Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/RQM2iWgFeFJtH8CNxS8s39Pnc8I.roa
File: RQM2iWgFeFJtH8CNxS8s39Pnc8I.roa (raw, json)
Hash identifier: rdsRfPPFrvioCljHvDkqBuDM24nU3khJzJpwDCY0woQ=
Subject key identifier: 45:03:36:89:68:05:78:52:6D:1F:C0:8D:C5:2F:2C:DF:D3:E7:73:C2
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01908D6AB4343D8562502941F2E6257AF2AA
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/RQM2iWgFeFJtH8CNxS8s39Pnc8I.roa
Signing time: Sun 07 Jul 2024 13:38:18 +0000
ROA not before: Sun 07 Jul 2024 13:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49127
IP address blocks: 103.229.81.0/24 maxlen: 24
185.219.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 09:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:6a:b4:34:3d:85:62:50:29:41:f2:e6:25:7a:f2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jul 7 13:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45033689680578526d1fc08dc52f2cdfd3e773c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:56:40:0b:ba:34:87:0d:0b:76:67:6a:e2:
79:3f:43:d4:8e:ba:f5:8f:ac:6b:ee:c6:65:8d:ad:
93:78:02:4b:65:ab:9e:a3:d6:5c:b0:47:b8:f3:b7:
e7:78:22:81:20:90:f6:3e:80:3b:10:99:7c:6d:fc:
d0:47:6e:04:63:62:e5:b5:91:6f:d7:fe:2b:1d:7f:
59:06:f8:23:cd:a5:f5:72:26:92:b2:72:75:9f:14:
2a:27:2e:b0:f7:f6:8b:fa:d4:46:fa:fa:71:0a:0e:
a3:73:72:4b:34:5c:b7:bd:55:73:a3:8c:c5:03:a3:
ae:d3:34:15:e0:12:a8:c2:72:a8:e2:9f:9d:b3:65:
c4:da:85:39:92:14:fb:a9:bc:60:03:47:b3:d2:d0:
a3:50:e2:2e:6d:77:f8:b6:44:1e:ea:a7:5f:24:62:
cb:93:59:e7:35:ce:9e:4c:65:9b:2c:b1:68:97:1c:
a7:c8:cf:ba:43:72:94:e0:aa:36:17:49:b5:4b:46:
2f:40:05:87:6b:01:59:d6:57:92:e6:61:8c:fe:de:
6e:88:1a:89:1b:b8:de:a3:94:77:a7:d5:52:90:d2:
56:a6:0d:53:40:8d:77:48:84:1a:2c:23:9b:49:ee:
20:88:e4:4c:09:60:be:94:f5:cc:88:af:71:53:e2:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:03:36:89:68:05:78:52:6D:1F:C0:8D:C5:2F:2C:DF:D3:E7:73:C2
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/RQM2iWgFeFJtH8CNxS8s39Pnc8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.81.0/24
185.219.6.0/24
Signature Algorithm: sha256WithRSAEncryption
29:28:f1:26:a4:34:31:83:21:fa:c2:93:cc:49:3c:f0:13:21:
c1:b7:19:f4:b9:49:b7:78:ac:09:4c:93:af:ae:46:60:5d:11:
df:a0:96:a3:eb:b1:18:78:df:46:15:74:70:a3:fc:8b:ff:39:
d7:72:99:07:91:80:02:5e:f4:2b:47:75:0b:de:2d:8d:04:69:
c1:72:61:8f:5e:2a:d7:62:60:2b:4a:05:5d:fb:70:70:2f:df:
29:17:01:d4:8c:41:4f:4d:8e:17:fb:e9:00:20:69:67:ed:67:
04:ad:1f:8b:46:15:f8:90:23:3a:3f:d3:7e:0e:36:3b:2c:55:
6b:6d:b6:0a:81:45:d6:1b:f2:51:5d:c7:79:1d:e1:0a:9e:3d:
8d:d7:8c:e0:76:59:e1:38:f7:6a:c0:e8:2c:99:7d:3d:4c:0e:
4d:6e:85:9e:1b:1d:5e:4f:95:07:ba:e1:ed:cd:91:cd:34:58:
db:4a:e7:a5:47:18:d4:81:90:78:95:36:64:f5:b6:cc:58:e5:
d6:75:e6:a4:d9:0c:be:e5:a9:87:0c:e1:be:e8:97:dc:82:ed:
70:2c:e0:58:c4:1c:95:66:19:81:4d:3b:31:b8:93:ae:37:9a:
e4:80:7f:77:7f:d7:ea:79:2d:65:48:19:c9:a4:d5:45:9c:a6:
6a:71:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 10:42:10 2024 by rpki-client on console-fra.rpki-client.org