Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/psU3jkxAhddnuz0gF36ZW_8pB9M.roa
File: psU3jkxAhddnuz0gF36ZW_8pB9M.roa (raw, json)
Hash identifier: bMiRGSprx7rc1BcFjWxpULuryKD9lvXwCTnHLgTq1io=
Subject key identifier: A6:C5:37:8E:4C:40:85:D7:67:BB:3D:20:17:7E:99:5B:FF:29:07:D3
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 01856EAFB19FD9C2CC459D25AFAF0160BF7A
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/psU3jkxAhddnuz0gF36ZW_8pB9M.roa
Signing time: Sun 01 Jan 2023 18:54:46 +0000
ROA not before: Sun 01 Jan 2023 18:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 103.226.193.0/24 maxlen: 24
185.237.212.0/22 maxlen: 24
185.237.215.0/24 maxlen: 24
185.145.69.0/24 maxlen: 24
185.145.68.0/22 maxlen: 22
185.145.68.0/24 maxlen: 24
103.229.171.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b1:9f:d9:c2:cc:45:9d:25:af:af:01:60:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 1 18:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6c5378e4c4085d767bb3d20177e995bff2907d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:57:32:13:0b:50:b5:bb:c2:f3:4f:fb:22:
c4:6f:19:e2:ff:54:d8:54:26:41:52:c2:93:66:10:
5b:52:92:46:83:25:e4:2a:c8:c1:c2:0b:ba:40:df:
6a:c3:20:00:95:d1:20:10:95:9c:01:a4:ef:29:6e:
97:3b:44:dc:2c:82:9e:75:5d:32:42:9a:e8:2a:27:
5e:11:67:96:dd:2d:dc:23:a7:ea:52:5a:6d:55:4e:
17:98:75:9d:cf:4a:32:61:2f:66:49:2c:f2:8b:03:
72:a2:c6:d9:b3:7e:0a:b8:68:99:ba:29:e5:7a:f8:
3b:f1:59:42:06:ec:88:93:54:6b:8c:3f:92:64:46:
2e:a5:39:f4:7c:e5:94:d2:16:be:8b:e6:55:6e:c6:
bc:ea:ab:90:84:ed:81:2d:29:91:a8:c9:7e:dd:38:
37:ef:da:7b:c9:68:89:16:5a:6f:f1:a0:7d:f1:bc:
25:8e:d0:b8:39:1a:30:c1:a1:92:d5:d3:40:97:ee:
e4:d3:b4:1a:e1:c7:4b:9d:6f:66:d7:5e:98:0a:7c:
8a:2d:bc:c9:76:be:d0:32:d2:e7:6d:81:b8:e2:2c:
1d:59:d2:60:da:aa:c4:2f:7c:4f:e4:7b:82:6f:b9:
82:e5:ef:36:99:25:9a:cb:e8:4a:74:d4:fb:e6:b9:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:37:8E:4C:40:85:D7:67:BB:3D:20:17:7E:99:5B:FF:29:07:D3
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/psU3jkxAhddnuz0gF36ZW_8pB9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.193.0/24
103.229.170.0/23
185.145.68.0/22
185.237.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:b9:e8:7a:18:ba:e4:64:bd:e0:b0:dc:37:58:b4:e6:fc:2d:
d1:90:6a:7f:9e:f5:a9:f0:19:78:aa:9f:88:c0:c4:21:48:d3:
96:45:6c:cb:9f:df:a9:e3:01:17:cb:8b:ae:79:8b:ca:dc:08:
dc:6e:ee:a7:a4:72:fc:ca:c8:b9:5f:b5:eb:79:83:f7:61:78:
8b:3e:f7:48:32:be:d9:3c:f5:ea:1c:6a:9d:ee:71:15:8c:9e:
65:3f:b2:b9:17:18:62:28:b6:4a:03:4a:1e:46:ef:4f:b3:be:
28:38:42:7c:94:03:f1:da:05:ca:66:e6:94:9d:72:f5:1a:33:
a4:ab:cd:d9:89:a7:29:bc:80:d2:64:49:6e:58:5e:74:17:94:
1a:98:eb:0c:9c:22:2b:f5:58:80:52:99:f6:a6:73:5c:62:93:
3a:c5:99:43:2e:84:07:3a:f9:c6:60:c0:0e:e9:28:3b:0e:fc:
02:fb:09:ff:ec:96:ea:f9:b6:d8:bc:5c:e7:55:24:d2:6f:4a:
15:01:01:d2:10:de:03:5e:35:31:09:db:9b:7a:4a:1e:86:71:
12:a9:a6:a9:c2:a0:ed:09:fe:67:a7:62:4b:8b:c2:31:75:d5:
c5:d7:0a:95:8a:32:67:c7:9f:88:64:27:7f:a7:2b:a8:fc:f4:
17:5f:c1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org