Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/UNHMNrQFt2jS4w1JyUwPGxDWAC4.roa
File: UNHMNrQFt2jS4w1JyUwPGxDWAC4.roa (raw, json)
Hash identifier: kl/nfy15JyOcIOZsTe6mQJGNq5Uxi5mVHAxcb1MNnZI=
Subject key identifier: 50:D1:CC:36:B4:05:B7:68:D2:E3:0D:49:C9:4C:0F:1B:10:D6:00:2E
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018B5FBABF070A62589BFF699BA0EB153A27
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/UNHMNrQFt2jS4w1JyUwPGxDWAC4.roa
Signing time: Tue 24 Oct 2023 03:29:15 +0000
ROA not before: Tue 24 Oct 2023 03:29:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26042
IP address blocks: 103.130.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:ba:bf:07:0a:62:58:9b:ff:69:9b:a0:eb:15:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Oct 24 03:29:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50d1cc36b405b768d2e30d49c94c0f1b10d6002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:80:b4:95:58:06:25:ab:a0:49:64:7c:e2:
50:f6:d8:9d:17:1b:18:28:b5:49:ac:18:9b:6f:c0:
e8:db:28:7b:83:c2:73:52:e5:be:47:bf:5c:1f:0b:
fc:a7:a7:8c:d0:2a:70:04:8f:b4:ae:1d:a0:45:9c:
0c:0f:2f:d8:f2:eb:2e:49:26:b3:a4:b8:26:3f:5f:
08:52:2e:ce:08:e5:ac:22:aa:3d:3f:74:46:3e:7f:
ba:ff:6f:17:bd:aa:bf:0e:41:ee:64:80:5b:7a:ce:
b8:01:c9:38:e7:58:57:ee:00:04:54:8a:8f:ea:3e:
2e:18:a5:87:7e:bf:95:80:c7:d6:63:88:c1:8b:dc:
d7:56:64:5a:da:eb:36:b8:2a:3f:49:b1:6a:9b:54:
c4:34:12:cc:a1:9f:a3:ab:ac:3e:5b:b9:6e:1a:da:
e4:15:60:60:1d:f0:20:96:d8:17:0b:2c:86:10:eb:
1c:3c:00:52:a2:b3:c0:21:b3:e0:f4:17:1e:ca:fc:
c3:3c:d5:c9:27:8d:d9:70:7d:60:28:6a:1b:ff:41:
4a:c9:d0:80:43:ad:d5:00:0c:1f:6d:11:fb:e3:16:
c4:85:47:d9:d2:fa:6d:e5:13:c2:aa:86:f9:78:b2:
f2:f7:65:a1:95:8a:25:68:e8:18:9c:55:9a:6c:12:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:CC:36:B4:05:B7:68:D2:E3:0D:49:C9:4C:0F:1B:10:D6:00:2E
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/UNHMNrQFt2jS4w1JyUwPGxDWAC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.147.0/24
Signature Algorithm: sha256WithRSAEncryption
16:9a:db:86:53:a8:6f:aa:61:56:3b:b3:09:de:db:46:c0:c2:
1b:04:c6:5e:7b:fd:4b:3c:2c:4e:8a:0f:0b:39:32:42:65:22:
81:56:88:40:8c:e6:58:99:09:66:7f:9f:c9:3e:9a:97:c8:1d:
28:91:4d:63:ed:58:96:0d:d7:ac:2b:34:8e:a9:c7:fe:53:46:
fb:99:dc:0c:d2:d3:58:d9:94:68:83:29:a6:f4:ef:82:42:34:
29:a6:86:63:4e:e0:e5:a1:1a:0a:07:44:08:e1:40:4b:e3:a5:
26:fe:07:2f:59:73:db:d5:6b:c5:aa:19:be:0e:ef:34:c6:ea:
d9:8a:fa:53:b2:68:3a:ee:38:43:82:c7:71:ce:8d:82:79:23:
df:c6:06:68:5e:e4:17:e3:b7:d2:84:6c:0c:98:93:c7:85:5d:
3f:f5:23:f5:6d:76:42:a7:16:e6:4f:73:03:38:1e:91:3c:81:
eb:ee:c9:e5:4a:58:51:e7:59:c4:1e:c2:b4:a0:e8:f1:c1:15:
84:5b:c9:e9:36:b0:8a:33:23:b5:ae:7d:1e:b4:0e:6d:8d:08:
03:ff:2a:a0:42:e4:dc:4f:d7:38:3d:44:99:6f:dc:35:64:2c:
21:52:94:74:d3:c7:2b:13:39:b4:41:bb:76:c2:3e:a2:63:c8:
65:9a:d2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org