Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ScM9GMIsmbW66JvGkHpvAWrGWo8.roa
File: ScM9GMIsmbW66JvGkHpvAWrGWo8.roa (raw, json)
Hash identifier: b0RCmH404rFQTPecQG2Nq40c98ZqaTVvueRDgTwpzUQ=
Subject key identifier: 49:C3:3D:18:C2:2C:99:B5:BA:E8:9B:C6:90:7A:6F:01:6A:C6:5A:8F
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 01877F46EDC8298D83D6611EBE25BF6565ED
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ScM9GMIsmbW66JvGkHpvAWrGWo8.roa
Signing time: Fri 14 Apr 2023 10:19:27 +0000
ROA not before: Fri 14 Apr 2023 10:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211261
IP address blocks: 103.226.194.0/23 maxlen: 23
185.237.212.0/24 maxlen: 24
185.145.71.0/24 maxlen: 24
185.145.70.0/24 maxlen: 24
185.223.176.0/22 maxlen: 22
103.229.168.0/24 maxlen: 24
103.229.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:46:ed:c8:29:8d:83:d6:61:1e:be:25:bf:65:65:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Apr 14 10:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49c33d18c22c99b5bae89bc6907a6f016ac65a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:b3:33:3f:63:42:ed:90:21:48:72:7f:fc:
36:6d:fa:b2:65:18:79:7c:9e:b0:62:e1:36:e6:f8:
06:0c:f8:8e:74:eb:83:fb:eb:62:cd:00:aa:5f:53:
bf:86:e9:df:63:24:db:00:a9:eb:15:7a:e2:f0:85:
ec:0b:40:6a:05:b9:90:90:43:b9:08:3a:d1:db:71:
80:8f:d3:3d:47:54:f9:37:e9:13:33:33:8e:84:6e:
d4:73:e8:51:07:3e:f3:a5:77:ec:11:1f:0b:27:61:
3c:e6:c2:c6:9f:43:4d:a7:ab:b6:8d:ce:fa:88:5e:
90:3b:2a:86:30:2f:7b:38:59:3c:a8:28:d5:50:13:
39:66:6b:df:6c:d9:39:79:44:7b:ce:3c:1a:2d:ae:
f9:50:dd:60:c4:49:98:fe:c3:e9:15:da:3a:6d:74:
1d:b9:cc:9d:68:ca:c2:b8:8a:03:17:aa:4f:af:90:
9a:88:f8:e3:81:7d:de:15:43:95:84:7f:b1:6e:42:
11:91:e8:30:0f:a8:ca:8e:1b:16:b6:cd:25:c1:12:
d9:27:d8:e5:f7:cc:f6:ba:22:47:a1:c8:14:75:20:
3a:d5:02:2e:fe:65:01:9d:56:49:a2:1b:05:11:f4:
fe:99:a2:71:ea:6c:84:db:6e:c7:92:0f:14:b3:5d:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C3:3D:18:C2:2C:99:B5:BA:E8:9B:C6:90:7A:6F:01:6A:C6:5A:8F
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ScM9GMIsmbW66JvGkHpvAWrGWo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.194.0/23
103.229.168.0/24
103.229.171.0/24
185.145.70.0/23
185.223.176.0/22
185.237.212.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c4:59:d6:c5:6a:c4:a9:93:80:6e:7d:11:f5:a1:cf:a2:f0:
4a:7c:e5:e6:ec:87:f6:1d:7e:fe:e9:5a:17:94:28:66:db:4a:
af:86:a7:63:34:a6:0c:78:5e:3f:63:65:1e:fc:f5:a6:41:bc:
ec:ca:dd:82:6b:77:fb:34:99:67:c7:1a:d2:5f:7e:56:bb:2d:
44:e5:6c:52:9e:af:ff:2c:c5:57:5b:c3:67:02:e2:1e:d5:e6:
cb:99:2e:f7:1e:f2:47:1c:e9:72:3e:e6:9d:60:0f:57:17:33:
f8:39:e7:7b:f2:00:7f:e6:a9:4a:c6:66:b2:c0:f8:2d:50:c6:
4f:40:13:d0:12:14:3b:60:91:ae:c8:c1:b0:1d:35:a0:f7:5e:
05:10:a4:f1:51:07:9e:00:bd:d9:79:83:19:6e:11:fb:52:a2:
05:de:cf:f3:8d:48:c0:c5:54:63:8a:56:82:2b:1c:9a:cd:6f:
d2:79:49:bb:ee:34:7e:e8:d5:65:83:39:39:4b:07:e2:3e:b6:
c8:6a:81:a9:51:e5:9b:b2:09:66:c5:b3:8f:45:7c:71:30:27:
e8:55:8e:59:a7:ac:70:89:94:ec:05:fc:10:6e:dc:03:45:d3:
b1:be:84:84:fa:8b:57:3e:1e:1e:a7:ee:a3:86:78:87:7c:4d:
00:99:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:24 2024 by rpki-client on console-fra.rpki-client.org