Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/WSZn5UtBKGt_-NYeOez1xL0-OK0.roa
File: WSZn5UtBKGt_-NYeOez1xL0-OK0.roa (raw, json)
Hash identifier: iNJr7x8LaHGgYQXoHalVN/ok1mL8cKTcSbCKVQuwxks=
Subject key identifier: 59:26:67:E5:4B:41:28:6B:7F:F8:D6:1E:39:EC:F5:C4:BD:3E:38:AD
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 018CC4249047DCA1D9A3D56A0E5676C08025
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/WSZn5UtBKGt_-NYeOez1xL0-OK0.roa
Signing time: Mon 01 Jan 2024 08:29:39 +0000
ROA not before: Mon 01 Jan 2024 08:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.39.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:90:47:dc:a1:d9:a3:d5:6a:0e:56:76:c0:80:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jan 1 08:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=592667e54b41286b7ff8d61e39ecf5c4bd3e38ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:5c:22:44:c1:1d:45:30:59:b7:75:7c:4c:
cb:5a:27:72:61:55:3f:dc:9a:0c:16:15:1b:98:98:
b2:8d:e4:d6:f3:64:40:67:e5:ce:fb:e3:1a:89:b3:
a0:00:55:a5:71:8c:7a:d4:6f:a1:d5:94:0d:92:19:
83:36:36:98:fb:9c:5a:38:50:53:61:d7:97:0f:96:
22:49:38:27:e4:6a:2b:ac:34:cd:b5:39:5e:6c:51:
cd:8e:f0:8c:5a:15:ce:b9:fd:65:45:49:40:a2:c8:
66:f2:7a:87:0f:97:05:eb:f9:d5:9e:0f:49:41:dd:
10:6b:de:25:9f:32:1f:6d:d7:81:ff:b1:53:c7:84:
89:12:a6:fb:97:ab:e3:6c:f1:9e:ef:ab:de:d4:61:
c1:5c:79:5b:e1:d2:02:2a:1e:5c:01:eb:94:5a:d9:
dd:2a:ba:e4:cb:76:91:87:37:6b:cd:f9:ca:6b:f0:
d9:c2:e2:6b:73:81:c6:d2:b9:54:94:1c:a7:87:56:
29:6f:fd:40:4c:6c:16:29:12:40:18:2f:36:f1:25:
d5:3b:4d:5f:36:93:81:b6:85:5d:d3:db:e2:64:10:
b7:4d:16:ea:23:0f:61:cf:15:8c:9e:12:09:f8:36:
5a:5b:ea:bf:fb:40:bc:e5:a1:7c:0b:79:6a:0f:d2:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:67:E5:4B:41:28:6B:7F:F8:D6:1E:39:EC:F5:C4:BD:3E:38:AD
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/WSZn5UtBKGt_-NYeOez1xL0-OK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:94:4d:54:b4:9d:7f:c2:fc:86:01:2d:a4:c8:9a:62:ea:f7:
82:88:48:61:3a:e3:3d:13:69:ea:67:e0:68:b3:f7:e7:9c:63:
0c:4b:ff:20:82:f7:58:21:5f:0f:dc:1e:c7:21:c7:af:1e:4f:
5d:92:7e:f6:db:dc:ef:44:30:81:7c:66:f0:dc:1a:fa:e0:d1:
8e:d7:07:d0:17:12:87:ed:4a:2d:aa:a3:fd:4e:15:cd:3d:55:
d0:57:1e:79:99:7e:b8:4f:ce:7f:00:7a:12:2b:0d:a2:0b:7a:
7e:1d:b0:49:9b:93:48:29:fd:60:8a:4d:ea:38:49:f3:ca:a2:
d6:b5:45:2b:ea:e5:51:58:e1:85:f0:75:1a:88:49:86:b9:29:
55:97:72:28:b8:65:15:8e:69:84:fa:ce:6f:88:1c:4c:28:c4:
d3:d8:45:fa:a9:b4:57:65:65:7a:09:5d:cc:af:fd:da:6a:b5:
23:0d:5a:93:24:b9:64:e7:5c:6d:78:a9:49:f0:52:40:cd:65:
ca:37:80:af:f2:bb:d8:cc:b2:3f:09:85:aa:9e:54:a4:8e:9f:
69:db:bc:74:42:df:6a:7d:29:2e:c0:f2:67:c7:a3:7b:37:09:
97:4a:40:d4:42:5a:52:08:b6:44:32:90:d4:a6:15:b0:54:68:
1a:06:5f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:00 2025 by rpki-client