Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kZWDxiyMtCXvaumytMUDms18xJo.roa
File: kZWDxiyMtCXvaumytMUDms18xJo.roa (raw, json)
Hash identifier: dWvFaTeM3hsJbjvhrlTi3rlU7r99XyCsL49LkE9bQT4=
Subject key identifier: 91:95:83:C6:2C:8C:B4:25:EF:6A:E9:B2:B4:C5:03:9A:CD:7C:C4:9A
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 018FF26F8B93D92A0700BF874A3DB3260231
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kZWDxiyMtCXvaumytMUDms18xJo.roa
Signing time: Fri 07 Jun 2024 11:22:27 +0000
ROA not before: Fri 07 Jun 2024 11:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.69.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 05:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:6f:8b:93:d9:2a:07:00:bf:87:4a:3d:b3:26:02:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jun 7 11:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=919583c62c8cb425ef6ae9b2b4c5039acd7cc49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:f1:7a:39:e3:ee:a6:63:01:70:00:97:ad:
69:03:47:13:cb:4e:ce:1e:7c:1c:36:a7:c9:77:d1:
8f:fd:c3:b9:85:a0:70:19:43:bc:96:1f:81:48:13:
c9:8c:b6:15:06:e0:bf:31:92:3c:90:1d:3e:dc:48:
38:5a:36:99:c7:d6:77:37:c1:ea:3d:36:3e:a6:0b:
24:0d:ca:a8:94:98:8b:b5:8f:4b:cb:e4:9f:4d:0a:
18:4e:61:9c:58:ae:64:6f:56:b2:6a:b9:a6:2d:3c:
6c:a4:e6:3e:7a:47:7b:93:46:ef:71:b9:b8:34:fc:
94:76:70:a0:18:0d:00:2f:f7:ae:26:1f:d2:22:eb:
3f:74:87:d8:5b:d4:40:77:82:ca:5e:cd:de:de:88:
b2:a7:46:9c:88:83:00:ba:de:90:e2:9d:99:5c:0a:
4a:2a:7f:54:00:9b:cf:39:a3:7c:2f:0b:d2:fe:75:
aa:fc:34:3b:1b:7b:9b:8f:e2:82:24:be:06:7f:75:
1c:26:87:62:ce:a6:d9:5f:2a:4b:f4:a9:82:6c:f9:
41:95:8f:1b:bf:02:44:21:c4:51:56:8b:0d:28:5f:
5d:9b:46:d9:63:0d:1c:c2:c6:4c:f1:f9:7d:56:ea:
c0:5d:56:e8:2f:98:3b:c0:ac:c1:2d:e8:bb:f5:4b:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:95:83:C6:2C:8C:B4:25:EF:6A:E9:B2:B4:C5:03:9A:CD:7C:C4:9A
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/kZWDxiyMtCXvaumytMUDms18xJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:50:f3:cd:4a:2d:ea:19:2d:5b:b0:b6:bf:1e:5b:05:38:0e:
49:6d:f5:29:1f:27:fb:64:25:71:73:fd:60:66:c6:d5:97:c6:
48:d7:08:61:d2:04:d2:94:af:e3:a8:39:ad:2d:c5:93:e3:7c:
53:53:05:82:40:03:8d:8f:f6:53:af:98:78:ea:e9:2b:5e:7c:
70:73:13:0a:4b:af:b8:3b:fa:95:7c:19:8c:a1:d7:a8:29:db:
34:d4:56:28:e6:3b:10:34:c9:e1:31:0c:b7:10:59:de:df:4c:
7b:0d:a4:73:e5:c6:94:71:fd:a3:cd:bd:06:c0:a5:1d:64:26:
b6:94:a2:16:25:6a:6e:24:29:e9:3e:d7:5a:52:72:b4:72:37:
ec:33:35:52:92:82:10:e2:cf:b6:c4:77:32:64:6f:27:31:0e:
d9:cc:2c:94:06:61:9c:29:f8:2e:34:c1:7c:ea:c2:d7:a2:d8:
1a:66:97:19:e2:63:e8:4b:dc:d3:87:37:f8:db:cb:c9:a1:9b:
bf:dd:ca:ac:be:d9:1c:80:5d:0c:86:c1:ab:05:c3:d4:8c:0e:
83:c3:85:91:f5:08:38:7d:b1:ce:33:fa:27:13:66:56:14:1d:
c3:9b:70:14:68:b8:e8:92:ba:43:62:46:82:36:8c:f2:21:88:
01:8e:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 07:41:00 2024 by rpki-client on console-ams.rpki-client.org