Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mYniHtvo9QmzMIeHI3_UZoqkbco.roa
File: mYniHtvo9QmzMIeHI3_UZoqkbco.roa (raw, json)
Hash identifier: evDsL4xJDJX3V/1uUJltxQ6islAgLnDgGqtx+5offWk=
Subject key identifier: 99:89:E2:1E:DB:E8:F5:09:B3:30:87:87:23:7F:D4:66:8A:A4:6D:CA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D1786EC51FD00C0FA9A12067D0F64A513
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mYniHtvo9QmzMIeHI3_UZoqkbco.roa
Signing time: Wed 17 Jan 2024 13:05:34 +0000
ROA not before: Wed 17 Jan 2024 13:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.212.81.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
203.0.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 05:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:86:ec:51:fd:00:c0:fa:9a:12:06:7d:0f:64:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 17 13:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9989e21edbe8f509b3308787237fd4668aa46dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:85:20:bc:31:b4:54:54:ae:c7:78:d1:07:
e5:73:6b:4c:3a:c8:a0:d5:38:fc:74:1a:b5:bf:f9:
b1:f1:89:ac:fa:3f:04:19:90:d4:1f:f9:34:79:f9:
58:8e:3e:5b:b8:e7:b6:cf:2b:19:f6:45:3f:88:fe:
d3:8d:6a:9f:4a:b7:36:ef:79:b2:c8:a4:93:e6:54:
3d:97:4a:43:c2:8c:4e:3e:ed:45:fc:41:2b:b1:f6:
4c:ba:dc:e0:61:4d:40:cb:83:76:57:37:00:91:10:
3a:1a:9a:70:d6:34:73:5e:12:f6:03:b7:7a:71:b4:
57:9e:22:8d:bb:6d:bc:e2:4c:13:3b:52:e0:65:71:
26:1f:46:25:8b:d1:d7:9b:12:5e:3d:fa:9d:3c:45:
33:3c:a9:24:6b:1a:3e:f8:8b:89:89:67:0b:6f:fb:
ad:33:fc:6c:6f:ad:1b:c1:11:a7:3c:0e:38:5e:f3:
20:c1:e1:b4:a9:08:44:95:35:68:83:58:fb:2f:8e:
08:5b:65:22:9c:42:66:03:d9:b6:25:6d:47:1f:82:
aa:73:6f:ea:76:00:4a:77:cb:b4:34:f0:e4:07:a3:
4c:cb:a5:7a:1f:e8:c0:48:f9:27:78:56:b6:61:37:
a2:68:57:c1:77:e5:41:62:e9:da:3e:73:7e:c7:0c:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:E2:1E:DB:E8:F5:09:B3:30:87:87:23:7F:D4:66:8A:A4:6D:CA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mYniHtvo9QmzMIeHI3_UZoqkbco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
203.0.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:cd:2d:64:43:3b:77:65:11:7a:25:ed:b9:9c:f8:ec:48:88:
0f:31:28:d0:e0:8f:12:39:c2:8d:cf:00:c4:75:71:23:0e:0c:
70:d0:78:e3:4b:e2:8a:d6:4c:c5:2b:65:27:42:c3:cc:24:52:
7d:e0:c5:12:5c:25:1d:ab:2e:23:a9:37:ef:62:63:34:5f:56:
2c:71:20:87:bd:68:bc:f5:98:51:20:ec:bb:6f:a1:aa:27:b5:
cb:b9:ad:be:95:87:f6:08:99:83:b2:74:67:fc:be:63:4c:51:
0d:34:9d:72:90:3b:88:a0:15:5e:fa:bd:34:49:18:db:7c:34:
f3:ab:b2:06:36:7a:25:35:e0:7a:ac:99:80:b5:7e:06:11:8d:
f0:8f:1c:e7:6d:37:75:95:2b:de:ba:fc:94:49:43:e3:a6:cb:
a3:67:c9:ff:ae:fe:7c:b3:99:24:06:4c:1c:02:cd:c6:54:38:
60:6a:81:c0:c4:ee:0a:85:77:22:2b:25:08:ac:24:04:2f:af:
30:f2:30:42:9b:37:f4:29:21:74:70:d2:12:7e:ec:30:bc:b4:
68:6e:2b:e9:11:5b:65:aa:59:dd:08:e8:7d:08:9e:bc:f8:6c:
92:4a:38:7c:88:55:15:f9:9f:8a:a8:73:93:2c:ac:b5:7d:c0:
a2:e8:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 08:55:00 2024 by rpki-client on console-ams.rpki-client.org