Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/xtDz7LVYpPDVbhjiPvmy9dn01o0.roa
File: xtDz7LVYpPDVbhjiPvmy9dn01o0.roa (raw, json)
Hash identifier: LD21xPoFuGX9NKXadAkL/+uJb3tP7qxBwL1KFyYDdI0=
Subject key identifier: C6:D0:F3:EC:B5:58:A4:F0:D5:6E:18:E2:3E:F9:B2:F5:D9:F4:D6:8D
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 0192293B0EF53F1E778B3F98B0C861E853B2
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/xtDz7LVYpPDVbhjiPvmy9dn01o0.roa
Signing time: Wed 25 Sep 2024 12:49:49 +0000
ROA not before: Wed 25 Sep 2024 12:49:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199218
IP address blocks: 103.69.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:3b:0e:f5:3f:1e:77:8b:3f:98:b0:c8:61:e8:53:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Sep 25 12:49:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d0f3ecb558a4f0d56e18e23ef9b2f5d9f4d68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:c8:74:09:73:25:d4:2e:58:09:ae:da:08:
5e:1a:e4:08:21:f5:3a:1f:6a:72:ce:70:67:fe:12:
04:10:29:54:06:cd:c8:0d:c4:17:4c:1b:bb:58:e3:
b8:ec:95:15:df:36:bc:52:7b:43:d0:ef:b7:5a:31:
3f:ef:a5:3b:d6:9e:39:01:b6:79:6a:65:ae:8f:5d:
8a:5a:53:11:dd:0b:05:00:79:d6:b6:8f:b0:f5:81:
c2:58:f3:8e:78:5e:ba:69:f4:90:bf:dd:80:e0:69:
20:9b:63:9b:42:1c:83:69:c8:51:c6:5e:e0:9a:0f:
63:1e:0d:a0:29:22:24:f2:76:31:2b:ea:90:fa:c4:
32:64:40:06:9b:58:a0:ed:95:40:c5:c0:2f:e4:99:
f1:de:d5:b9:bc:05:95:aa:43:57:e2:e2:6c:16:4c:
5b:0d:b4:75:54:88:67:c9:25:83:c8:f5:26:b7:97:
69:5d:06:f2:41:53:09:ae:12:48:31:67:5f:37:1f:
d0:07:43:23:48:ae:ba:db:69:b1:df:0a:5c:a1:5e:
be:00:02:bd:a1:ea:28:7c:ac:35:de:41:a6:e0:72:
a6:2b:e7:84:c7:88:52:79:bc:8a:c6:fd:36:a1:6e:
fd:76:fd:28:81:5f:ad:a0:97:fc:a3:d2:98:dd:27:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:F3:EC:B5:58:A4:F0:D5:6E:18:E2:3E:F9:B2:F5:D9:F4:D6:8D
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/xtDz7LVYpPDVbhjiPvmy9dn01o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.224.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ca:1e:5c:0c:14:77:35:c7:85:22:bd:39:2a:2c:3f:ae:41:
80:33:a2:9d:be:75:19:19:c7:73:64:be:6c:b6:c2:dd:e7:64:
8e:d7:16:72:82:8b:1f:7e:56:85:dc:c8:50:19:71:a3:d5:7d:
99:7a:64:53:98:e6:ad:0d:e1:f3:87:14:e8:3c:a1:79:bf:12:
de:e7:83:81:35:b5:f9:99:24:33:92:3e:7d:9e:eb:53:ae:e1:
81:7e:18:69:9a:60:54:a2:87:4c:28:05:f2:2c:18:56:43:49:
70:e8:01:4b:04:9c:cf:6c:c6:82:e0:b2:82:e8:f1:e6:5b:54:
33:46:3b:0e:d9:b9:bd:06:d4:b4:7e:5b:9c:51:46:fb:d9:19:
0e:b5:18:e2:64:7c:fb:61:09:bf:eb:1c:0c:94:a8:dc:bd:49:
17:43:c7:c8:a0:30:c1:88:e5:de:87:11:d3:44:fd:e5:b7:90:
d8:ab:8c:6c:d6:0d:53:d9:70:41:fd:d5:60:86:94:bb:5e:70:
90:db:6c:55:e4:0d:4d:eb:78:db:3c:01:55:d9:77:71:b1:cb:
b5:89:26:26:88:ed:b9:50:e8:e6:8f:f3:c2:db:38:01:d5:d9:
be:5b:e7:2a:05:a4:dd:a2:69:f3:20:b4:70:f6:b8:c1:99:11:
e4:45:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:38 2025 by rpki-client