Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YSfYp76hsP_EfnPLGnKQMDru7yw.roa
File: YSfYp76hsP_EfnPLGnKQMDru7yw.roa (raw, json)
Hash identifier: 6IMBLHTKch1jjTtOBRQiyosN/c+f3SAjtZdb6nyoIk8=
Subject key identifier: 61:27:D8:A7:BE:A1:B0:FF:C4:7E:73:CB:1A:72:90:30:3A:EE:EF:2C
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0190A63E8932CCE65D8C048E44501E01B241
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YSfYp76hsP_EfnPLGnKQMDru7yw.roa
Signing time: Fri 12 Jul 2024 09:20:34 +0000
ROA not before: Fri 12 Jul 2024 09:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212517
IP address blocks: 103.211.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:3e:89:32:cc:e6:5d:8c:04:8e:44:50:1e:01:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 12 09:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6127d8a7bea1b0ffc47e73cb1a7290303aeeef2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:49:e0:e9:dc:00:9c:1a:e1:e8:43:ba:4c:
62:02:0f:a6:8c:90:ce:fd:aa:18:20:93:cc:77:7f:
6e:d7:b5:46:1d:4a:04:cf:ef:47:9f:56:86:34:71:
d5:fe:50:c6:f5:a0:20:d0:e0:b6:eb:d1:32:23:52:
97:0c:c5:14:42:e6:f2:23:eb:d7:b9:12:ef:ab:ec:
31:4e:e6:14:83:31:06:45:1b:b7:62:10:85:29:73:
11:d9:02:96:06:cc:00:fa:21:26:0a:5b:c0:4a:db:
d6:84:93:ad:56:57:10:58:db:ac:44:0f:59:6a:08:
b9:e6:2d:7a:ce:51:cf:18:be:e8:12:d1:6a:45:16:
b2:7d:86:5a:a7:55:cc:e4:0f:d7:1f:96:15:7d:01:
b8:61:14:45:3e:ce:d8:9d:94:90:cb:4c:c8:3a:e9:
d7:eb:bf:66:fe:04:38:80:b2:a0:06:37:2e:ef:5a:
a7:3b:2d:3b:a2:96:c2:40:8b:41:b2:1b:24:55:2f:
2a:d0:43:f2:11:5a:43:75:22:8a:d8:18:f6:66:30:
99:43:74:33:ee:df:81:ae:8c:7a:fe:15:be:ff:3e:
48:ea:ea:d8:36:1f:28:58:09:bc:c9:8e:f6:b7:7c:
77:c6:27:8e:82:d3:c9:13:34:63:e5:3d:6e:2c:92:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:27:D8:A7:BE:A1:B0:FF:C4:7E:73:CB:1A:72:90:30:3A:EE:EF:2C
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YSfYp76hsP_EfnPLGnKQMDru7yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:01:a1:38:a6:c3:df:7c:d6:50:3f:d4:55:d2:5c:5e:de:01:
42:e2:1f:18:f1:c2:30:96:48:63:b3:fc:bb:2b:f0:0b:ef:2e:
02:cb:4e:62:7e:60:63:2b:ae:6f:6d:47:a6:0e:14:2f:22:6f:
ad:43:d8:73:b2:34:73:4b:df:c5:cb:e3:28:44:3e:02:43:b7:
ac:57:ba:76:41:8d:d9:3c:45:e2:c5:51:7f:bf:b9:c0:79:c1:
2e:a3:92:80:ef:ad:87:d4:c5:bc:30:c6:02:3c:11:06:aa:98:
88:06:b5:32:d1:bc:a1:02:63:d0:8d:a9:b3:4a:8b:62:9b:52:
5f:ff:ed:fb:4c:9f:50:ad:67:fc:31:a5:b7:c3:2e:cb:48:5e:
9e:69:4e:ce:94:dd:4f:c2:92:d7:6d:cd:e0:b4:28:fa:7e:61:
50:2b:8c:0e:43:32:f5:6a:59:85:44:e1:75:ce:da:24:9e:74:
75:be:63:3c:76:80:b8:87:0d:ad:03:23:dd:dc:cc:37:7a:3d:
ee:15:4d:76:09:0a:82:f4:c9:c8:3b:8d:21:a2:38:bb:21:77:
9a:65:4e:34:05:2d:db:68:02:3a:f0:46:a0:5e:4e:59:d6:06:
3f:25:de:79:29:fd:69:53:07:07:df:95:e7:6a:e3:a0:6b:6e:
6e:a7:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 06:05:32 2024 by rpki-client on console-fra.rpki-client.org