Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/_ccXlu1G9pqJYnK1rtfdUXZ6K1s.roa
File: _ccXlu1G9pqJYnK1rtfdUXZ6K1s.roa (raw, json)
Hash identifier: 86pquIrebUo9sYwmMTmpN63sqwkk7+XZeEPT0BxIs/k=
Subject key identifier: FD:C7:17:96:ED:46:F6:9A:89:62:72:B5:AE:D7:DD:51:76:7A:2B:5B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01934364A75FA54A2A71B9509B3D62CA615D
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/_ccXlu1G9pqJYnK1rtfdUXZ6K1s.roa
Signing time: Tue 19 Nov 2024 07:48:10 +0000
ROA not before: Tue 19 Nov 2024 07:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 103.83.86.0/24 maxlen: 24
103.83.87.0/24 maxlen: 24
2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a0f:3380::/32 maxlen: 32
2a0f:3381::/32 maxlen: 32
2a0f:3382::/32 maxlen: 32
2a0f:3383::/32 maxlen: 32
2a0f:3384::/32 maxlen: 32
2a0f:3385::/32 maxlen: 32
2a0f:3386::/32 maxlen: 32
2a0f:3387::/32 maxlen: 32
2a14:4080::/29 maxlen: 29
2a14:4080::/32 maxlen: 32
2a14:4081::/32 maxlen: 32
2a14:4082::/32 maxlen: 32
2a14:4083::/32 maxlen: 32
2a14:4084::/32 maxlen: 32
2a14:4085::/32 maxlen: 32
2a14:4086::/32 maxlen: 32
2a14:4087::/32 maxlen: 32
2a14:4380::/29 maxlen: 29
2a14:4380::/32 maxlen: 32
2a14:4381::/32 maxlen: 32
2a14:4382::/32 maxlen: 32
2a14:4383::/32 maxlen: 32
2a14:4384::/32 maxlen: 32
2a14:4385::/32 maxlen: 32
2a14:4386::/32 maxlen: 32
2a14:4387::/32 maxlen: 32
2a14:4480::/29 maxlen: 29
2a14:4480::/32 maxlen: 32
2a14:4481::/32 maxlen: 32
2a14:4482::/32 maxlen: 32
2a14:4483::/32 maxlen: 32
2a14:4484::/32 maxlen: 32
2a14:4485::/32 maxlen: 32
2a14:4486::/32 maxlen: 32
2a14:4487::/32 maxlen: 32
2a14:4980::/29 maxlen: 29
2a14:4980::/32 maxlen: 32
2a14:4981::/32 maxlen: 32
2a14:4982::/32 maxlen: 32
2a14:4983::/32 maxlen: 32
2a14:4984::/32 maxlen: 32
2a14:4985::/32 maxlen: 32
2a14:4986::/32 maxlen: 32
2a14:4987::/32 maxlen: 32
2a14:4a80::/29 maxlen: 29
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
2a14:4b80::/29 maxlen: 29
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 21 Nov 2024 21:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:64:a7:5f:a5:4a:2a:71:b9:50:9b:3d:62:ca:61:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 19 07:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdc71796ed46f69a896272b5aed7dd51767a2b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:95:ff:b7:13:76:07:ae:d4:77:6e:79:1c:
df:1a:97:fd:27:73:85:6c:a4:e1:50:a0:16:3f:02:
87:71:55:df:eb:f0:fd:1c:9d:d0:1a:24:38:74:a3:
36:e5:69:a8:fe:08:ed:f6:11:55:c1:6d:d5:07:3d:
56:9e:6f:c8:fe:bd:ac:c4:18:20:20:a5:c2:0c:59:
71:33:ce:cf:3f:c9:58:cd:90:c0:1a:e2:94:a2:bd:
2d:4f:f3:21:da:30:06:16:83:84:31:25:6f:23:77:
b1:d8:b0:12:8e:c9:41:bb:5f:c7:97:80:c0:a9:d7:
49:07:a2:7d:1d:a6:54:2c:fb:3b:11:13:d8:85:14:
f1:36:c3:a8:0b:4d:db:db:9d:33:4d:e2:a4:62:35:
79:17:7c:f4:9b:bd:ff:ef:52:29:c5:f6:d4:25:c2:
fc:ea:de:cf:69:3c:9d:e8:8d:9f:93:b3:78:d8:51:
d6:33:cd:d9:9e:d0:39:02:35:0b:0b:2e:fd:31:76:
08:22:03:03:1b:56:bf:cf:52:7b:91:98:1f:3c:25:
67:7e:dc:ae:dd:36:36:6d:53:10:3d:e8:df:f2:75:
1c:ce:b4:9c:84:88:ea:f7:12:22:c1:8b:a7:64:d4:
27:bd:47:fb:3e:1d:a1:74:f2:28:2d:66:d3:2a:4b:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C7:17:96:ED:46:F6:9A:89:62:72:B5:AE:D7:DD:51:76:7A:2B:5B
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/_ccXlu1G9pqJYnK1rtfdUXZ6K1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/23
IPv6:
2a0b:9800::/29
2a0f:3380::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
2d:ac:7c:b8:c7:69:2c:ef:8a:77:87:e0:59:38:cd:6a:91:86:
c8:22:00:a7:dd:8a:aa:45:57:98:86:9f:bd:2d:23:90:8c:48:
d3:ad:45:82:ef:72:b3:8a:ee:aa:8c:42:d7:07:1b:af:31:c4:
b4:83:be:e9:3e:fe:eb:6d:8b:bb:df:4d:20:e4:07:64:10:48:
9e:c8:f2:67:0e:1d:d1:1e:af:f3:e1:57:70:e4:74:4e:b4:6d:
86:00:02:5b:6e:67:27:cd:bf:83:fa:4c:dc:6e:e1:94:a2:a7:
80:a6:73:91:74:7d:f4:29:6f:fa:67:d5:45:42:d9:50:74:4e:
71:e1:93:5c:63:94:9c:0b:65:2c:ab:57:57:07:da:ea:3c:1f:
b9:fe:6f:c1:0e:94:0d:b3:12:9e:b5:bd:47:79:07:c8:99:52:
c5:6e:32:25:4e:99:df:ea:60:a9:44:2b:52:5d:32:7b:f1:50:
cc:f7:3f:8e:74:e4:c5:ad:b6:a8:fa:6d:b1:54:da:83:fc:66:
8f:6c:f8:4a:5c:f5:69:dc:37:5f:9c:02:d1:b2:66:e0:0a:b1:
a9:be:c9:c8:f6:da:25:de:e1:dd:29:c1:7a:59:2b:e1:c3:08:
ec:bc:12:bd:60:04:3d:29:53:6c:b4:ae:9c:d0:ca:cc:a8:f3:
51:38:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:30 2024 by rpki-client on console-ams.rpki-client.org