Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/944PqzzYEqDR4hH4mNYTwoWMi2M.roa
File: 944PqzzYEqDR4hH4mNYTwoWMi2M.roa (raw, json)
Hash identifier: i/S1Oz8evZRMY7Pp048jaT7hnzFHViXFEMUHE/CVN5Q=
Subject key identifier: F7:8E:0F:AB:3C:D8:12:A0:D1:E2:11:F8:98:D6:13:C2:85:8C:8B:63
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01869CE6FDB8EADCD086287DCF5E2EBC281D
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/944PqzzYEqDR4hH4mNYTwoWMi2M.roa
Signing time: Wed 01 Mar 2023 11:20:29 +0000
ROA not before: Wed 01 Mar 2023 11:20:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16262
IP address blocks: 116.206.95.0/24 maxlen: 24
103.213.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:e6:fd:b8:ea:dc:d0:86:28:7d:cf:5e:2e:bc:28:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Mar 1 11:20:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f78e0fab3cd812a0d1e211f898d613c2858c8b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:41:fe:22:ff:8f:44:79:65:11:7c:a1:b1:
3b:60:84:10:77:1b:fa:47:77:57:80:8a:28:48:b3:
04:34:be:10:6c:a2:70:c6:97:46:33:db:60:df:1f:
02:cd:54:f6:06:d7:da:4f:a1:79:4e:5b:2e:95:31:
a0:6b:06:30:19:42:de:18:b6:f0:32:e5:76:98:0c:
9c:6a:ab:92:9d:67:6f:cb:a6:0f:12:ec:8b:75:42:
ea:b7:6b:19:29:be:26:78:d3:b6:af:87:ba:12:c6:
26:b6:1b:12:8f:fd:26:75:bb:2b:9d:d8:ab:3f:41:
a9:49:2e:6e:8c:0e:bb:65:26:b1:31:d1:22:4a:2c:
e6:b8:c5:0f:9c:58:76:b5:29:75:c2:4d:d5:68:99:
5c:9d:30:69:50:bb:41:dd:ae:38:1b:d2:b7:6b:43:
05:ae:a4:dc:22:90:1d:0b:08:13:da:11:dd:c1:27:
07:1a:a0:87:3e:53:b6:64:3b:06:3b:3e:fd:3e:ed:
a3:7d:f3:b6:55:59:65:d2:c5:c8:79:32:ac:fa:4a:
37:f0:a6:7b:d0:8f:e0:e5:f3:0c:b7:d1:4d:bb:b4:
43:d9:87:f9:ba:ea:68:86:34:b5:7b:b0:d9:5c:41:
c4:1e:fd:1c:07:81:d9:93:3e:b5:d8:02:89:6d:bd:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:0F:AB:3C:D8:12:A0:D1:E2:11:F8:98:D6:13:C2:85:8C:8B:63
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/944PqzzYEqDR4hH4mNYTwoWMi2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.248.0/24
116.206.95.0/24
Signature Algorithm: sha256WithRSAEncryption
11:97:87:ee:3e:40:71:c3:54:da:7c:12:a0:de:63:fa:64:5c:
a4:12:83:2e:e2:9a:92:f5:eb:e8:a3:d6:b3:21:7b:c2:5b:f7:
83:59:60:6a:bd:d9:78:29:8a:fe:43:28:6f:a7:2c:f9:d4:50:
2c:dc:24:da:91:0d:19:fd:16:a4:d6:fe:09:39:32:5b:de:02:
33:86:7d:09:53:83:45:3b:23:91:dd:79:17:83:33:f6:19:93:
59:3e:00:fe:0f:09:fb:05:4f:e1:38:7d:f4:54:47:7b:e6:6c:
a8:5f:a4:bf:e9:58:b1:0d:8f:89:af:88:6f:c4:2d:cf:cb:9b:
71:e2:37:f1:4e:dc:cd:b0:2e:78:ef:02:72:af:15:cd:3e:2f:
3c:6b:25:c3:c7:57:4a:14:fe:d8:75:5f:81:48:5a:45:d5:27:
4a:db:98:3b:35:57:22:44:91:a9:42:af:a9:e7:e8:8c:3e:20:
4c:a4:c7:34:3f:7e:64:ed:48:90:28:c2:3b:c4:5f:23:8b:62:
75:d8:c5:b7:e4:0f:ff:30:95:40:20:82:c8:eb:5a:24:be:b9:
86:38:87:92:04:0c:8a:96:b3:a8:b2:f0:a7:46:82:c3:6b:6a:
84:92:6f:bc:04:f7:9d:52:bd:3c:e4:0c:3c:53:be:60:4e:66:
89:5b:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:58 2023 by rpki-client on console-fra.rpki-client.org