Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/itHyZtMZkaBBQad77Z9eOmd0aqg.roa
File: itHyZtMZkaBBQad77Z9eOmd0aqg.roa (raw, json)
Hash identifier: 1nLZ8o6YhfNM+mzdMO3X7ZsoyccM7jNFcYoVp8GIhyQ=
Subject key identifier: 8A:D1:F2:66:D3:19:91:A0:41:41:A7:7B:ED:9F:5E:3A:67:74:6A:A8
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 01878F00B7B4F8188343073B5459743A8D27
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/itHyZtMZkaBBQad77Z9eOmd0aqg.roa
Signing time: Mon 17 Apr 2023 11:36:41 +0000
ROA not before: Mon 17 Apr 2023 11:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205836
IP address blocks: 103.226.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:00:b7:b4:f8:18:83:43:07:3b:54:59:74:3a:8d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Apr 17 11:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ad1f266d31991a04141a77bed9f5e3a67746aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:bc:33:7a:b2:86:b8:cf:a6:61:2e:a1:5e:
35:7f:dd:78:1e:09:4b:bb:f0:31:54:30:93:21:4e:
d5:ac:8d:9c:22:88:7d:cc:79:8a:fc:e8:8c:60:ab:
b4:d0:5f:21:eb:56:22:45:fa:29:72:48:39:f7:e3:
0d:b1:90:c4:70:cf:65:ab:b0:cd:40:7b:a7:c8:81:
06:fa:75:a0:36:ac:c6:c4:7d:f4:8a:d7:ba:95:2c:
15:09:36:c0:e7:82:c9:3d:00:40:4f:3c:47:b1:dc:
f9:aa:fa:7d:76:da:91:a4:03:18:63:70:91:a9:2b:
d0:92:50:96:e0:31:48:6a:8f:15:55:ba:ca:58:10:
05:e0:e2:41:7e:39:77:c7:b9:df:0e:e4:ca:4f:ac:
1e:49:86:fb:22:c6:b8:0f:5f:a1:65:fd:c2:3f:b1:
96:0a:32:be:83:fe:8c:0b:a3:b4:d9:e1:52:ea:7d:
a9:12:c2:5d:c3:e8:ca:40:a9:c6:6d:c4:18:6e:5c:
61:18:fa:27:35:ae:bf:e8:36:2b:3b:cd:da:28:96:
94:14:bd:8a:f5:f8:cf:48:95:b0:8e:88:6d:db:54:
3e:01:4b:50:d8:63:4d:f1:d3:cc:08:a5:f4:5d:61:
ea:16:08:c8:6c:59:03:41:20:9c:34:28:77:52:b7:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:F2:66:D3:19:91:A0:41:41:A7:7B:ED:9F:5E:3A:67:74:6A:A8
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/itHyZtMZkaBBQad77Z9eOmd0aqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.193.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:00:33:ef:61:cd:29:e6:2c:cb:69:b5:eb:b8:4b:20:88:ae:
23:81:d0:28:3e:5c:2e:dc:64:f4:1e:22:9a:49:ba:62:2a:2a:
e8:56:ec:46:ed:c1:26:2c:81:5f:20:bb:4a:49:77:78:ae:d2:
e8:4a:fc:36:e5:ff:7f:be:5c:9c:46:d1:d8:97:47:dd:8f:72:
a1:88:c2:bb:6d:a1:ae:18:b5:34:2d:4a:64:42:74:24:f3:e7:
5d:30:ba:29:53:34:65:7c:fd:a9:58:c6:34:2f:b5:69:25:5b:
04:93:37:5c:04:ca:9d:39:ce:23:34:e3:6b:bc:49:46:b2:73:
70:9e:3f:79:38:3c:7e:84:d4:6e:96:67:c3:3f:95:b8:db:29:
39:5a:86:23:6a:5c:59:af:b1:97:60:f7:48:c6:39:e6:5f:34:
aa:a3:28:e8:27:fa:18:cc:ce:84:3b:3d:ca:cf:15:b4:13:3c:
39:dc:a8:2f:f2:9e:f9:f9:4d:3b:ce:65:10:48:ff:b5:97:ec:
5a:76:81:51:f2:45:61:0b:95:1e:b0:13:d6:d1:69:b7:1f:7e:
0f:c2:1f:cf:2f:49:be:6e:ac:f9:9b:8c:f2:c3:3f:70:ce:e4:
a9:98:18:4a:5e:0b:7c:60:64:d8:d6:f5:b4:81:a5:f8:59:88:
b5:f6:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:46 2024 by rpki-client on console-ams.rpki-client.org