Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FDXFskOblGbomugzfXw8SeF3cf8.roa
File: FDXFskOblGbomugzfXw8SeF3cf8.roa (raw, json)
Hash identifier: c4+mNnHP770d16LnVDqWp/YLjr5Dnk8CV5H5YmNGF4w=
Subject key identifier: 14:35:C5:B2:43:9B:94:66:E8:9A:E8:33:7D:7C:3C:49:E1:77:71:FF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01910899D401727F0A2B07BB24C33AE78324
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FDXFskOblGbomugzfXw8SeF3cf8.roa
Signing time: Wed 31 Jul 2024 11:43:04 +0000
ROA not before: Wed 31 Jul 2024 11:43:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 06:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:99:d4:01:72:7f:0a:2b:07:bb:24:c3:3a:e7:83:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 31 11:43:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1435c5b2439b9466e89ae8337d7c3c49e17771ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:16:37:de:bf:87:32:50:27:27:3f:91:e4:
5b:9b:5a:9e:ad:c1:2d:1d:5e:2a:12:14:f3:fe:e8:
cf:d8:a3:0b:06:ec:51:82:91:de:14:61:ed:af:89:
5f:39:a9:0c:f5:15:eb:bd:78:47:95:9d:39:99:1e:
c5:ca:0c:2b:6c:d2:eb:d0:76:8c:50:b4:01:9c:58:
38:b1:20:1e:87:e1:23:53:9c:62:c6:ee:5f:0b:55:
48:f4:8c:9b:2f:cf:b9:a4:86:30:09:16:b3:be:55:
e6:a9:46:ab:c7:90:d1:ba:6c:f3:ee:11:90:5d:1a:
d7:90:c0:59:5b:77:86:1f:60:48:5b:5c:14:f1:d1:
61:0a:90:2b:11:03:bb:fc:61:04:fd:2d:92:4f:70:
9e:08:df:b7:80:16:98:d4:96:d1:1e:9d:0c:bb:a7:
64:31:f3:e6:40:1f:10:79:a7:6b:cc:46:5f:d6:39:
02:38:1f:1c:67:24:79:d9:e8:06:4f:de:0f:f7:a1:
66:a6:5f:bb:20:89:3f:e2:3a:89:4c:3e:87:89:6d:
18:49:95:a2:d1:59:b1:96:ce:56:a4:d2:36:54:92:
e6:08:27:39:f6:a9:e8:9f:d7:54:0f:6f:e5:be:2a:
84:e4:5b:84:ae:cf:8e:83:fd:b1:9b:11:d4:3a:56:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:C5:B2:43:9B:94:66:E8:9A:E8:33:7D:7C:3C:49:E1:77:71:FF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FDXFskOblGbomugzfXw8SeF3cf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.77.0-103.125.79.255
107.150.166.0/24
167.160.16.0/23
167.160.29.0/24
198.55.28.0/23
Signature Algorithm: sha256WithRSAEncryption
de:4c:14:7b:06:3c:3e:c1:0d:db:ca:47:16:86:c1:81:38:01:
90:54:74:1a:be:94:c0:03:e5:96:06:17:bc:22:6b:d9:f2:b4:
c1:58:ae:d9:82:81:20:a6:c1:02:03:00:ed:6d:ec:2e:61:e9:
cb:a9:65:61:aa:d6:a1:ae:82:e8:00:17:81:67:fd:00:e3:21:
15:8f:bc:23:cb:82:18:66:21:95:a2:b7:e4:87:39:9b:5c:9f:
33:63:f4:e9:ce:ce:73:78:1d:62:1a:8e:12:03:06:22:9e:16:
68:53:2a:92:23:d8:51:d7:26:43:c8:b1:2a:c3:9e:33:9e:89:
45:b3:48:99:52:7a:33:41:79:4a:9b:e3:65:b3:21:bd:b0:1c:
96:e1:27:c3:b5:1f:6e:51:a8:31:de:bb:62:e7:48:6f:a7:9a:
8a:83:47:08:1f:5c:d9:95:22:2a:be:50:41:d1:46:d3:90:09:
8d:ba:eb:22:5b:42:a8:4b:51:1a:9f:0f:2f:c7:40:1d:8e:e2:
f7:d9:5e:2b:ec:fe:03:d8:ac:4b:29:de:ed:54:e1:45:02:1b:
cb:8a:7f:59:84:6b:85:df:02:2e:1e:dd:6d:fa:2f:bf:78:23:
e8:0d:38:23:ac:57:3e:10:00:53:33:e1:15:51:a6:b8:2c:21:
42:5d:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 08:00:14 2024 by rpki-client on console-ams.rpki-client.org