Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-AnVwi35De7cAgqY_7d2k5uDGHw.roa
File: 1-AnVwi35De7cAgqY_7d2k5uDGHw.roa (raw, json)
Hash identifier: tfu6wBMtFC0T6tVNOhiMyX9C/+dhk4QTpEuBTCFtMP8=
Subject key identifier: F8:09:D5:C2:2D:F9:0D:EE:DC:02:0A:98:FF:B7:76:93:9B:83:18:7C
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0190CDF75E32806A3C54E4E07D944812B41C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-AnVwi35De7cAgqY_7d2k5uDGHw.roa
Signing time: Sat 20 Jul 2024 02:27:39 +0000
ROA not before: Sat 20 Jul 2024 02:27:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141718
IP address blocks: 45.155.226.0/24 maxlen: 24
103.211.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 07:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cd:f7:5e:32:80:6a:3c:54:e4:e0:7d:94:48:12:b4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 20 02:27:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f809d5c22df90deedc020a98ffb776939b83187c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:2c:c4:1f:8f:86:f9:fc:a9:21:82:b1:d3:
e2:14:b1:85:db:eb:46:e0:ec:71:58:0c:bf:5f:34:
6a:0a:0d:1b:64:71:42:ad:ea:20:48:aa:fe:1c:6d:
1f:51:e9:9b:83:f9:b3:6c:e7:38:52:b4:70:6b:54:
00:5d:f2:eb:82:11:74:08:e9:94:85:8e:60:27:82:
78:0e:5e:f5:31:0c:18:37:21:d9:88:4f:5a:54:29:
53:3c:20:e8:16:23:e0:d2:ab:c7:36:3e:87:14:c3:
a1:67:23:3f:0c:79:c7:6b:18:cb:d7:20:c9:b3:40:
ef:92:8b:54:42:0d:88:80:ae:a1:1a:78:9c:b6:ba:
16:16:89:59:2b:9f:ad:8a:20:51:97:02:4e:ff:3e:
83:a8:75:00:4c:63:30:ec:6b:91:f7:74:d5:ca:95:
b4:6c:34:90:66:4a:46:61:a5:45:46:3c:97:53:10:
ea:57:cc:a8:56:36:9a:a9:45:ae:33:7d:fe:25:40:
e2:51:ee:4c:8b:14:48:e9:a2:4e:60:ad:bd:1e:37:
35:4b:8a:31:e8:a6:aa:4a:61:16:79:2f:27:f5:86:
c0:0a:1b:ea:42:05:fd:d0:fa:d0:39:28:4b:8c:ba:
56:74:4d:60:67:9e:86:c9:53:90:35:b4:09:86:a8:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:09:D5:C2:2D:F9:0D:EE:DC:02:0A:98:FF:B7:76:93:9B:83:18:7C
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-AnVwi35De7cAgqY_7d2k5uDGHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.226.0/24
103.211.103.0/24
Signature Algorithm: sha256WithRSAEncryption
97:36:4c:da:a1:2c:dd:66:05:94:a5:59:03:47:70:59:a7:16:
0a:66:e5:89:e1:c9:1c:77:08:73:e6:5a:07:7e:63:d8:fb:f0:
87:88:c2:07:7d:9a:5b:6a:b1:c1:62:68:c4:1d:b0:ce:a2:b9:
16:4e:c4:6c:92:d8:9a:a5:80:a4:86:6c:36:96:fe:46:d9:ad:
44:26:3a:54:b4:67:cb:ba:bc:6b:4c:d1:14:50:33:ac:ff:98:
f2:38:18:bb:46:6a:93:73:54:1f:cd:20:7b:89:69:12:99:5d:
6f:80:31:a6:a1:11:51:18:71:67:c9:59:1a:18:3e:8f:7c:e3:
db:77:ac:d6:cb:11:77:77:60:54:6f:d7:0c:6b:24:6f:75:72:
96:74:e8:1f:c4:4c:14:b1:0b:2c:a3:26:c8:0a:a8:08:95:4a:
9f:14:9a:89:ee:1a:fd:8b:10:5b:01:34:a9:6c:88:2f:3e:dd:
3a:64:8e:df:8a:a0:6f:ca:0a:62:02:7b:15:4a:73:b0:cc:a9:
02:cd:12:30:61:3b:42:d7:2e:3a:55:33:b7:fe:44:ee:79:3b:
ab:de:18:ca:54:89:aa:47:60:6c:fb:ee:78:4c:e0:47:0b:ab:
1f:48:b2:65:b8:15:70:b2:65:e0:f3:8b:6c:4e:33:f6:98:c6:
28:7d:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 09:47:46 2024 by rpki-client on console-fra.rpki-client.org