Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mi2ufmk9zEVUmGIpWHvANqK2huQ.roa
File: mi2ufmk9zEVUmGIpWHvANqK2huQ.roa (raw, json)
Hash identifier: Ae08QCFSBRyer7ylKR/wIHaWQb+cy9MM49Un7sP5OEs=
Subject key identifier: 9A:2D:AE:7E:69:3D:CC:45:54:98:62:29:58:7B:C0:36:A2:B6:86:E4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019281565861EFD1CFE99B228ED015AEB0D0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mi2ufmk9zEVUmGIpWHvANqK2huQ.roa
Signing time: Sat 12 Oct 2024 15:26:12 +0000
ROA not before: Sat 12 Oct 2024 15:26:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214304
IP address blocks: 31.14.10.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
185.141.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 10:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:81:56:58:61:ef:d1:cf:e9:9b:22:8e:d0:15:ae:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 12 15:26:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a2dae7e693dcc4554986229587bc036a2b686e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:a3:78:6d:cc:86:5f:8c:a9:64:a6:f5:c3:
07:b8:bd:5f:9c:10:82:75:9b:fb:9a:6f:30:6c:66:
97:93:52:c4:92:7f:5e:04:a7:f4:5b:3c:29:d8:a0:
98:cc:10:a0:00:1c:69:a9:5f:22:a9:8f:e0:ab:6d:
cc:04:9f:90:c3:7e:06:11:89:70:fb:b7:70:e1:82:
db:35:31:c7:27:82:23:19:63:c7:19:73:52:50:d0:
79:bf:cd:77:95:8a:18:8f:56:a6:6d:6c:c5:b1:9c:
41:f6:b2:6c:da:88:8a:b8:76:4d:0d:2e:34:91:bd:
3c:bf:3f:7d:11:d4:fc:44:90:b7:dc:4d:c8:65:82:
71:12:4b:c9:14:db:04:18:f1:ec:74:46:d4:b9:05:
7d:0b:79:3a:4d:ba:cf:ab:4a:8b:88:ee:97:61:42:
dc:95:85:0f:40:f2:52:b9:ca:15:7e:82:3f:d2:dc:
ae:bc:65:19:2b:3c:15:64:ea:13:47:be:f9:e7:d3:
df:43:bc:68:c1:54:3e:06:6f:72:0a:e9:3e:25:7e:
7d:02:d3:97:b6:6e:ce:fa:ad:7b:6b:ca:7d:76:50:
79:ae:0c:99:a3:ec:57:69:d0:87:37:d4:8b:66:91:
9b:3a:61:04:b1:e8:5d:71:15:18:4a:c7:cf:c9:db:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:AE:7E:69:3D:CC:45:54:98:62:29:58:7B:C0:36:A2:B6:86:E4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mi2ufmk9zEVUmGIpWHvANqK2huQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
103.245.229.0/24
185.141.218.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3b:41:19:1a:22:67:b9:b7:e3:d1:df:07:85:73:31:cf:af:
46:4e:9b:56:2e:85:1d:4a:88:d5:cb:4b:d6:4a:fd:9f:06:7e:
15:af:e0:2a:4b:ae:af:e8:24:83:48:54:d9:e6:36:53:48:4c:
1f:cf:c1:c9:f5:c0:5c:22:a9:17:93:22:8e:77:41:63:a9:a6:
bb:3b:f3:c3:be:f5:df:1e:83:7d:1c:7a:7d:4f:f7:90:40:a0:
6d:83:57:da:5d:f9:8c:6d:fb:1c:fd:df:cc:31:c6:d3:35:c8:
d5:78:d0:76:36:59:c4:19:1f:74:14:8d:e7:69:68:56:ad:e0:
29:1a:17:ce:69:a4:c7:42:09:a2:3a:b8:96:9e:54:7e:d0:4f:
9b:34:d1:8d:a3:11:c4:89:1c:e9:14:50:74:1d:73:63:f8:76:
b9:53:9d:87:1a:b4:d3:47:95:d2:2f:bc:c6:bb:b1:7d:0d:ab:
fd:c3:bd:b3:03:8a:54:4c:92:8f:49:21:6e:ef:97:92:13:5f:
91:d6:22:c0:db:22:32:dc:8b:18:b7:2a:43:54:c8:55:88:0e:
7a:02:8e:41:27:ec:09:41:7e:1d:40:f2:7c:49:bd:ba:26:22:
92:74:f0:27:76:99:0a:08:71:cd:18:9b:f0:d3:2e:d0:45:c2:
1a:fb:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 14:05:04 2024 by rpki-client on console-fra.rpki-client.org