Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NdgO1q3gHdtZo_Jo4E81SLxOCbo.roa
File: NdgO1q3gHdtZo_Jo4E81SLxOCbo.roa (raw, json)
Hash identifier: Idy0mfQvS/7jqwL8KglVmhpKkBiCAQcQhOH26nDaPlE=
Subject key identifier: 35:D8:0E:D6:AD:E0:1D:DB:59:A3:F2:68:E0:4F:35:48:BC:4E:09:BA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01930A04B81A54EF10E9734C9963B60A5D91
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NdgO1q3gHdtZo_Jo4E81SLxOCbo.roa
Signing time: Fri 08 Nov 2024 04:25:01 +0000
ROA not before: Fri 08 Nov 2024 04:25:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214128
IP address blocks: 103.245.230.0/24 maxlen: 24
103.245.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 19:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0a:04:b8:1a:54:ef:10:e9:73:4c:99:63:b6:0a:5d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 8 04:25:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35d80ed6ade01ddb59a3f268e04f3548bc4e09ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:62:d8:c3:a1:ad:a0:8e:57:f6:81:2f:ad:
98:b3:28:b0:88:4f:88:bc:8b:53:c6:5f:7b:71:a2:
29:73:c6:16:e9:bd:f1:94:48:5e:a1:4a:5b:4d:41:
48:08:97:1b:02:62:23:01:01:2e:fa:9c:91:90:30:
f0:3a:0f:66:5c:08:9c:ea:af:62:ba:21:a9:0c:e5:
b4:b8:6b:bc:f2:9c:29:a7:d1:07:21:3c:30:d5:38:
70:82:24:ba:a9:85:bc:9e:26:2d:3d:cc:46:ea:58:
a5:6b:ad:66:c7:7c:5e:61:7d:87:ad:76:b5:7a:91:
ad:eb:e6:2b:b2:59:ba:d8:58:c7:8b:28:bf:fa:7d:
60:47:68:93:d8:97:c6:0e:e6:ab:ce:e8:50:c0:52:
19:56:78:e1:38:18:a1:9a:11:90:c4:4e:dd:e4:e9:
2d:f1:ff:d6:cf:0a:9e:1d:35:03:0d:00:16:1d:5f:
0a:05:f4:9b:1c:94:a6:7d:0f:82:49:12:1e:69:3b:
96:1f:89:7c:31:7c:bf:46:88:ce:02:f1:8e:ed:19:
6f:3f:b5:1a:75:81:0c:33:6f:05:08:e1:c6:31:b0:
9c:53:ab:f9:32:6c:07:29:20:1e:fc:71:e2:a6:d2:
60:bc:f7:1d:90:44:ed:75:65:6d:98:60:ea:a7:85:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:0E:D6:AD:E0:1D:DB:59:A3:F2:68:E0:4F:35:48:BC:4E:09:BA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NdgO1q3gHdtZo_Jo4E81SLxOCbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
91:ca:37:1e:9d:ca:da:61:03:b5:cc:e3:1f:52:e9:54:c4:0b:
cf:d5:a5:d2:17:62:bb:9e:f5:19:9f:06:fd:d7:3d:f7:02:f4:
e6:8a:6a:97:4b:82:da:11:91:ae:5a:7a:49:bf:93:57:10:d6:
aa:51:67:2a:85:a9:b7:4c:b3:af:ee:4b:e5:a0:65:e1:0b:dd:
14:69:48:fd:58:90:8a:e8:62:37:d4:20:e1:ec:47:79:c1:2d:
84:88:e5:91:80:61:be:82:00:59:05:3c:53:8c:79:b2:ee:ea:
07:13:64:73:2b:7c:23:3b:33:51:19:74:d5:3f:22:a3:45:7e:
91:70:67:df:7c:3d:12:0c:ff:21:e6:21:de:dc:a5:5d:9d:30:
7e:2c:3a:2a:95:32:61:0e:00:62:b9:c0:bc:b0:bd:f2:4a:83:
5c:ad:5d:85:dc:b9:71:89:1c:fa:55:85:1f:e0:c9:a0:43:bb:
d6:35:97:ad:76:c9:07:88:b0:f4:c1:57:68:d7:53:7d:8b:e6:
db:61:76:56:67:d0:83:7b:cd:28:a9:99:ca:a0:81:df:ec:e3:
4e:ed:79:fa:e1:2a:2c:46:07:f3:32:5f:fd:e7:5c:eb:61:2f:
a4:fa:86:e7:b2:3c:a4:83:46:c3:a6:f3:7c:bc:eb:7c:52:74:
f3:7d:b6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 23:26:38 2024 by rpki-client on console-fra.rpki-client.org