Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1_IsPzci08Cys3PADLFrOJJ8Iow.roa
File: 1_IsPzci08Cys3PADLFrOJJ8Iow.roa (raw, json)
Hash identifier: W15GZ7Qde8VYSjcmItQTHDtY6c8RWZ7nTjqn2ew9aHA=
Subject key identifier: D7:F2:2C:3F:37:22:D3:C0:B2:B3:73:C0:0C:B1:6B:38:92:7C:22:8C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186278AC11EF3C1B1A511616C048F1E8C59
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1_IsPzci08Cys3PADLFrOJJ8Iow.roa
Signing time: Mon 06 Feb 2023 16:24:10 +0000
ROA not before: Mon 06 Feb 2023 16:24:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 103.212.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:8a:c1:1e:f3:c1:b1:a5:11:61:6c:04:8f:1e:8c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 6 16:24:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7f22c3f3722d3c0b2b373c00cb16b38927c228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:8b:7b:94:36:44:77:9f:89:4d:9b:f2:15:
5e:80:d9:37:2c:20:8a:3a:f5:2a:49:40:87:2a:7d:
fb:af:2a:6b:38:04:1c:de:04:d6:62:14:45:ad:71:
bd:00:d1:a8:35:d0:b8:e9:47:f9:e8:0b:bc:f0:86:
b8:7a:9e:d9:3b:1b:73:f7:ef:fc:92:06:7b:35:8b:
07:0b:c3:04:66:9a:2a:d2:ff:e0:fc:c0:39:99:c0:
c2:be:a8:12:0f:81:ea:52:c5:f3:51:37:4b:eb:63:
d6:db:f1:46:7c:b8:3f:a3:21:1d:92:dc:21:c2:6f:
8a:b5:c1:1a:98:8c:26:5f:8b:a9:d2:67:a3:77:b4:
0d:0a:5d:e2:ac:cd:33:72:dc:10:45:0b:3c:6f:06:
bd:4f:00:93:14:8a:f6:e8:7d:91:c8:94:97:11:7e:
6d:75:50:fe:00:75:14:a5:77:5e:97:84:85:13:2d:
75:40:08:3a:f9:f4:45:88:37:b5:ac:dd:7b:96:9c:
12:77:6f:47:27:7a:57:9a:1e:b8:9e:52:9a:63:4b:
af:7c:ff:1f:55:56:a7:95:3b:f2:9d:ee:47:6e:c1:
d1:27:63:e7:8b:06:c9:a7:bf:12:c9:30:2c:98:47:
6d:b5:ef:79:7a:1a:db:b2:08:cc:c4:cf:7f:72:27:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F2:2C:3F:37:22:D3:C0:B2:B3:73:C0:0C:B1:6B:38:92:7C:22:8C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1_IsPzci08Cys3PADLFrOJJ8Iow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.80.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a4:4c:16:6f:2d:00:5a:45:3c:e4:9c:75:c1:71:e5:7a:05:
b9:d1:f0:fb:0f:4e:48:41:23:16:e8:c2:d3:01:e4:fc:31:7a:
6e:c0:59:a8:ed:23:f3:f2:8c:d4:52:fb:ea:e6:c4:4c:5d:38:
37:45:2f:92:ba:5c:bd:ba:9f:9f:34:f1:76:b1:fe:24:ed:ec:
d7:73:45:04:71:8e:58:bd:c5:98:66:c7:df:86:8e:b2:fc:47:
03:d2:71:d7:b0:25:fc:d0:55:78:e6:d0:db:91:ee:73:a1:ff:
2e:72:fc:64:28:07:1b:cf:ec:c8:65:0e:d7:54:10:8b:04:18:
29:17:41:4e:bf:34:05:b3:fb:20:40:1f:55:25:27:80:c6:fb:
41:ec:64:13:59:58:1d:46:cc:31:f8:9f:64:8e:00:ce:7d:e2:
e5:1a:db:89:c0:b3:29:11:23:eb:4b:19:dd:ac:26:42:50:f3:
4d:d5:4a:56:ec:89:ee:4a:2d:32:18:7f:5f:ea:ff:e3:cb:16:
7a:3e:f4:11:3b:f5:99:1b:8a:e5:03:e4:e8:b3:d0:2f:fd:8b:
c1:11:5e:9b:39:02:27:22:cf:05:a8:05:6b:6d:37:cc:e5:25:
0c:20:44:0b:25:dd:32:e9:04:12:2b:0e:9e:6b:d9:95:19:9a:
bd:16:b9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org