Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/1-srKDMw0prrsIoBpXsQiwUjDDb8.roa
File: 1-srKDMw0prrsIoBpXsQiwUjDDb8.roa (raw, json)
Hash identifier: pctz/9EnUGp5bj2T7soYLmXLUdytODNnke4DLuL+efc=
Subject key identifier: FA:CA:CA:0C:CC:34:A6:BA:EC:22:80:69:5E:C4:22:C1:48:C3:0D:BF
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01856C1C9E26219982321CF38684DDFFDD02
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/1-srKDMw0prrsIoBpXsQiwUjDDb8.roa
Signing time: Sun 01 Jan 2023 06:54:52 +0000
ROA not before: Sun 01 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36351
IP address blocks: 202.170.196.0/22 maxlen: 22
115.124.32.0/22 maxlen: 22
103.243.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 26 Sep 2023 09:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9e:26:21:99:82:32:1c:f3:86:84:dd:ff:dd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=facaca0ccc34a6baec2280695ec422c148c30dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:e1:dd:01:f0:3f:ef:ec:31:84:9f:4c:9e:
7c:b8:fa:76:36:9f:a6:fe:ae:53:64:ec:70:e6:df:
7f:35:62:12:22:32:68:66:10:c0:40:4b:e1:34:63:
ad:53:5f:ce:3e:9b:09:31:b2:87:41:88:33:c3:98:
51:da:99:0d:b3:97:f6:ed:fd:c9:11:87:68:d3:be:
00:9d:06:35:5c:a8:73:d0:dd:84:c7:c1:61:81:2b:
7c:30:04:f4:10:02:7e:7d:38:d5:57:98:b3:f4:a1:
74:23:7d:61:bf:a7:05:00:ee:8b:d8:af:5a:fa:24:
4c:47:e2:82:35:01:a7:d0:78:72:0b:72:ae:14:24:
b6:98:12:f4:d7:94:fa:56:72:68:39:54:61:e2:88:
db:40:62:cd:76:b0:93:8d:86:bd:de:8b:ff:9c:dc:
93:a8:a2:a4:e6:2d:77:8e:3a:58:e2:a2:23:80:16:
62:93:46:87:be:28:9e:aa:d7:71:54:2e:ae:45:53:
ec:a4:0e:46:68:f4:6c:75:c6:4e:8b:af:2c:2c:b5:
bf:d0:99:ff:0d:00:54:83:33:2e:2a:b8:9c:11:d1:
12:d2:fa:97:64:0d:97:e3:93:c7:ab:55:8d:56:53:
a5:e1:43:40:ba:96:2a:9e:3d:40:02:43:75:d7:7e:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CA:CA:0C:CC:34:A6:BA:EC:22:80:69:5E:C4:22:C1:48:C3:0D:BF
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/1-srKDMw0prrsIoBpXsQiwUjDDb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.204.0/22
115.124.32.0/22
202.170.196.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:73:0b:3f:ad:8a:59:b1:5a:44:2e:93:c8:6a:73:a9:e2:bc:
fa:26:c6:ae:ad:92:ba:95:08:e8:40:a9:e2:6f:a7:5d:0c:dc:
51:20:ea:d9:3a:8f:43:49:68:7f:26:eb:c7:ac:f5:9b:4f:f9:
52:c5:45:12:44:1e:32:3b:d9:b8:fe:dd:01:a1:5c:f4:d6:ab:
03:9e:e6:b7:12:20:64:d3:3b:a9:4a:25:dc:81:07:6a:d0:60:
0f:0d:eb:33:be:49:0e:60:ef:8d:26:18:34:43:d3:ef:6a:84:
65:fb:20:56:19:4b:3e:52:00:b7:db:d9:7d:dc:0d:12:9c:94:
97:4f:f6:49:2b:44:93:b9:90:bd:d2:ff:b7:f2:1b:95:fc:75:
76:0f:50:5f:18:f1:05:79:87:30:82:fb:00:52:68:0f:bb:c5:
8d:f6:37:61:7c:c4:44:bf:f7:c9:13:21:8a:50:40:98:d3:41:
ff:17:c8:19:d3:6a:2f:c5:56:35:87:d6:f1:8b:ce:13:1c:f8:
89:7c:c7:4b:ab:40:77:5c:be:76:f7:59:b1:2e:f4:39:7d:8c:
ab:a3:6e:79:41:82:50:97:49:e8:63:bf:21:25:8a:da:5d:cc:
5b:ef:f4:2e:6c:7c:93:40:12:06:24:e9:9e:d5:94:d1:e4:b9:
e1:8e:75:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:57 2024 by rpki-client on console-fra.rpki-client.org