Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kA__bCTfm1P3Z4TTSkVPb0H1Xxg.roa
File: kA__bCTfm1P3Z4TTSkVPb0H1Xxg.roa (raw, json)
Hash identifier: m9oduWKolO2hIh4VjYbB+DNuT5Cq7MNl3lhsy9m4/WY=
Subject key identifier: 90:0F:FF:6C:24:DF:9B:53:F7:67:84:D3:4A:45:4F:6F:41:F5:5F:18
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0191A23C3DBEB2A56C788845078DA8502577
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kA__bCTfm1P3Z4TTSkVPb0H1Xxg.roa
Signing time: Fri 30 Aug 2024 07:42:22 +0000
ROA not before: Fri 30 Aug 2024 07:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 103.100.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 22:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:3c:3d:be:b2:a5:6c:78:88:45:07:8d:a8:50:25:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 30 07:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=900fff6c24df9b53f76784d34a454f6f41f55f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:01:18:6c:d8:5a:c1:06:8f:a7:3e:ff:e1:
68:ee:f4:b3:f9:21:d9:9e:a3:d3:d1:c4:0c:b9:29:
13:fb:56:bb:b7:33:d6:05:18:ab:64:35:aa:59:22:
f8:fa:f7:64:40:9f:e6:8f:38:ef:c7:1e:63:36:67:
f2:08:55:e6:45:0d:a8:97:69:58:4f:01:28:5b:51:
c8:a0:07:82:04:6c:0f:30:f2:c0:95:26:ba:a1:34:
c4:6e:cb:1d:c4:e1:2f:0c:40:3b:9a:38:8e:97:fa:
e1:51:fd:1c:71:bd:20:67:ab:4d:86:b6:6e:c2:c3:
61:ee:ce:b2:44:b1:c7:42:a7:63:0e:5a:5d:3a:3c:
61:8c:e1:fe:da:54:c2:3b:0b:97:0a:ca:50:f5:c9:
cc:87:8f:40:3c:d7:58:19:3c:48:6b:70:c1:cf:c1:
31:fe:94:71:3b:cf:b7:40:f8:6a:9d:fd:54:04:14:
27:24:7d:05:2d:88:e7:32:45:66:a4:02:ec:80:0c:
1d:1d:9a:73:0c:9a:ea:a2:80:fa:57:db:71:c7:3a:
85:fd:91:33:0d:4d:3c:4a:0b:cb:fc:d4:a0:1c:f5:
1c:37:f4:d7:8a:60:ee:34:b6:1e:65:19:0a:ac:fc:
0c:fc:38:da:a1:75:99:1e:d3:1d:e5:96:10:89:d9:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0F:FF:6C:24:DF:9B:53:F7:67:84:D3:4A:45:4F:6F:41:F5:5F:18
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kA__bCTfm1P3Z4TTSkVPb0H1Xxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b3:b8:e3:cd:e9:34:48:31:d7:1d:a0:96:af:18:4e:d7:98:
70:49:73:c3:4c:8f:a3:32:49:d7:e4:5b:58:ad:b3:39:75:34:
43:a7:65:53:cb:ab:a5:10:ae:63:7d:29:ad:59:ef:bf:56:bb:
b3:78:00:24:a3:ce:04:0c:50:2b:e3:e6:26:1c:78:68:ca:4e:
94:fe:c9:53:08:f3:4f:74:d1:54:e5:0e:99:31:88:eb:48:62:
4d:89:57:99:55:c1:4e:43:36:c6:eb:63:2b:a7:6f:36:5b:a6:
ac:a6:f8:70:16:91:2a:dc:c0:af:6b:30:6f:6f:b2:84:fa:b3:
1f:55:e2:84:54:ef:dd:52:02:4b:da:e2:06:b9:61:c3:57:e7:
f3:8b:50:47:f0:ab:44:a1:9a:35:0a:f7:14:7e:9e:0e:48:12:
06:78:3c:5d:9a:2d:09:a0:e3:0c:f9:6a:35:4d:13:ae:54:12:
71:fe:bf:c2:62:75:62:24:04:5c:66:29:f6:91:7a:fa:4d:5e:
c5:c6:f8:01:4c:3a:c5:6c:75:4a:76:4e:d7:68:b9:76:4a:99:
1b:a6:68:45:6c:77:d5:4a:de:30:11:68:68:b4:3b:80:50:9e:
4f:f1:a1:06:7f:9c:e1:e7:94:42:41:29:96:a3:61:f0:72:fc:
ec:4c:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 01:13:39 2024 by rpki-client on console-ams.rpki-client.org