Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/u-hHnzVzsTBBueRKr-EQKBhWKNI.roa
File: u-hHnzVzsTBBueRKr-EQKBhWKNI.roa (raw, json)
Hash identifier: yAFsQ+mQQ+gtOirBe+0J3M/5CZWCcJn/h2KXV0bxbwM=
Subject key identifier: BB:E8:47:9F:35:73:B1:30:41:B9:E4:4A:AF:E1:10:28:18:56:28:D2
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 01903504057E429B48DE4BA1ABC39DC8D48F
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/u-hHnzVzsTBBueRKr-EQKBhWKNI.roa
Signing time: Thu 20 Jun 2024 09:39:34 +0000
ROA not before: Thu 20 Jun 2024 09:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 81.30.105.0/24 maxlen: 24
202.49.176.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
203.31.40.0/24 maxlen: 24
2a13:d207::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jul 2024 16:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:04:05:7e:42:9b:48:de:4b:a1:ab:c3:9d:c8:d4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Jun 20 09:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbe8479f3573b13041b9e44aafe11028185628d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:84:47:d1:cf:2a:69:ca:c6:10:e3:eb:9e:
9e:d1:d5:b1:16:39:75:1e:2f:82:a4:41:6c:8a:32:
ca:c7:89:d5:29:f8:c1:4d:7d:f1:9e:b4:48:a2:64:
38:d6:59:63:e5:c6:38:1a:63:7e:f4:1a:8d:e3:d2:
24:b0:e4:24:56:9b:3c:70:75:7f:2a:4c:1f:10:d1:
85:72:d3:0b:26:84:b9:db:c4:3f:59:87:d0:e6:d0:
5b:2c:c3:70:30:82:3a:55:a4:48:49:7b:ae:d5:64:
e8:4b:7a:d5:d4:61:e8:c2:0c:21:ef:32:a2:eb:95:
c8:ed:3d:e4:5f:ed:a6:4c:c5:7b:28:48:07:9a:ad:
40:ed:e7:e4:e4:35:3c:71:08:52:2b:42:19:8b:9c:
fa:c6:6c:0e:6e:75:a7:fc:89:9d:b2:11:15:b2:13:
6d:7b:c8:9a:63:2d:cb:76:44:f3:bd:51:54:e6:ba:
77:21:5b:01:63:6a:98:92:00:ae:9d:0b:ed:32:42:
67:78:f8:aa:f7:7c:bf:b2:ad:5c:36:52:ea:ab:69:
a3:9a:f4:e0:9b:14:87:8a:dc:b3:72:6e:d1:3f:d1:
2c:ea:26:9a:b9:75:66:26:7c:11:e3:11:25:6c:19:
0a:ed:a0:35:37:1a:52:c5:c3:39:de:5b:dc:1f:42:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E8:47:9F:35:73:B1:30:41:B9:E4:4A:AF:E1:10:28:18:56:28:D2
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/u-hHnzVzsTBBueRKr-EQKBhWKNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.105.0/24
202.49.176.0/24
202.181.148.0/24
203.31.40.0/24
IPv6:
2a13:d207::/32
Signature Algorithm: sha256WithRSAEncryption
6d:b6:e0:04:0a:e7:0e:e5:a5:17:53:04:d1:75:b5:6b:4b:ec:
40:cd:17:cf:99:6e:a5:4b:b5:f2:88:4d:91:d9:a6:ed:11:2a:
d7:fc:2e:a7:3e:de:5e:34:53:92:0f:b8:32:42:83:d3:47:16:
c6:9c:75:ca:b7:84:5f:7b:3d:15:5f:e0:b4:36:2a:71:42:6f:
43:21:0c:42:a4:05:ce:26:1e:52:b8:08:f3:5a:b7:05:f2:cd:
77:22:b5:e7:86:6e:86:1e:33:58:78:63:2e:d9:3e:16:57:ab:
23:be:ea:29:6f:4d:6f:c2:50:cd:3a:49:4e:f0:ae:ec:67:f6:
a9:a5:85:1a:bb:1d:dc:c8:37:6a:3a:06:18:52:0b:5a:49:48:
ab:4f:51:f5:57:e8:d5:4d:6b:0a:c8:b1:cd:0b:8b:2d:6a:12:
35:1b:8b:d2:63:ef:17:1c:35:ab:ea:82:56:d7:17:2d:70:ce:
b9:05:05:0a:21:ad:f0:df:65:4f:f4:13:9c:13:7b:21:c2:53:
da:14:3b:bd:0f:17:46:96:e8:11:85:aa:96:41:c6:9f:b2:a9:
53:2f:d9:44:b7:17:c9:66:47:17:7c:1a:b7:1a:2e:ad:86:db:
b7:88:d7:4c:0e:f3:7f:75:dd:db:26:07:ee:c5:1c:76:0e:be:
b9:1c:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 18:11:43 2024 by rpki-client on console-ams.rpki-client.org