Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/JLtAKamHyT1zHG7abV464R6yk3E.roa
File: JLtAKamHyT1zHG7abV464R6yk3E.roa (raw, json)
Hash identifier: YPB5QQ+Ww4kzXcdAC+3nIznkErFf6xOj9rcmKqrQIb8=
Subject key identifier: 24:BB:40:29:A9:87:C9:3D:73:1C:6E:DA:6D:5E:3A:E1:1E:B2:93:71
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 01877F46F888A3F9F5338CA78A5FAE9798C6
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/JLtAKamHyT1zHG7abV464R6yk3E.roa
Signing time: Fri 14 Apr 2023 10:19:30 +0000
ROA not before: Fri 14 Apr 2023 10:19:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 103.226.192.0/24 maxlen: 24
185.237.212.0/22 maxlen: 24
185.237.215.0/24 maxlen: 24
185.145.69.0/24 maxlen: 24
185.145.68.0/22 maxlen: 22
185.145.68.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:46:f8:88:a3:f9:f5:33:8c:a7:8a:5f:ae:97:98:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Apr 14 10:19:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24bb4029a987c93d731c6eda6d5e3ae11eb29371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:b2:eb:9d:c5:d6:7c:e0:d0:db:ae:cb:16:
15:73:39:aa:1d:07:69:ea:0b:f3:1a:b8:0a:a0:32:
c8:c9:bb:8b:fc:25:fa:d5:de:82:2b:f1:11:56:69:
14:65:91:99:d5:04:ba:4c:ed:2a:67:4c:77:65:8f:
16:9c:83:5a:9d:6d:55:28:f6:49:d6:54:5d:6f:bb:
6a:ee:66:34:5e:47:bc:78:16:d5:43:8f:e5:f2:50:
f3:99:fd:60:b3:40:5d:bc:d1:28:78:1c:5c:5c:e4:
cf:cf:0e:eb:18:f7:0c:d3:3e:22:bc:d0:1b:bd:81:
78:6d:c4:54:49:f7:b7:4b:1f:36:b2:9e:fb:b0:64:
77:20:5c:51:1d:9d:d8:a2:ce:35:11:4d:e1:49:c1:
c3:65:aa:12:ef:31:6d:50:13:1d:39:57:94:02:4d:
c7:bb:e4:75:fe:65:b7:b8:24:ec:47:a9:87:35:25:
81:27:be:ee:c4:04:98:97:5e:ef:e5:bd:40:40:3a:
51:8a:af:63:46:be:4f:9b:3f:1d:33:8f:95:da:c3:
d7:11:82:16:bc:a0:e2:a2:f4:9e:7c:56:d5:93:31:
f4:b5:f9:fa:bd:48:4c:4f:29:49:46:40:e7:f5:2b:
d0:4e:3b:66:f6:82:b6:f3:a5:e8:81:26:3e:cb:c2:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BB:40:29:A9:87:C9:3D:73:1C:6E:DA:6D:5E:3A:E1:1E:B2:93:71
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/JLtAKamHyT1zHG7abV464R6yk3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.192.0/24
103.229.170.0/24
185.145.68.0/22
185.237.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:c3:c5:f8:cf:60:e1:48:4f:59:af:de:24:97:f5:fb:33:78:
97:16:db:2f:aa:47:c7:07:4f:ce:a4:71:f8:5a:8a:c8:ce:ea:
b2:6a:3b:5b:cb:7f:ab:4b:b6:aa:8e:25:70:3c:81:88:2d:98:
a2:a5:42:ff:66:62:27:09:a8:e8:c8:e1:83:19:0d:bf:36:9b:
ff:0d:85:4c:fe:7c:82:4b:20:92:43:6c:7f:c0:b4:b3:95:08:
74:16:00:74:43:ad:11:bd:cd:d3:31:bb:c9:b3:d5:66:78:65:
5a:df:cc:76:9d:77:e6:39:ea:f8:50:8b:4a:6a:c5:84:8b:8d:
0e:2b:bb:b4:ce:35:0a:5c:84:8a:41:eb:a8:4d:8b:81:6d:08:
34:0e:95:d6:c1:95:f2:68:16:a7:7b:ef:79:87:cb:28:94:f1:
bc:fe:52:c2:63:60:dc:1f:66:63:0f:56:0c:35:ad:40:b9:e3:
f0:93:68:b2:4e:28:85:40:e7:e6:f1:4a:b6:b0:f6:bd:69:da:
72:03:5d:26:98:ad:b3:1f:6f:00:bb:cf:9f:da:bd:26:e0:28:
21:cd:5f:a3:08:42:cf:29:14:f1:63:c7:f9:79:15:a8:a0:7d:
70:12:80:06:87:67:25:e2:fd:f2:6a:92:00:93:4d:50:23:35:
11:78:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 12:58:56 2023 by rpki-client on console-ams.rpki-client.org