, json)
Hash identifier: 4E6Wn04QWVV6bmfWF6vReazZru0gap8vLuO2tEOeSZo=
Subject key identifier: 70:F8:4B:90:35:E8:12:17:59:45:93:E1:7F:EF:AE:9A:E6:11:4D:8F
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 0188AC216DA7686C5DD41FC385EF94A2D274
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/cPhLkDXoEhdZRZPhf--umuYRTY8.roa
Signing time: Sun 11 Jun 2023 20:24:11 +0000
ROA not before: Sun 11 Jun 2023 20:24:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 103.112.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jul 2023 15:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ac:21:6d:a7:68:6c:5d:d4:1f:c3:85:ef:94:a2:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Jun 11 20:24:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70f84b9035e81217594593e17fefae9ae6114d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:10:c6:e0:11:3e:ca:83:8f:a3:f5:5a:dc:
ec:c9:bf:ba:73:f7:fb:10:67:3e:11:68:14:ff:b0:
ef:29:0d:82:12:51:69:49:9f:5a:d3:98:32:55:3a:
4f:02:7b:bd:2e:8e:fc:0e:76:7b:d6:b1:b7:93:bb:
79:b8:0a:4f:36:49:3d:e7:7e:ad:42:4c:39:63:f9:
f9:57:4d:fb:11:8f:78:bd:88:3e:85:23:98:07:69:
86:51:74:f2:a9:57:ba:d3:af:cf:a6:04:10:fd:f0:
c9:30:de:e4:ee:f0:83:82:03:c9:fc:54:aa:9b:3f:
cd:c0:17:5d:f0:7f:66:26:e2:54:01:79:5d:06:03:
1d:e5:26:f3:96:1d:40:af:a2:28:05:fa:28:46:99:
13:6f:06:56:c7:48:74:8e:fa:c0:46:21:e8:e8:e7:
46:13:d1:1b:c5:1b:7d:3b:f8:59:87:a1:6a:09:37:
f3:c7:39:29:b1:69:b9:80:4e:05:eb:aa:3b:e0:09:
0a:b5:bd:db:7f:79:23:fd:06:0c:60:20:5b:5f:89:
7b:7d:30:a2:3e:a3:d0:44:3c:c2:9b:34:ee:f9:77:
c5:a8:b2:ae:1b:52:6b:32:48:6d:77:eb:82:c8:d6:
87:24:37:39:0c:23:b3:fd:b8:27:a1:25:15:ad:32:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:4B:90:35:E8:12:17:59:45:93:E1:7F:EF:AE:9A:E6:11:4D:8F
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/cPhLkDXoEhdZRZPhf--umuYRTY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:60:a3:1e:ce:ec:b8:d8:85:a1:a7:41:6b:37:0d:bb:8e:99:
88:7d:b4:bb:78:fc:1b:2b:ed:9e:37:00:7f:d9:e4:08:83:e5:
56:0e:6c:6a:b2:30:92:a9:14:70:12:3d:97:a4:91:9c:1d:d4:
8c:c3:49:65:85:56:69:60:57:95:cc:02:6a:52:0c:0c:67:e5:
1e:b6:51:40:2d:6a:25:bb:9a:b2:9e:50:5b:a6:28:32:ac:78:
19:17:af:70:ce:73:13:07:c4:35:68:40:02:1b:e2:d7:3c:c0:
b1:d6:b2:16:0e:52:a5:4c:b4:07:e7:9b:2c:79:35:8c:7e:46:
fc:e2:76:ff:eb:41:98:16:cc:78:91:49:1e:f9:42:19:ca:f7:
dc:ca:06:1f:e0:ac:ec:1b:66:6c:f6:25:f4:5b:23:d3:d9:de:
e6:c9:23:6f:88:e2:07:0e:35:48:91:0e:0a:ea:dc:d8:e7:bb:
07:db:db:75:10:12:7a:63:e6:7a:68:dc:1d:bd:d3:42:2e:c0:
9c:34:aa:22:37:3d:cc:0e:f7:ae:6d:49:0d:15:59:e2:37:ce:
53:bd:ec:d2:63:be:43:7b:1d:66:d6:80:02:57:45:ff:3c:48:
fe:4d:ae:95:f6:8c:af:89:80:1b:12:e4:44:e2:25:d4:0d:ac:
56:c1:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:17 2024 by rpki-client on console-ams.rpki-client.org