Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/flscxkHRrwjGYr8q9sSjIb_CmUw.roa
File: flscxkHRrwjGYr8q9sSjIb_CmUw.roa (raw, json)
Hash identifier: UG4q8UqwSGEYi7cy4VeGVmD2P6PsFLyreTNWe9tNAqc=
Subject key identifier: 7E:5B:1C:C6:41:D1:AF:08:C6:62:BF:2A:F6:C4:A3:21:BF:C2:99:4C
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 018E9000A4FE8967C36E1449A4CA2F1F071B
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/flscxkHRrwjGYr8q9sSjIb_CmUw.roa
Signing time: Sat 30 Mar 2024 15:35:44 +0000
ROA not before: Sat 30 Mar 2024 15:35:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136359
IP address blocks: 103.69.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:90:00:a4:fe:89:67:c3:6e:14:49:a4:ca:2f:1f:07:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Mar 30 15:35:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e5b1cc641d1af08c662bf2af6c4a321bfc2994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:8b:00:37:8a:57:46:70:65:11:fe:ab:30:
76:a4:4e:d4:7e:09:97:bb:5d:7c:2d:9f:9d:11:2e:
35:d4:c4:20:87:b7:86:6c:ce:d6:12:3c:d9:d0:e9:
35:fb:6a:47:96:1d:ba:57:ae:dd:32:a8:66:e6:6e:
d0:87:39:06:9f:ad:73:5a:f3:63:c4:bf:a7:da:65:
37:2c:c9:3f:dc:29:f4:fc:d3:85:aa:62:a4:6f:67:
91:6c:4c:3d:eb:65:20:ee:65:37:cd:3b:54:30:c6:
9f:20:4a:3d:e3:a6:a8:6b:dc:7c:dd:ef:3e:1e:25:
67:d4:c5:65:82:a2:30:d5:80:23:2f:73:79:44:90:
fb:c1:18:5a:d9:12:c1:07:d0:12:6b:37:1c:92:c3:
79:74:b7:49:5b:d0:c9:89:05:c9:07:7b:25:33:a4:
d1:e2:e5:23:87:34:39:9e:e0:11:1c:79:48:cd:4d:
c1:f4:d5:b8:65:09:0b:ad:04:b2:1b:f5:cc:9e:a6:
9c:91:a9:73:73:8a:e0:af:49:80:4c:31:b8:a7:54:
c8:cd:d5:d7:ff:91:16:5a:17:a1:f3:d6:64:5c:53:
a1:dd:ad:6d:e9:f6:3e:45:06:c9:a9:8b:04:51:bc:
4b:fb:07:65:e4:b2:95:81:ef:4e:8f:3f:e8:b6:e0:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:1C:C6:41:D1:AF:08:C6:62:BF:2A:F6:C4:A3:21:BF:C2:99:4C
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/flscxkHRrwjGYr8q9sSjIb_CmUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:39:c3:4f:40:d9:d0:fd:78:5a:7f:71:98:47:4c:af:5f:4c:
0f:64:e6:b3:16:55:07:4b:78:e6:af:79:fa:05:d1:4f:e9:72:
60:81:98:cc:5c:1f:16:87:c2:7d:21:be:ad:5d:c5:a1:22:51:
0f:cc:1b:fa:4d:58:e6:16:17:48:51:94:0b:73:85:1f:3e:f4:
3d:47:17:2a:5a:53:db:a1:bb:d6:a6:d4:f0:35:01:1b:14:66:
c9:f5:58:aa:5a:21:fc:76:68:b3:bb:b1:d8:8f:b1:c5:b4:4f:
2e:54:81:c1:d7:18:eb:c9:9d:79:1c:cd:cb:37:97:a7:fb:16:
bb:ed:e4:3f:0c:9c:01:74:25:c8:30:c1:c6:cc:05:70:be:05:
b5:c4:4c:f6:de:7a:8b:58:8c:ad:91:ac:4e:07:8c:5d:6d:34:
5f:9c:49:50:4a:d3:f5:a0:30:69:46:b9:52:ac:56:3b:05:14:
60:79:7e:bf:03:36:00:83:9c:6a:58:2a:6b:0e:12:40:77:69:
3c:09:52:d7:7f:fe:79:33:82:86:96:d9:ab:b1:15:a1:b2:b1:
f0:3f:d0:8f:be:23:ae:b3:5c:83:9d:e7:82:fb:af:d2:19:9e:
41:0e:5b:2e:c5:d8:bf:94:1b:9f:16:91:45:ed:9a:33:04:e1:
95:ca:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:28 2025 by rpki-client