Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wW26CDfpSXmHYlE7qe2aH3zE3HY.roa
File: wW26CDfpSXmHYlE7qe2aH3zE3HY.roa (raw, json)
Hash identifier: TRsaupjE1SffWLBDGT+c9G0XL2F5ruoQ0+CZgs3/3Xs=
Subject key identifier: C1:6D:BA:08:37:E9:49:79:87:62:51:3B:A9:ED:9A:1F:7C:C4:DC:76
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01928F80702DCCA69C6FA0E4C4A27284101F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wW26CDfpSXmHYlE7qe2aH3zE3HY.roa
Signing time: Tue 15 Oct 2024 09:26:52 +0000
ROA not before: Tue 15 Oct 2024 09:26:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 103.210.197.0/24 maxlen: 24
167.160.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 16:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:80:70:2d:cc:a6:9c:6f:a0:e4:c4:a2:72:84:10:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 15 09:26:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c16dba0837e949798762513ba9ed9a1f7cc4dc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:1d:e8:db:82:94:35:e2:04:de:56:82:f5:
94:9b:26:a2:45:05:b4:59:e7:18:40:7b:2e:c3:fc:
53:cc:f2:a6:29:5c:65:6a:63:a9:68:70:f8:37:07:
78:94:db:b1:fd:be:4a:f8:72:93:41:bc:e7:44:32:
2a:f5:86:5f:e1:90:48:3f:cc:92:ca:1d:fd:ea:e0:
84:64:f4:88:76:0a:2d:d5:bd:c6:6d:be:35:8e:e5:
73:93:fd:e4:fe:08:3e:a3:e2:d2:22:b3:85:4c:c8:
c9:3f:4b:cf:8b:88:99:23:3b:01:aa:dc:d0:4e:2e:
26:ce:4d:a2:7e:52:26:51:d0:82:a6:91:41:0f:f6:
66:d8:55:e0:64:70:4d:36:d5:6d:b1:66:84:30:e0:
a0:76:6b:40:cd:ec:0b:f7:cc:72:9e:b7:31:cb:64:
0d:fc:e3:e0:a0:c1:a3:58:75:dc:75:f4:a5:34:b3:
71:34:60:8d:48:0c:81:2a:be:d7:d9:1d:a7:57:9d:
4a:b8:d4:dd:93:9a:5e:9c:9d:a9:46:55:e9:a8:a9:
0d:36:9e:62:bb:a1:90:85:5f:34:ac:b4:89:0d:fb:
3e:9e:94:a3:3c:cb:a3:17:cc:22:2d:1a:3d:78:d1:
34:d2:66:04:a1:5b:5b:69:0c:d7:12:b6:c8:a5:82:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:BA:08:37:E9:49:79:87:62:51:3B:A9:ED:9A:1F:7C:C4:DC:76
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wW26CDfpSXmHYlE7qe2aH3zE3HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.197.0/24
167.160.12.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f8:38:f2:17:7d:70:ab:62:fc:0d:5b:69:64:bd:be:45:90:
88:e4:72:6f:48:87:22:65:cd:33:25:22:d3:80:72:b4:77:3e:
a2:c3:83:7f:5a:c3:72:f7:53:5f:48:f1:88:32:0c:98:62:42:
4e:78:4f:4d:a8:17:fa:e3:b9:1b:76:d1:db:bc:74:a4:30:92:
52:ce:e4:50:7d:ec:e9:4b:28:ca:95:8e:48:0c:22:f7:be:32:
2a:33:be:16:59:d0:c9:f4:c3:3f:f4:3a:c6:6b:3b:10:4d:78:
da:e3:a4:1a:98:99:f8:dc:98:18:bc:59:93:c2:75:40:6e:42:
f0:63:d5:9c:21:ae:62:98:1e:c5:6b:89:71:c9:26:85:3b:41:
7f:17:3c:2c:b1:8d:6b:62:b7:cf:69:82:b8:f2:8f:7a:72:96:
ac:84:73:b9:3f:58:6f:68:a6:80:1b:b6:d0:e0:e6:e2:b5:ac:
92:95:10:2f:36:50:7e:ca:14:ee:8c:02:fe:70:51:cb:65:bc:
3f:03:88:e7:0b:1f:84:7d:82:54:f8:27:b6:f0:94:b7:c3:6b:
5c:ed:11:30:f2:39:a9:f9:db:95:13:40:73:60:15:fa:bc:4b:
3d:58:d1:18:40:a1:2c:08:8c:ad:ad:c6:ff:c9:33:80:27:ff:
43:b7:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:33:53 2024 by rpki-client on console-ams.rpki-client.org