Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Fk_Oh34GXgyAQFiOYOmAA6c1TDI.roa
File: Fk_Oh34GXgyAQFiOYOmAA6c1TDI.roa (raw, json)
Hash identifier: 9jjae8xhYjA1gpujxFigxHs0P0FIgxeLHDj2P3axkbA=
Subject key identifier: 16:4F:CE:87:7E:06:5E:0C:80:40:58:8E:60:E9:80:03:A7:35:4C:32
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018C7223030B27508A6CBE6B64F48D13B686
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Fk_Oh34GXgyAQFiOYOmAA6c1TDI.roa
Signing time: Sat 16 Dec 2023 10:19:06 +0000
ROA not before: Sat 16 Dec 2023 10:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132335
IP address blocks: 103.212.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:23:03:0b:27:50:8a:6c:be:6b:64:f4:8d:13:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 16 10:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164fce877e065e0c8040588e60e98003a7354c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:a5:b5:48:4c:e7:70:84:2e:5a:9c:dd:82:
0c:f1:01:98:12:d5:bb:0d:98:22:bd:0c:1f:ac:26:
df:07:1d:77:bd:75:30:20:a8:51:ce:83:0d:ee:31:
b3:d4:e7:97:88:fd:f0:dc:5e:b1:c2:95:9f:b2:a3:
f9:52:40:93:d8:a7:c6:58:54:c5:81:81:35:48:90:
21:53:a4:d4:90:7d:7a:dd:42:e4:48:5e:9f:e0:d1:
08:b1:ac:7d:cd:c7:d1:fb:37:d0:0b:45:82:2f:62:
ed:38:5f:66:93:4d:c1:96:2e:0e:5f:11:3c:e1:1d:
ed:2c:82:8a:1a:33:41:bf:35:cc:29:7e:b1:79:c7:
56:76:d9:1d:fe:4a:ea:1a:9b:59:09:91:4d:1b:d8:
b4:68:d6:fe:53:89:66:80:ed:c8:11:01:2e:e1:94:
47:fb:52:e7:82:5b:cf:68:eb:61:87:bf:ea:0c:e4:
4e:b7:ef:00:fe:52:6e:0c:68:74:f7:4a:3f:87:59:
d2:8d:78:a6:56:4f:36:70:8f:62:cc:f1:ff:c7:93:
1a:6e:5b:3f:f5:31:9a:48:64:94:37:41:cb:83:6a:
aa:ec:44:9a:a5:61:7d:96:99:5b:c4:3b:3f:99:e6:
bf:e1:79:80:a4:58:bb:aa:dc:b5:97:90:f4:87:8d:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:CE:87:7E:06:5E:0C:80:40:58:8E:60:E9:80:03:A7:35:4C:32
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Fk_Oh34GXgyAQFiOYOmAA6c1TDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
Signature Algorithm: sha256WithRSAEncryption
23:22:7e:3b:ee:b7:4f:34:69:2b:63:4c:ee:f7:72:85:36:fb:
27:ab:b2:e7:9c:76:ba:fb:f8:81:b4:7a:08:72:f7:48:c6:18:
87:a7:56:12:8a:79:f5:74:4e:de:4e:98:c0:30:c5:7a:a8:95:
99:cd:97:0b:f1:9d:3f:7c:23:8a:28:53:28:07:55:61:ec:8a:
d6:ac:b9:07:bd:2b:08:ed:1b:42:37:a5:5f:00:ac:aa:91:9d:
11:af:07:2f:de:e2:d1:2f:12:f8:c4:cf:39:24:51:ff:32:47:
32:af:3a:b3:57:77:3c:d6:e5:fb:1b:f3:34:32:ef:40:3d:4b:
6f:0a:64:d2:4e:29:90:0c:a2:bf:35:48:04:80:72:ef:6a:44:
cb:2b:d1:16:2b:63:fc:f2:d0:de:86:8b:1d:16:b6:32:db:26:
65:6a:1c:17:21:2f:cb:7e:78:d0:b0:0c:47:d0:84:c1:88:61:
cd:0d:cc:79:ac:f2:1e:a5:8d:2b:0d:dc:6c:31:19:2d:8b:9c:
da:5d:14:70:e5:7f:88:84:cb:e8:24:a2:ac:23:8f:db:aa:66:
87:78:20:5b:30:13:9f:3a:e5:d1:ea:ec:ca:16:c9:92:75:e9:
a2:32:57:d5:ff:55:af:77:f4:5f:bc:58:40:7b:c1:7e:02:75:
05:6d:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 17:32:58 2023 by rpki-client on console-ams.rpki-client.org