Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LSlXj0Lh6mJOFumnU2vfGBLC2NE.roa
File: LSlXj0Lh6mJOFumnU2vfGBLC2NE.roa (raw, json)
Hash identifier: dKND40iLKWdgaOSQjAgckFNGjiUkFQANqfWESRmhkts=
Subject key identifier: 2D:29:57:8F:42:E1:EA:62:4E:16:E9:A7:53:6B:DF:18:12:C2:D8:D1
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01934364A7104DBBF5A1C17FAC717900560E
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LSlXj0Lh6mJOFumnU2vfGBLC2NE.roa
Signing time: Tue 19 Nov 2024 07:48:09 +0000
ROA not before: Tue 19 Nov 2024 07:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 103.83.86.0/24 maxlen: 24
103.83.87.0/24 maxlen: 24
2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a14:4080::/32 maxlen: 32
2a14:4081::/32 maxlen: 32
2a14:4082::/32 maxlen: 32
2a14:4083::/32 maxlen: 32
2a14:4084::/32 maxlen: 32
2a14:4085::/32 maxlen: 32
2a14:4086::/32 maxlen: 32
2a14:4087::/32 maxlen: 32
2a14:4380::/32 maxlen: 32
2a14:4381::/32 maxlen: 32
2a14:4382::/32 maxlen: 32
2a14:4383::/32 maxlen: 32
2a14:4384::/32 maxlen: 32
2a14:4385::/32 maxlen: 32
2a14:4386::/32 maxlen: 32
2a14:4387::/32 maxlen: 32
2a14:4480::/32 maxlen: 32
2a14:4481::/32 maxlen: 32
2a14:4482::/32 maxlen: 32
2a14:4483::/32 maxlen: 32
2a14:4484::/32 maxlen: 32
2a14:4485::/32 maxlen: 32
2a14:4486::/32 maxlen: 32
2a14:4487::/32 maxlen: 32
2a14:4980::/32 maxlen: 32
2a14:4981::/32 maxlen: 32
2a14:4982::/32 maxlen: 32
2a14:4983::/32 maxlen: 32
2a14:4984::/32 maxlen: 32
2a14:4985::/32 maxlen: 32
2a14:4986::/32 maxlen: 32
2a14:4987::/32 maxlen: 32
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 21 Nov 2024 21:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:64:a7:10:4d:bb:f5:a1:c1:7f:ac:71:79:00:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 19 07:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d29578f42e1ea624e16e9a7536bdf1812c2d8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:03:8f:f6:dc:80:30:05:e4:f2:af:e1:c1:
1f:ae:c1:98:d3:0d:a3:29:3d:b4:71:3b:73:e3:28:
4b:8e:9f:bf:f1:02:86:50:1b:e1:f6:a2:dd:cd:15:
b5:da:81:29:d4:20:db:d1:3b:5c:75:6a:bc:7a:e9:
63:61:62:71:e4:1c:db:8b:ce:67:d2:21:7a:fe:75:
a4:e0:2a:db:8d:8d:8a:cb:80:cb:01:75:f5:98:5b:
49:07:a3:86:79:8e:fd:d1:39:d5:21:c3:a1:b1:a5:
a9:91:84:68:08:2a:3f:d1:84:95:86:60:0f:4f:24:
e1:3e:05:db:a3:73:1c:4b:ef:3c:5b:25:cb:e5:e5:
85:a8:f2:d9:ac:ce:be:f8:fa:90:5f:84:fb:9a:f1:
8b:87:4d:c1:d5:af:42:b6:95:d8:30:6e:01:29:f8:
76:b5:2a:8b:20:8c:17:a6:c4:fc:ef:f0:ae:55:b9:
f5:9e:82:68:85:e8:e9:29:9e:cf:f2:9b:63:fd:77:
9f:79:ec:41:c4:0f:28:75:43:23:ea:eb:a1:0f:98:
c8:56:f2:bf:b3:d7:1c:c9:39:8e:9c:e1:c0:41:26:
40:4e:1b:31:cc:9c:af:dd:a9:fd:a1:4b:b4:b2:e7:
86:9a:37:12:e4:fe:e2:ed:ca:a7:de:0c:ab:62:63:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:29:57:8F:42:E1:EA:62:4E:16:E9:A7:53:6B:DF:18:12:C2:D8:D1
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/LSlXj0Lh6mJOFumnU2vfGBLC2NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/23
IPv6:
2a0b:9800::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
61:a1:b4:c5:fd:06:ec:8e:fb:8c:ad:65:da:e2:7e:7a:b1:9b:
99:71:41:82:06:05:c4:a2:bf:3f:eb:b4:1a:47:51:26:4f:98:
44:9f:1f:6f:89:98:7a:a4:9b:8a:46:30:e8:70:01:77:97:9d:
e8:f0:f8:16:cf:3f:a4:0f:5a:54:63:ae:7e:08:dd:e7:17:21:
06:f8:38:28:61:7a:b0:0c:ec:f1:85:2e:8a:1b:eb:0f:8a:d7:
45:ac:74:c1:63:e2:8a:b3:89:83:a7:49:a0:de:74:22:f8:aa:
6f:de:39:f2:93:15:79:fe:52:b2:8f:c1:50:f7:51:ec:ab:21:
f7:56:ac:bd:a2:d5:41:d7:8a:14:63:a1:19:b7:90:00:4d:b6:
33:d5:62:9d:da:ee:f2:19:07:b7:68:6e:9e:dc:cf:36:b7:c6:
24:a2:c5:f5:43:c3:af:75:1f:7d:5a:05:be:08:b2:b2:17:af:
c1:f7:a2:b0:93:5e:a5:9a:54:11:8c:3b:97:56:2b:89:96:f3:
05:2b:28:03:31:df:a1:b5:04:50:dd:95:a0:d0:06:02:65:06:
8a:e3:88:9f:fe:48:ee:3a:24:f0:6c:8b:90:98:6e:88:16:4f:
5c:30:92:92:90:e8:d4:23:f7:57:da:ec:3b:a8:9f:62:b3:a5:
41:30:9f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:30 2024 by rpki-client on console-ams.rpki-client.org