Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P7g1wBJFQay5zT2IbU_yK4k11rE.roa
File: P7g1wBJFQay5zT2IbU_yK4k11rE.roa (raw, json)
Hash identifier: q8g8Uw/ARGWV0Uf94KUk84QeXwX5xPRjSiX9ZP1bpbM=
Subject key identifier: 3F:B8:35:C0:12:45:41:AC:B9:CD:3D:88:6D:4F:F2:2B:89:35:D6:B1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192A8C9988DF9144E850272E8232A256DDD
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P7g1wBJFQay5zT2IbU_yK4k11rE.roa
Signing time: Sun 20 Oct 2024 07:17:16 +0000
ROA not before: Sun 20 Oct 2024 07:17:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.212.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a8:c9:98:8d:f9:14:4e:85:02:72:e8:23:2a:25:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 20 07:17:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fb835c0124541acb9cd3d886d4ff22b8935d6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:82:bc:90:6f:a4:e9:52:ae:b8:0a:79:71:
25:4a:fc:70:c6:1c:22:7c:d3:57:3e:a4:fe:f7:d5:
37:a5:95:0f:bd:81:04:9c:2c:08:cc:ef:8a:c8:47:
c7:6a:19:a9:91:97:48:95:5f:b0:dd:20:4b:49:fb:
e7:9c:65:eb:fa:84:f7:e0:7e:33:98:fc:c1:73:a2:
e3:3c:f6:6e:75:05:38:07:ca:6d:fb:6b:68:5a:a2:
7d:2c:bc:44:36:0b:ac:cb:6a:de:c8:b2:60:3f:04:
15:04:59:da:33:92:56:d1:f8:f6:93:5e:f2:53:6e:
b2:2b:2b:5e:07:12:9e:6b:16:bb:89:56:ef:c3:c2:
9d:51:44:03:b8:a8:62:49:b7:82:4f:cb:63:88:b0:
f5:7b:7a:70:bd:3a:04:d1:4e:12:7f:21:1e:81:ca:
2f:6b:6e:0c:08:69:5d:17:fd:ff:10:2e:cc:1e:fb:
c5:32:df:44:40:ee:28:5e:d7:62:2d:68:f4:da:fb:
67:13:e7:2b:49:8f:cb:d4:02:59:7f:5c:81:3a:25:
95:a5:94:91:8f:49:65:f8:b4:c0:a0:e2:1d:96:5a:
93:35:b0:4a:e2:b3:77:1d:e6:78:c0:17:13:e6:e7:
4f:fd:13:fe:4c:b7:f9:43:c8:c9:ed:92:f4:01:18:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B8:35:C0:12:45:41:AC:B9:CD:3D:88:6D:4F:F2:2B:89:35:D6:B1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P7g1wBJFQay5zT2IbU_yK4k11rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:74:a3:b3:82:01:a6:43:3f:69:53:22:6b:80:7c:6d:6b:8c:
88:4f:6f:70:9a:45:e1:59:bc:63:6e:18:d2:67:88:8c:df:bc:
e9:eb:e5:c4:0c:e7:3b:4d:20:21:a6:6b:ad:71:38:f5:26:0e:
03:3e:b3:d8:37:de:6b:1c:24:79:87:e5:b4:3d:fc:21:97:bb:
32:06:53:da:d0:1a:6c:83:ac:6c:ba:b6:19:58:6b:bc:22:bc:
fe:06:42:c4:42:e5:5f:95:f7:f9:c7:38:0b:2a:7b:14:97:8c:
bc:69:b7:6a:3d:0f:3c:8a:63:b1:13:33:2e:22:55:d2:2d:52:
2c:d1:0e:0a:70:31:d6:8d:ae:46:8a:74:54:bb:64:c3:ad:9f:
94:54:53:37:79:33:ad:b0:2c:90:55:6d:22:37:e7:1a:ba:b1:
9a:8e:53:40:4c:25:db:79:3b:d1:1f:56:94:90:b7:bf:6b:34:
b6:03:f2:14:48:6b:1d:40:f4:22:e8:2f:8b:3d:08:14:db:ac:
3a:6a:f2:55:33:27:59:f7:57:fa:64:52:b5:e9:20:f8:d6:b7:
81:45:5c:c5:04:d4:b6:71:84:e6:b6:8b:28:3a:1b:51:ae:7b:
02:78:b5:8b:b6:c0:4d:34:c8:f9:c1:a9:83:fe:5b:3f:6e:1f:
37:ac:16:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:44 2025 by rpki-client