Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/RkAyS2qYZMniA8feCXZYnk-ls6U.roa
File: RkAyS2qYZMniA8feCXZYnk-ls6U.roa (raw, json)
Hash identifier: vvrMln6yEwhkQ4bCJHX8SBeBUcRZ8i+YY1F/XDSQM44=
Subject key identifier: 46:40:32:4B:6A:98:64:C9:E2:03:C7:DE:09:76:58:9E:4F:A5:B3:A5
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019251CEA113956E1D693BDEA064879731AC
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/RkAyS2qYZMniA8feCXZYnk-ls6U.roa
Signing time: Thu 03 Oct 2024 09:55:49 +0000
ROA not before: Thu 03 Oct 2024 09:55:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215567
IP address blocks: 103.69.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:ce:a1:13:95:6e:1d:69:3b:de:a0:64:87:97:31:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Oct 3 09:55:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4640324b6a9864c9e203c7de0976589e4fa5b3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:c7:60:93:90:48:c2:0d:a2:de:46:92:96:
54:6b:bb:6d:f2:5b:45:62:04:24:c6:e3:88:73:fb:
47:ad:e9:92:5d:8a:00:49:84:dc:3d:bf:04:be:9f:
d2:a3:1e:3e:4a:17:55:fe:fc:81:a7:19:99:60:b5:
ab:e4:d6:f0:dd:29:2b:10:dc:0d:21:8e:5f:d5:81:
1f:e9:64:c9:72:2c:fb:27:06:bb:56:dc:30:3e:ab:
aa:00:34:5f:28:ef:97:17:06:09:c5:03:a6:4d:30:
5d:eb:48:40:eb:3e:10:b2:42:c7:d8:a9:d7:ab:3c:
1d:11:74:04:e7:5f:de:c8:06:5b:3d:0d:5b:9d:b7:
4a:9d:e3:44:95:20:bc:e2:24:cf:32:a0:05:c3:cb:
dd:c7:4c:dd:7d:83:db:a8:79:bd:3e:47:20:46:56:
cc:cc:97:22:6a:2d:a0:9a:c7:aa:13:57:d5:3b:38:
86:f3:36:3b:02:b2:bb:3b:8b:4f:f6:3a:a2:2e:99:
f3:f7:73:1d:a2:aa:d1:0b:7a:30:77:dd:d0:b5:39:
bb:17:c5:a6:d5:01:c2:ff:62:cf:0c:d3:84:17:85:
17:22:ce:1e:08:43:8c:7a:15:de:d9:8f:f5:7e:ff:
0f:41:27:18:f4:a6:55:8d:a2:fe:2c:87:de:d9:93:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:32:4B:6A:98:64:C9:E2:03:C7:DE:09:76:58:9E:4F:A5:B3:A5
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/RkAyS2qYZMniA8feCXZYnk-ls6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d9:c5:b8:74:21:6e:fa:88:69:ae:b2:bf:03:48:a3:cf:f9:
1c:b8:67:db:a2:cc:52:fa:ea:82:60:e7:46:f5:7c:19:07:ab:
6b:60:f8:f3:a4:5d:06:d9:8e:7e:fa:18:63:15:dd:6b:93:21:
6d:8f:e5:92:9f:3a:40:f8:e4:07:65:59:db:87:ce:0a:48:aa:
35:a6:84:4d:58:95:fd:b1:39:92:7b:f8:f5:c6:81:36:8b:20:
c3:c0:c6:85:f3:99:5e:d0:d6:20:bf:34:f8:b2:c2:03:9c:07:
6d:56:ee:1a:aa:f1:3b:67:f0:ed:1b:6f:75:07:69:1b:75:e3:
fc:b5:35:a2:74:f1:41:53:c2:cc:f9:39:f7:94:6e:38:0b:1f:
7a:1d:29:b0:92:96:8e:0e:1a:36:16:86:72:f4:70:1c:26:f3:
cf:72:61:63:02:4d:7e:97:21:35:bc:fc:22:75:55:1b:d3:38:
97:38:98:83:da:ad:f5:48:cf:cb:b5:ea:4f:e4:40:f7:10:05:
28:b7:74:6e:7f:16:65:46:78:1f:8b:ef:8a:dc:9f:11:ba:09:
47:da:57:4e:33:d1:49:4e:9f:6a:c3:1d:98:c3:98:a3:d4:f8:
e7:b3:f9:94:f6:01:e5:c9:71:36:89:13:db:b5:91:e5:c2:6b:
ac:fa:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:17 2025 by rpki-client