Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/gEkXe12Iy2lrnqJ_XYCxqvLc3-s.roa
File: gEkXe12Iy2lrnqJ_XYCxqvLc3-s.roa (raw, json)
Hash identifier: S0ovn4pTGZilPkmE196ITdw/nBmHdzGwfKdglgKysyI=
Subject key identifier: 80:49:17:7B:5D:88:CB:69:6B:9E:A2:7F:5D:80:B1:AA:F2:DC:DF:EB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 0185C4B90C214192CFF85D85387A97B05C28
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/gEkXe12Iy2lrnqJ_XYCxqvLc3-s.roa
Signing time: Wed 18 Jan 2023 11:52:19 +0000
ROA not before: Wed 18 Jan 2023 11:52:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43233
IP address blocks: 103.231.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:b9:0c:21:41:92:cf:f8:5d:85:38:7a:97:b0:5c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Jan 18 11:52:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8049177b5d88cb696b9ea27f5d80b1aaf2dcdfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:91:53:17:c3:98:36:d6:15:0c:f2:9b:e9:
c2:84:a7:db:55:75:6c:94:51:da:74:5b:22:ea:48:
ea:12:75:05:57:45:63:a5:ff:7b:ba:d4:48:68:82:
a3:d6:52:8d:44:18:64:07:8b:d5:54:3b:9b:d5:9c:
a3:35:8b:ce:b3:9e:6b:53:b0:23:a6:34:8c:3a:c8:
44:48:f5:48:0a:2d:e0:37:ad:0c:e6:50:14:23:c4:
22:50:4c:a6:6d:3a:92:dc:0f:be:eb:33:e6:2d:80:
b0:d8:71:ab:32:1a:21:bb:a1:19:00:15:c8:ab:aa:
7d:4d:b8:b9:d8:f2:76:d2:62:0f:55:14:dd:75:78:
81:bc:19:a0:88:a1:bb:50:52:63:44:3a:ad:98:37:
8d:91:22:d5:28:51:0e:e0:48:26:9c:77:84:31:ba:
17:1b:15:ba:56:57:cb:c2:b2:ae:29:43:40:0c:6b:
ab:4a:af:57:3e:54:c7:be:24:bb:1d:f9:0f:e1:0b:
a2:4b:d4:7e:72:6b:ae:aa:4e:e1:21:5c:a6:6f:4a:
a4:49:45:a8:19:a6:84:00:e8:1b:c4:37:a1:e2:2a:
ba:a8:7b:0e:6c:cd:5c:76:e0:97:6f:51:be:6a:36:
fe:4a:09:60:7b:c4:a2:15:31:05:18:d1:a3:b1:47:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:49:17:7B:5D:88:CB:69:6B:9E:A2:7F:5D:80:B1:AA:F2:DC:DF:EB
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/gEkXe12Iy2lrnqJ_XYCxqvLc3-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.139.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b0:14:6d:a1:b3:6f:dd:93:3b:a9:b5:27:31:33:55:c0:0b:
6b:e9:71:4c:98:6d:b4:6b:27:86:a2:cd:56:9c:1e:a3:89:e3:
af:86:27:54:86:aa:b2:22:c0:e0:6e:06:f4:67:63:f3:fd:4d:
aa:d9:7a:6f:71:da:f7:47:31:66:e1:19:40:00:33:1b:05:42:
46:a5:02:14:88:c4:c6:6d:e3:4b:d0:40:ea:e6:4f:92:1f:20:
1f:4a:22:db:15:67:be:e6:7a:91:87:70:d2:4b:4d:e4:ff:73:
97:be:6e:9a:6d:5b:4c:57:14:fb:70:08:c8:42:5d:e4:f0:3e:
bd:37:02:2d:b0:6b:c7:e9:2d:5a:7d:96:39:b7:01:33:5c:1a:
80:e1:3d:3f:60:ef:5e:43:a3:96:91:b3:57:1d:9a:7c:1d:6b:
1e:ec:c1:4e:51:f6:17:52:63:28:6a:b6:7a:56:b7:c9:ae:22:
a4:99:d6:c3:46:ac:ef:0a:d6:9d:a7:1c:17:e0:ba:08:9f:09:
39:c7:0b:18:37:cc:41:18:a1:3d:be:9c:2a:9b:57:17:c9:4e:
84:d3:99:12:c1:d3:96:dd:db:e0:b8:55:15:7a:a7:9e:07:cb:
43:b9:b8:3b:e1:88:ef:39:0d:96:82:03:3a:c0:7e:e9:e9:ac:
bf:1c:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:36 2024 by rpki-client on console-fra.rpki-client.org