Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/RTFJzLlT41qa9uW0_3LK5ESizjI.roa
File: RTFJzLlT41qa9uW0_3LK5ESizjI.roa (raw, json)
Hash identifier: Tzqo2FcKFaxSmjEXGu4Z7Qw/tfy4ofD5qXrGuGC+Ji8=
Subject key identifier: 45:31:49:CC:B9:53:E3:5A:9A:F6:E5:B4:FF:72:CA:E4:44:A2:CE:32
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0189DF34FA866C764AA57DA94CCB10103AE3
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/RTFJzLlT41qa9uW0_3LK5ESizjI.roa
Signing time: Thu 10 Aug 2023 11:28:58 +0000
ROA not before: Thu 10 Aug 2023 11:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 103.101.88.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:34:fa:86:6c:76:4a:a5:7d:a9:4c:cb:10:10:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Aug 10 11:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453149ccb953e35a9af6e5b4ff72cae444a2ce32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:6c:4c:43:43:8b:16:89:48:b7:81:81:26:
21:1c:55:2a:c3:a4:40:79:09:c2:80:f8:38:b8:48:
22:4a:31:97:3b:04:f1:12:d5:97:e8:6c:ff:4e:12:
5e:8e:0f:41:7b:21:de:f7:21:d0:be:06:4b:fe:7d:
2f:7a:6b:de:e0:4f:a4:13:db:d1:bc:89:1d:71:2e:
e4:40:79:05:b9:49:6e:62:6f:1b:d6:17:af:fc:6a:
28:d3:5b:ab:40:04:93:10:98:d8:19:fd:5f:d8:c2:
6d:54:1b:8a:9c:bb:c5:6f:f7:5e:e5:80:6d:ba:ed:
2b:26:56:81:6d:05:7a:fe:d1:03:24:9d:91:64:3e:
bc:e1:24:ee:df:07:44:26:00:06:9a:0a:07:fb:3f:
15:9a:d7:0a:0d:65:1a:b7:a7:4e:9b:f2:50:98:08:
c7:ad:b2:08:c9:dd:ad:0d:b2:5e:60:2c:b1:e8:88:
41:18:bf:ec:e1:5f:1b:28:20:52:0b:93:43:b1:4d:
66:b6:8d:9d:f5:24:59:e8:18:fa:64:32:dc:fe:a7:
71:43:64:63:6a:ef:35:9f:19:2f:07:66:da:39:bc:
ea:b9:99:5f:98:51:fb:a7:3a:b0:c7:a4:03:87:fb:
ae:96:bb:8e:3d:40:df:22:04:d0:c6:16:0e:d0:a7:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:31:49:CC:B9:53:E3:5A:9A:F6:E5:B4:FF:72:CA:E4:44:A2:CE:32
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/RTFJzLlT41qa9uW0_3LK5ESizjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.101.88.0/22
Signature Algorithm: sha256WithRSAEncryption
10:d5:e5:da:6c:a0:f8:9c:57:c6:27:a1:18:dd:36:cb:2a:30:
9e:4a:f7:21:ab:97:7a:c5:83:f6:8d:ec:db:22:0e:48:a3:01:
b4:3c:7a:11:cd:70:df:6d:93:db:57:f3:f8:ac:71:9c:02:d5:
98:7f:fc:b1:55:4c:32:c1:e0:1d:3e:3d:f1:12:a2:98:22:a8:
55:50:8d:4a:1c:ae:7b:b1:0f:e1:92:1c:40:b6:31:9b:92:2f:
bf:0d:7b:13:d3:2d:a3:2c:bf:39:c7:9a:e7:57:fa:05:9a:b5:
6d:dd:f6:47:2c:05:f4:4c:57:a7:b7:a2:2a:00:94:09:61:7d:
9f:03:86:bb:38:73:84:f0:ca:1b:3f:83:5b:e7:db:c4:ca:0a:
4b:b8:02:c0:77:09:99:12:65:31:58:9e:94:e4:7b:cb:ac:11:
52:6e:fa:c3:2c:f5:d5:26:64:7b:ac:41:9d:1a:98:31:e7:2d:
54:ea:84:82:d9:9e:2b:71:33:f8:21:6a:4c:97:74:74:9b:ff:
f3:ea:af:b2:bf:bd:94:32:f8:6c:68:6d:fb:62:f0:71:43:5d:
a3:4a:b1:c5:db:66:9c:17:47:f0:98:82:0c:ad:fc:4d:a9:c8:
66:9b:15:d1:b0:68:78:0f:67:ef:ce:f6:57:ac:53:5c:3b:c3:
fa:7e:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:49 2024 by rpki-client on console-ams.rpki-client.org