Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZXktkiSKe8uwZ2h0rrQrdQhoa0I.roa
File: ZXktkiSKe8uwZ2h0rrQrdQhoa0I.roa (raw, json)
Hash identifier: i5mrpxCp6Qy9cgXBVqppXqj3rec10E4A+hBIDVTMqAI=
Subject key identifier: 65:79:2D:92:24:8A:7B:CB:B0:67:68:74:AE:B4:2B:75:08:68:6B:42
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019092E5889CC3E952CE3D7D66AA114E10D4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZXktkiSKe8uwZ2h0rrQrdQhoa0I.roa
Signing time: Mon 08 Jul 2024 15:10:34 +0000
ROA not before: Mon 08 Jul 2024 15:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216024
IP address blocks: 103.127.76.0/24 maxlen: 24
103.127.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 12:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:e5:88:9c:c3:e9:52:ce:3d:7d:66:aa:11:4e:10:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 8 15:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65792d92248a7bcbb0676874aeb42b7508686b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:de:ed:57:d9:e3:50:c2:11:27:90:5f:41:
7b:90:be:a7:1c:38:64:f7:28:c6:6a:4c:36:65:1d:
31:ae:93:15:8f:f0:d5:e0:0e:49:cf:ad:79:ec:86:
cb:bd:59:3e:b7:9b:81:66:7d:92:41:5b:17:b9:f2:
05:a5:61:1a:98:e5:ed:bd:d1:9e:0d:30:40:91:b0:
f3:ce:64:50:06:de:2a:62:2a:65:6e:d1:16:8a:eb:
e9:21:6d:85:9a:d4:50:26:17:b8:33:7d:b0:ce:5c:
ff:90:e6:8e:cb:0b:15:93:56:1c:33:c8:80:7d:f9:
24:ac:5d:74:3c:02:55:4d:77:ad:a0:36:3d:c6:1d:
2e:dd:52:94:5f:d0:6b:e1:b5:68:0a:b5:be:ec:94:
55:54:d7:8b:1f:5d:3e:b9:50:06:ef:51:50:aa:04:
2f:4f:5e:26:1b:ab:f2:2b:66:4a:ac:e8:25:94:6b:
37:cc:9a:ba:8a:af:93:f0:3e:35:08:69:9d:21:ac:
67:9b:79:fa:12:6b:92:37:03:ec:fc:4c:8b:f4:e1:
09:8d:20:fc:9f:83:23:0b:47:4d:12:6e:a7:27:09:
4a:06:e8:16:0c:c1:32:25:53:8a:bf:42:b9:5f:87:
53:3f:11:20:67:35:f9:19:13:16:21:a2:c0:e6:d1:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:2D:92:24:8A:7B:CB:B0:67:68:74:AE:B4:2B:75:08:68:6B:42
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZXktkiSKe8uwZ2h0rrQrdQhoa0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.76.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a3:3a:6f:22:e0:ce:2d:22:1b:50:ab:62:3c:44:f6:f2:ee:
d6:5c:9a:ae:9e:92:5c:6a:03:19:13:f6:64:5e:f9:a9:c8:66:
01:1f:bc:7a:05:31:fe:5f:e7:82:fb:a7:0d:7e:9d:9d:54:52:
94:ce:6a:9f:09:dd:ec:9c:06:77:7b:bf:05:17:d7:b2:39:35:
c6:cf:3a:ef:73:6f:f1:1b:fb:a8:7c:0b:95:ba:76:75:87:ba:
5a:30:9d:11:8e:30:14:ef:1c:07:b9:7c:6e:ba:53:68:3e:36:
0e:60:19:36:5b:80:67:00:e4:e6:84:02:ce:f0:97:72:10:c0:
31:f3:84:16:c1:3c:59:d0:7e:e1:b6:17:68:27:bd:72:09:e2:
87:43:18:58:b9:e7:61:55:11:03:a1:c2:47:6f:9a:6a:f6:29:
25:ec:60:4e:06:58:90:73:5d:57:f6:0b:9b:6f:fc:36:44:60:
a7:1b:7d:e9:9f:94:c9:cb:9d:73:4f:f1:58:d3:40:34:1a:1e:
7c:40:25:d5:60:18:79:ba:82:5c:cf:f5:31:c2:da:3a:de:da:
bd:3b:ba:f6:c1:0e:85:25:ab:4f:58:00:64:31:e6:90:71:3e:
f4:2d:eb:cd:4d:57:67:d1:56:4d:59:a1:7d:bc:f7:14:40:ca:
24:bc:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:12:05 2024 by rpki-client on console-fra.rpki-client.org