Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/jz6aFC1AiQzrdm31CrAwZm4M6Fg.roa
File: jz6aFC1AiQzrdm31CrAwZm4M6Fg.roa (raw, json)
Hash identifier: mzVAnF+a9JiIAIgxlINsuIO9c+ajx/P6WvIcMA+s2+M=
Subject key identifier: 8F:3E:9A:14:2D:40:89:0C:EB:76:6D:F5:0A:B0:30:66:6E:0C:E8:58
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0193D01B2E45F85E9ACE2F03CDA4E7EA8E94
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/jz6aFC1AiQzrdm31CrAwZm4M6Fg.roa
Signing time: Mon 16 Dec 2024 15:34:22 +0000
ROA not before: Mon 16 Dec 2024 15:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51847
IP address blocks: 103.76.85.0/24 maxlen: 24
116.206.92.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
195.78.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:1b:2e:45:f8:5e:9a:ce:2f:03:cd:a4:e7:ea:8e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Dec 16 15:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f3e9a142d40890ceb766df50ab030666e0ce858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:01:a3:f0:64:25:b0:44:72:0c:ef:da:5a:
9c:fd:51:13:7e:53:f6:1e:d9:13:68:d9:bf:e0:53:
46:6b:b8:e3:cc:88:34:32:a8:fa:1a:2a:0d:7f:83:
c7:6d:43:5c:d6:02:6b:3c:5f:ee:17:5c:a3:b1:51:
d5:8c:5f:12:f6:90:5a:5a:83:49:1a:9a:7c:b9:89:
c2:e4:d7:f3:ca:ce:e5:3b:f9:95:0b:99:8a:f2:c5:
f0:52:eb:ce:e0:9d:43:69:12:03:bc:a0:10:1c:b8:
55:d4:e0:70:b7:fe:11:f1:e2:4d:60:d4:9d:b7:24:
c8:ef:e7:4d:71:e5:1a:5b:12:a4:46:15:ad:b2:d4:
a2:78:b5:81:90:a8:e1:79:24:c7:fd:42:3c:96:11:
c5:87:81:ec:62:4a:25:86:54:e2:ea:af:7d:14:0a:
a6:df:a8:a8:54:ab:0f:8b:e9:6e:94:2b:17:52:b3:
d3:3e:ad:4a:85:49:49:85:dc:14:c6:97:31:86:c6:
b9:1c:ed:4b:ca:6d:99:64:7b:5b:3b:3a:56:81:ff:
ff:6f:85:6c:14:6e:f0:8a:27:65:85:b0:b7:8d:fc:
76:83:35:8c:57:05:51:b4:d6:d3:9c:95:5c:2f:f6:
9a:de:ba:1c:6b:9f:75:86:6b:df:b3:c2:a9:3e:7c:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3E:9A:14:2D:40:89:0C:EB:76:6D:F5:0A:B0:30:66:6E:0C:E8:58
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/jz6aFC1AiQzrdm31CrAwZm4M6Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.85.0/24
116.206.92.0/23
195.78.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:54:a4:92:31:f4:29:53:77:64:82:0f:11:18:f5:07:1b:56:
7c:c4:92:52:49:0e:de:3d:71:8a:26:2d:0f:b6:c2:a5:31:3b:
93:72:c7:b4:eb:39:19:a6:0f:61:cd:f1:17:03:13:2f:a7:68:
15:ac:3e:4b:62:f0:07:7a:cd:f1:5e:21:f2:d4:d9:bf:10:55:
c4:aa:39:d4:e0:df:d7:96:02:d0:38:e6:7a:c0:38:bc:46:68:
01:62:9a:b3:e4:de:d7:dc:d4:e5:f5:3d:db:43:8d:db:2e:e2:
ba:42:3f:9f:e2:9a:cc:2b:a2:d2:88:35:3e:bf:eb:08:de:a6:
ee:d2:31:b7:c3:87:2b:b1:bf:0b:6c:a6:87:c8:83:67:36:79:
cc:fe:a3:c8:26:a2:6c:ea:c3:04:05:2d:df:9f:b5:cc:16:ad:
05:cc:8f:61:8d:cb:07:fe:74:2d:41:66:6d:b4:40:d9:aa:90:
a3:34:29:86:d2:b7:6a:de:2a:93:1c:85:c7:64:bd:03:29:1a:
ed:d4:8e:06:59:77:ae:56:1f:f9:c1:87:cc:76:b6:c1:dc:d2:
7c:b4:ae:c4:2b:c9:8d:76:b9:62:31:30:24:fc:88:c5:0a:17:
4f:46:7e:16:41:47:a8:e9:fa:93:b8:ed:5f:ec:d8:4e:2d:f5:
d9:11:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:05 2025 by rpki-client