Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AL2zzyJqgUOEQUsu5cUf9q69UbU.roa
File: AL2zzyJqgUOEQUsu5cUf9q69UbU.roa (raw, json)
Hash identifier: HiJbb6MUPcHYvKwk07HcO+5njJa60qtvZ71JJZJXJOw=
Subject key identifier: 00:BD:B3:CF:22:6A:81:43:84:41:4B:2E:E5:C5:1F:F6:AE:BD:51:B5
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0190DF39B3B23059DC4138ACC0CC6CD80D9B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AL2zzyJqgUOEQUsu5cUf9q69UbU.roa
Signing time: Tue 23 Jul 2024 10:53:38 +0000
ROA not before: Tue 23 Jul 2024 10:53:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141718
IP address blocks: 45.155.226.0/24 maxlen: 24
103.211.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:39:b3:b2:30:59:dc:41:38:ac:c0:cc:6c:d8:0d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 23 10:53:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00bdb3cf226a814384414b2ee5c51ff6aebd51b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:7f:d3:32:45:1c:5b:ab:a5:76:5d:fe:5a:
98:05:43:b1:4a:8a:ac:dc:ad:ee:96:05:16:a4:de:
e1:5b:a1:10:6a:ef:4f:82:1e:39:d2:6a:e6:ed:97:
fc:1d:8a:bb:44:08:35:19:a9:44:c5:a4:81:da:7d:
05:8f:e3:7c:40:cf:34:00:4c:9c:e8:fb:02:8e:0a:
fd:7b:34:1c:ad:11:42:ac:6b:62:c5:e0:b8:82:e2:
56:5f:28:1a:92:a4:58:cb:91:bb:86:30:dd:bb:77:
aa:bb:10:a5:09:9c:07:8b:ab:02:f5:bd:81:ce:08:
5a:a8:7f:82:aa:e9:e8:4e:d9:5f:78:49:a5:8f:06:
e4:ed:2c:1c:f7:e4:d8:61:d8:e5:14:16:33:2d:ac:
4e:86:be:ee:8c:8e:0c:02:b7:b2:62:f5:42:2b:96:
ac:1b:2d:15:18:05:54:b5:c6:02:42:0c:e1:71:64:
c0:2a:2a:21:1d:2a:76:5c:b6:e0:6c:0f:9a:f2:b8:
6f:62:87:0f:74:b5:93:cc:3a:03:83:81:19:26:04:
aa:c6:39:8d:47:36:73:d8:b6:63:54:24:39:32:93:
6b:5e:91:73:52:dd:e1:37:31:b0:d6:1e:15:07:82:
2e:50:f2:74:bf:83:67:7e:3e:5d:a3:09:25:68:15:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BD:B3:CF:22:6A:81:43:84:41:4B:2E:E5:C5:1F:F6:AE:BD:51:B5
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AL2zzyJqgUOEQUsu5cUf9q69UbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.226.0/24
103.211.103.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5c:80:b0:5b:ff:01:3c:61:d6:47:08:08:26:c2:73:2d:83:
dc:92:76:67:7d:81:f7:58:06:1c:c1:48:8e:c7:8f:cc:f9:86:
80:be:3c:b4:1c:4a:96:6c:b0:b8:c5:e6:b4:37:63:f4:d8:62:
f4:ef:3d:f8:ab:a2:d5:69:48:b7:02:56:dd:a4:7d:bf:1d:b1:
53:1f:52:e5:d9:45:57:76:8c:8f:c7:04:2b:5f:73:de:3e:bf:
12:94:48:80:b7:c9:b5:ba:25:cf:34:73:55:5f:0f:38:e5:96:
3c:4e:f7:5a:45:65:8c:39:6a:36:0b:27:f2:12:d4:16:7e:d0:
74:87:37:c5:3a:30:77:25:f5:80:5d:28:18:86:d1:50:8c:41:
02:b5:4f:86:9c:b8:f6:62:57:ed:fe:1c:de:26:ea:6b:d0:95:
9b:e7:8e:0b:44:8b:a4:be:ef:09:1a:19:cb:5f:cc:b3:df:54:
3a:22:80:bc:47:3c:4a:d7:2c:2d:2f:3b:6a:15:a5:73:4c:dd:
13:55:5d:87:a3:f2:aa:8c:3a:70:6e:87:6b:7d:30:d5:a8:12:
b1:52:7b:06:c5:29:0d:8b:a4:0d:4f:80:1f:bc:fd:2d:13:0c:
30:cb:11:7b:bd:53:cb:9c:27:c1:17:a0:bc:1c:78:5e:c1:52:
83:98:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:34 2025 by rpki-client