Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/mLEs_uyxaXMUPBEsrvchMI5okVA.roa
File: mLEs_uyxaXMUPBEsrvchMI5okVA.roa (raw, json)
Hash identifier: ANZBxX+uC2O6xXO593ERNnB65Kmj5F+kYi8SgU7WvZ4=
Subject key identifier: 98:B1:2C:FE:EC:B1:69:73:14:3C:11:2C:AE:F7:21:30:8E:68:91:50
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019424B26D18E030E6D90A532DDB16B7C4F3
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/mLEs_uyxaXMUPBEsrvchMI5okVA.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214135
IP address blocks: 103.83.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 09:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6d:18:e0:30:e6:d9:0a:53:2d:db:16:b7:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98b12cfeecb16973143c112caef721308e689150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:3d:d3:0a:3b:b8:b7:18:84:5e:66:d0:11:
23:a9:fe:4a:18:da:39:c2:44:19:d3:5f:c4:19:08:
ca:e0:d5:27:75:44:0b:85:16:73:59:fb:d9:d8:09:
80:34:86:be:f7:f7:6f:4e:c0:30:57:b7:a6:b5:bc:
eb:8f:f7:ca:91:c2:ad:90:8b:e9:11:eb:5e:78:0f:
6c:aa:c3:ba:a9:cc:b6:39:05:92:7f:91:6f:d5:54:
b1:ad:c9:ee:95:04:ee:9d:d5:b8:c3:9d:37:64:27:
e5:18:fb:2b:03:e2:e4:c9:5d:b6:fa:20:0a:55:37:
92:51:7c:8e:fc:3c:8a:e1:af:70:b9:56:03:34:ee:
02:49:9f:a3:8d:95:ca:31:58:67:e3:2a:9d:9f:71:
a9:ea:d9:c4:1b:42:b6:ce:d4:34:a2:f8:3e:30:65:
b5:6e:f6:18:9b:3a:82:3e:31:10:c9:30:2a:ef:8d:
27:94:91:93:34:d4:4a:a4:3c:31:96:da:cc:7e:c1:
ee:8a:09:04:4f:dd:7b:f6:d7:66:5f:a5:fb:9e:1c:
45:3c:93:c0:d2:0a:04:ee:35:9a:e7:c8:3b:8c:a3:
1a:8c:73:97:a1:8a:9f:cb:64:48:72:d1:d5:24:1c:
0b:f5:a6:73:98:26:45:a5:86:10:c9:a9:b9:84:38:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B1:2C:FE:EC:B1:69:73:14:3C:11:2C:AE:F7:21:30:8E:68:91:50
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/mLEs_uyxaXMUPBEsrvchMI5okVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ab:fa:19:84:2a:5c:ea:cc:9f:92:12:44:1f:dc:37:f0:e0:
db:90:61:40:fd:bd:a7:9b:e8:cb:e3:88:da:0e:2f:80:63:cc:
c7:03:d0:93:21:db:e6:2e:26:f0:34:75:08:b8:90:90:1e:bb:
85:eb:c6:1b:52:5a:0f:46:c4:d3:17:f2:bb:37:0b:c4:07:48:
7e:0c:5a:2d:9d:3b:77:a1:7d:12:32:b9:4a:5c:ab:48:c1:68:
a5:96:b7:0f:87:9c:79:fb:39:04:28:ff:2e:0e:85:87:90:65:
4c:c0:1f:c6:f6:63:fc:6b:04:a7:21:56:c3:92:ee:c2:2d:fa:
2e:96:b4:36:b2:cf:8e:56:08:cf:86:f9:70:41:72:93:fe:49:
b8:5c:b9:29:c6:a3:fa:96:2c:5e:12:67:49:b4:5c:68:2d:79:
bb:ef:e6:da:73:dc:33:57:47:ef:f5:02:3a:ee:90:95:78:28:
b2:ef:15:ea:ae:a3:cf:89:0b:c9:10:4b:03:92:0b:bb:4c:64:
10:53:03:36:be:e3:cd:a1:63:25:9e:2e:ca:0d:67:ac:14:fe:
8c:94:b7:d1:e7:f0:38:ac:f5:1a:6e:dc:03:e2:8d:2e:6b:79:
5f:57:9a:6d:59:da:04:5f:20:4f:3e:cc:00:e1:5c:6a:81:19:
67:96:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:30 2025 by rpki-client