Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Eq4BVFfiUxdalMcJwWFkXtVoDyc.roa
File: Eq4BVFfiUxdalMcJwWFkXtVoDyc.roa (raw, json)
Hash identifier: RNKnItPWjFJwG+6l8pfVwi89cJH+oE/332uewxc4y54=
Subject key identifier: 12:AE:01:54:57:E2:53:17:5A:94:C7:09:C1:61:64:5E:D5:68:0F:27
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186FEF13B128CD0825AEA715DAFFB944B9D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Eq4BVFfiUxdalMcJwWFkXtVoDyc.roa
Signing time: Mon 20 Mar 2023 12:14:27 +0000
ROA not before: Mon 20 Mar 2023 12:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 103.212.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:f1:3b:12:8c:d0:82:5a:ea:71:5d:af:fb:94:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 20 12:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ae015457e253175a94c709c161645ed5680f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:8c:fd:07:b9:8e:59:32:26:b0:a5:f4:9a:
77:69:f5:3b:85:03:bb:33:0d:f1:eb:e2:72:e5:ee:
6e:66:c1:91:e9:38:56:92:ca:41:7c:f9:df:72:01:
29:d4:94:97:a0:a4:1c:c2:01:5d:cb:5f:95:f9:37:
1b:8d:2f:69:7f:5a:8c:a3:79:58:5f:d4:19:d9:df:
6a:54:79:e8:9a:a3:cd:e1:19:4b:ca:1a:a1:98:d4:
9c:94:10:e2:80:d8:6d:7e:d0:66:e1:5b:4e:36:88:
f6:aa:d5:7c:a0:f9:f6:a6:75:74:a2:b7:09:71:25:
43:0c:1d:d0:9f:4d:56:ff:0c:5b:9e:3c:d8:fa:c6:
ce:40:97:71:97:b5:44:6c:d7:2a:ff:bf:fa:45:fa:
d6:bd:79:94:0f:fe:5a:7e:b6:20:16:56:71:46:ea:
dc:13:8a:37:0c:3e:2e:57:08:14:1e:54:31:71:94:
aa:60:b5:ab:20:4c:52:69:80:13:fc:ac:34:64:1f:
19:f1:7d:61:a3:4f:2d:99:63:e0:a0:f6:2a:ba:06:
ce:21:d2:52:7f:0a:ee:75:14:cc:6d:48:a6:14:f6:
3c:5e:29:1f:9f:af:2e:96:c6:bf:5e:62:0f:08:f9:
8c:4c:1e:ad:33:60:52:db:9f:54:0d:c0:22:c8:d6:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AE:01:54:57:E2:53:17:5A:94:C7:09:C1:61:64:5E:D5:68:0F:27
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Eq4BVFfiUxdalMcJwWFkXtVoDyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3f:84:7a:fe:66:56:f1:1b:a8:7e:1b:7b:72:0e:3f:99:db:
71:39:4e:25:8d:98:87:f6:d9:80:e1:c7:e0:c5:0e:b4:4a:41:
83:81:99:3d:ce:cf:26:79:bd:ee:bb:6c:5d:4b:a0:74:4c:d4:
10:0f:0d:7e:19:61:82:29:5e:7b:92:9c:ba:f9:79:30:13:56:
e9:5c:e2:b6:ff:2f:26:5b:ec:0b:d5:f0:3a:8e:0c:c4:b7:33:
e1:99:c5:85:6d:37:d7:b7:79:dd:ea:b7:6d:7a:9f:10:dd:a9:
93:dc:35:56:4c:dd:5e:08:3a:b6:92:95:29:01:33:51:6b:85:
de:e1:88:83:be:1d:a2:ef:2e:43:cd:39:12:28:29:2d:fc:49:
75:c3:fe:54:7d:ab:7c:9f:39:da:fa:96:79:3a:bc:c7:1b:d6:
2e:8f:18:60:a3:24:7d:9f:e3:5f:aa:59:94:c0:46:be:4d:d4:
cc:c7:cc:3f:29:32:aa:41:f9:20:e8:d8:d2:57:f9:24:03:a1:
c5:54:b6:d6:c7:c8:d4:b5:80:44:51:1f:d6:18:dc:b1:51:7f:
e8:e6:9c:2f:b4:f5:3e:55:7c:64:1c:ae:5d:d7:55:94:82:f5:
92:99:48:4d:07:ff:e9:24:c5:d4:58:97:21:22:c4:ed:69:bb:
48:cd:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 20:02:21 2023 by rpki-client on console-ams.rpki-client.org