Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/QwJc-EWCHU4M17-3RitiFWmU3ao.roa
File: QwJc-EWCHU4M17-3RitiFWmU3ao.roa (raw, json)
Hash identifier: iMa0QdUoduhqLHpAcjzHAQZpbiZ9VlWI9FFWMZRCbXE=
Subject key identifier: 43:02:5C:F8:45:82:1D:4E:0C:D7:BF:B7:46:2B:62:15:69:94:DD:AA
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01903BEA13E2D7EAE8966D74B9FD5C0DF8BC
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/QwJc-EWCHU4M17-3RitiFWmU3ao.roa
Signing time: Fri 21 Jun 2024 17:48:34 +0000
ROA not before: Fri 21 Jun 2024 17:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19740
IP address blocks: 103.130.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:ea:13:e2:d7:ea:e8:96:6d:74:b9:fd:5c:0d:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jun 21 17:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43025cf845821d4e0cd7bfb7462b62156994ddaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:87:8f:fa:b1:58:11:71:02:7a:61:80:57:
a5:35:88:94:a4:47:f6:d3:44:ff:ec:bb:ed:2f:46:
d4:a2:d3:1a:9f:27:ff:6a:27:ec:1d:44:08:ab:7f:
1f:8e:7d:ec:bc:3c:4c:e5:b3:04:66:8f:2a:17:a3:
06:37:02:1d:2d:07:a6:97:a6:a5:4b:0c:2b:f3:d8:
bd:5e:03:a9:4d:87:3d:d1:0b:21:dd:8e:a8:a5:c1:
13:5a:34:61:79:6f:65:74:40:0b:bc:b2:bc:a1:df:
82:79:c7:57:43:6d:02:f2:39:4f:0a:4b:f6:9a:f3:
31:fd:b3:1a:67:64:7f:ee:e5:01:11:f7:2f:d8:d7:
0b:07:ba:50:dd:fe:05:27:79:5d:fb:71:22:ce:19:
18:34:9c:84:0f:3a:d7:3d:d5:93:64:5a:98:9b:e6:
91:89:a7:04:b7:16:52:61:f9:9f:ce:84:b2:55:a9:
6f:09:13:21:8f:06:84:9c:7d:24:0c:5e:be:02:6f:
95:ec:17:56:95:3b:3a:7d:41:06:ba:cd:35:88:f5:
fa:4f:01:2d:29:75:90:56:3a:d6:2b:fc:07:cf:a7:
19:0d:92:25:98:01:52:97:39:99:a3:ca:05:44:3f:
ff:a6:24:64:57:e4:2b:7b:6e:7d:c2:9e:1e:da:44:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:5C:F8:45:82:1D:4E:0C:D7:BF:B7:46:2B:62:15:69:94:DD:AA
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/QwJc-EWCHU4M17-3RitiFWmU3ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.147.0/24
Signature Algorithm: sha256WithRSAEncryption
46:02:54:4b:67:74:1c:b6:c7:00:34:2a:16:0b:10:db:17:2f:
89:24:56:af:51:36:2d:52:1a:9d:ec:83:fd:03:cc:53:c6:b6:
ca:6d:37:7b:81:5f:26:fc:6f:7b:1a:ab:ea:5f:d6:37:1f:86:
7c:1b:d3:d7:57:65:91:e6:9c:0b:5f:91:af:0c:4a:2c:d3:6d:
e5:3f:98:bb:89:83:0a:50:d6:a6:a2:70:09:7f:07:5c:04:95:
66:25:df:92:03:75:31:ca:ec:76:ee:d3:ea:8d:fb:a8:8d:5b:
c7:21:95:09:27:4d:f6:e0:35:77:c2:65:c9:99:f8:7c:ce:76:
38:4e:5d:1f:60:63:ae:e7:b7:7d:43:ca:f7:0a:af:cb:30:8d:
b3:90:54:f1:3e:76:06:75:d1:cf:4d:ec:ce:bc:ac:2b:d5:f8:
df:5f:17:6c:c5:9b:e2:0b:a1:5f:ad:46:f9:48:08:90:ad:7c:
6a:27:de:c4:41:1d:39:21:74:59:b4:3b:67:fe:5e:23:55:a9:
64:74:be:cb:b9:9c:83:b5:f0:64:51:e5:d3:45:3f:95:c3:ea:
cb:0b:70:95:d3:b5:46:a9:e4:7c:61:20:0b:95:0e:9b:0d:95:
5e:e3:3b:c8:ee:ef:bb:69:73:a8:f5:04:be:ca:61:2c:92:db:
2e:a1:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:25 2025 by rpki-client