Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/eIM3v62wBnMIFoREODaePHY2jeQ.roa
File: eIM3v62wBnMIFoREODaePHY2jeQ.roa (raw, json)
Hash identifier: TZEstyxtvgXvIgFgW61dtiS4nHtSjDxO5HDl1WvNyQE=
Subject key identifier: 78:83:37:BF:AD:B0:06:73:08:16:84:44:38:36:9E:3C:76:36:8D:E4
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 0191F4D6946B4A094BCEE8D721870F3A20A2
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/eIM3v62wBnMIFoREODaePHY2jeQ.roa
Signing time: Sun 15 Sep 2024 08:39:48 +0000
ROA not before: Sun 15 Sep 2024 08:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.69.224.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
188.95.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 12:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f4:d6:94:6b:4a:09:4b:ce:e8:d7:21:87:0f:3a:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Sep 15 08:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=788337bfadb006730816844438369e3c76368de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:02:e6:11:6a:4d:0e:f7:fc:e9:61:c0:03:
e2:d0:3a:28:7c:de:5f:8d:c2:ba:ae:fc:16:56:f5:
6e:d1:2a:da:84:c5:4f:52:2b:e8:fc:f0:87:69:b5:
a2:e3:c0:bb:3a:c5:a4:d7:62:ad:e5:7c:56:98:1b:
38:b5:ec:75:79:fc:48:15:4c:43:2e:ed:91:3e:e1:
4e:a0:45:54:44:18:12:50:59:d7:fc:02:93:1c:5d:
d4:f6:cc:c2:e0:db:be:f6:2e:48:8b:ed:b9:a4:9e:
e4:45:c4:fd:99:7b:90:2e:ea:4e:f8:50:93:5f:e1:
2b:e6:15:95:8c:cf:b6:0d:59:ca:a8:de:1e:29:bd:
32:4a:b5:a3:63:60:a2:d5:cd:6e:c5:c1:14:b7:2c:
54:cb:ab:aa:ae:c6:7c:2e:56:32:15:10:3d:6e:db:
c5:52:59:36:b2:32:6c:a9:f8:83:44:4a:a4:bb:d1:
f2:82:ad:e9:9f:59:88:61:7e:df:d0:9c:c0:45:32:
38:27:48:b8:21:f3:8e:21:e2:82:fe:ec:1d:7f:50:
aa:24:f2:a2:ce:9f:2b:69:66:98:c0:bb:a9:a0:de:
01:e6:52:f6:86:de:e0:2d:a6:a2:2c:3e:71:66:c8:
4a:a6:fb:36:95:19:73:f5:e3:e6:32:33:81:37:90:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:37:BF:AD:B0:06:73:08:16:84:44:38:36:9E:3C:76:36:8D:E4
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/eIM3v62wBnMIFoREODaePHY2jeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.224.0/24
185.191.21.0/24
188.95.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:04:3f:91:5b:3d:27:7a:b6:97:1f:0a:a8:70:72:92:0b:8b:
2b:8d:be:2a:f4:c4:b2:4d:4d:9c:2a:da:05:c0:88:18:56:33:
83:02:f1:49:b2:e5:e8:49:4a:94:1a:5d:26:5e:8c:84:af:a2:
92:a7:78:ba:a4:09:61:15:0d:b5:99:3f:19:ee:f6:91:82:36:
45:64:43:46:b8:f5:bf:33:16:fb:2a:d1:ca:00:b0:45:32:1f:
0e:d3:1c:fa:2e:29:df:1a:37:81:01:ab:87:96:c4:a1:af:35:
35:05:a8:bb:f1:bd:e7:aa:0c:85:88:0d:8a:0f:8d:8c:ca:75:
fc:fd:86:7c:9d:94:17:e1:f4:9f:e0:d7:40:a9:0d:8b:a8:e4:
86:f1:ba:92:05:46:af:39:cb:76:f1:66:dd:9c:a8:8d:bf:a5:
46:7c:73:0d:04:62:81:04:a7:ff:30:96:10:7b:7f:f9:41:1c:
89:f5:88:3a:08:ff:a1:3b:3d:67:3e:64:17:dd:4c:3f:bd:2c:
4b:d2:59:7b:de:a2:ca:1f:8a:42:d6:23:19:31:0f:77:ca:c8:
5c:6a:88:86:df:61:08:40:57:60:cd:86:95:66:c8:a2:c5:78:
ad:ee:74:8b:bb:ca:f0:9d:c1:a8:7d:3e:34:a9:fd:10:d9:b4:
1b:a5:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 16:29:52 2024 by rpki-client on console-ams.rpki-client.org