Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jgDbc_smWNqBWFDNnIWEhbaBt8U.roa
File: jgDbc_smWNqBWFDNnIWEhbaBt8U.roa (raw, json)
Hash identifier: 3Pa9SSuguohdtKyuO51+zl9lHHF6KFHeycY9IU8wQvE=
Subject key identifier: 8E:00:DB:73:FB:26:58:DA:81:58:50:CD:9C:85:84:85:B6:81:B7:C5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01861235A1871C248830E02E4900FBFAC7B8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jgDbc_smWNqBWFDNnIWEhbaBt8U.roa
Signing time: Thu 02 Feb 2023 12:59:09 +0000
ROA not before: Thu 02 Feb 2023 12:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 103.212.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:35:a1:87:1c:24:88:30:e0:2e:49:00:fb:fa:c7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 2 12:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e00db73fb2658da815850cd9c858485b681b7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:06:61:9d:38:11:b4:33:4d:7f:d5:17:ee:
f7:eb:69:c4:eb:50:56:ec:aa:ec:44:04:79:19:24:
f0:96:0d:7a:be:91:86:42:91:32:3f:36:d1:74:78:
14:d5:10:16:0c:2f:01:ae:8b:b3:94:63:72:7a:64:
cc:5a:61:1e:f0:19:77:2e:c1:5b:a5:2c:53:3f:00:
f9:4b:4c:06:74:ce:f1:c4:de:4e:d7:a6:0f:83:13:
21:a6:a0:29:11:e5:9d:ca:bf:18:2e:bc:33:09:3e:
23:6e:2f:1a:38:76:0d:75:ca:ec:d5:e0:9b:74:95:
3d:1c:25:a7:c3:59:3a:7c:13:24:bf:71:e5:06:34:
8e:13:c0:51:16:c5:8c:e9:00:37:65:23:90:a1:e3:
00:5e:98:48:53:18:68:70:31:38:06:3f:a1:2f:82:
b6:0e:19:9c:db:90:71:58:c3:b2:e9:94:93:2a:18:
7a:cd:d1:b1:c3:ae:b8:2a:39:df:88:d4:19:3d:ee:
59:d0:0b:c6:5c:0e:10:a1:99:4e:58:3b:d1:85:5f:
81:77:75:79:9b:7f:55:d5:04:1c:91:78:1d:6f:d7:
56:47:e3:2a:b3:1f:fb:6f:ab:75:c3:63:37:82:19:
36:91:58:a6:9c:74:08:90:97:41:7a:b6:7f:14:b2:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:00:DB:73:FB:26:58:DA:81:58:50:CD:9C:85:84:85:B6:81:B7:C5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jgDbc_smWNqBWFDNnIWEhbaBt8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:62:91:37:66:b7:37:d8:0c:61:8d:fd:6c:f2:6c:97:1c:4d:
fb:7b:c0:0b:5c:73:de:45:76:47:b0:5a:fb:dc:68:57:ea:66:
a0:0f:4c:9b:e4:cf:40:b6:af:4b:5e:23:aa:29:91:3d:f4:f5:
6b:26:f9:48:b9:d3:7d:e2:d5:e9:4f:13:90:3f:a0:79:09:8b:
3b:21:f1:d6:e2:c5:94:d8:7d:f7:20:7f:a0:77:df:b8:cc:9b:
8a:0e:65:27:d0:85:75:9f:88:b3:8e:d0:97:e6:c5:fd:f7:93:
b6:96:80:4e:aa:10:d7:81:65:b4:58:bb:9d:1b:a3:b1:f6:56:
7a:da:69:12:01:b8:e7:93:dd:b7:cf:fd:1c:ba:e2:46:ae:af:
eb:3b:fb:a1:99:08:52:8c:10:23:6b:b1:dd:ce:63:e8:9d:24:
33:08:f1:89:44:77:44:e0:e3:3d:89:90:62:6c:55:09:b9:1f:
eb:c7:a7:af:e2:73:0a:25:5e:04:9b:2d:cd:3b:9d:cf:a8:e1:
8f:6c:88:22:26:1b:2d:90:76:8d:2c:0e:6e:9a:13:4e:32:58:
d7:e1:d9:dc:31:f3:05:8f:8b:aa:9b:02:5d:20:2f:73:d8:5d:
a0:2e:66:fd:f1:44:5e:5d:a5:6a:84:95:02:53:7e:65:6e:b6:
13:c0:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org