Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/zlrJy_5UK0GJvyv5pb6a1-jHCIk.roa
File: zlrJy_5UK0GJvyv5pb6a1-jHCIk.roa (raw, json)
Hash identifier: uCUIK+wwb0SzP2bz1Vqu/cIPkbxhbG/FMbVeT0id6co=
Subject key identifier: CE:5A:C9:CB:FE:54:2B:41:89:BF:2B:F9:A5:BE:9A:D7:E8:C7:08:89
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 0185718C1FC789810C40E6BF92ECA1F86552
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/zlrJy_5UK0GJvyv5pb6a1-jHCIk.roa
Signing time: Mon 02 Jan 2023 08:14:46 +0000
ROA not before: Mon 02 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213222
IP address blocks: 103.231.139.0/24 maxlen: 24
103.231.138.0/24 maxlen: 24
185.137.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:1f:c7:89:81:0c:40:e6:bf:92:ec:a1:f8:65:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Jan 2 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce5ac9cbfe542b4189bf2bf9a5be9ad7e8c70889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:55:64:f1:f5:ad:7c:32:3f:97:d5:40:1f:
49:6f:01:11:8f:9f:ca:b6:cd:2c:ea:e9:fb:ae:5f:
be:e8:4a:92:0f:9b:55:8a:3b:4e:fa:d4:a8:1c:0a:
73:c9:e7:b3:58:37:f0:0e:4c:ee:3e:c0:ed:60:b1:
cf:1b:32:5a:cb:2a:cf:f6:a9:e8:6c:89:7c:bb:02:
a7:1d:6e:9e:8a:54:92:2a:0e:23:62:ee:af:f4:10:
d1:69:bd:5a:73:15:78:2e:f0:73:95:d2:2f:f1:34:
cb:c1:fb:14:01:18:77:58:a0:ec:2d:78:40:c8:e3:
c7:62:14:29:c5:59:49:7d:c5:45:92:a9:52:b4:5c:
28:6f:6e:9e:97:5a:ec:78:85:be:15:e5:1c:22:3f:
5c:14:f2:ef:fa:f9:5f:10:85:c9:22:bc:53:37:8a:
95:fb:e7:46:ca:58:0b:23:e1:d0:ec:07:47:01:b5:
0d:f2:65:e3:d2:8d:ea:91:bf:b7:3f:0c:8c:92:a9:
cb:b9:29:c3:05:e1:32:81:31:72:00:2e:8e:37:c4:
b9:88:ba:86:90:2b:f0:52:1d:f6:2e:de:06:6d:b5:
ec:aa:19:6c:c7:a6:d7:9f:c8:cf:f2:8d:c9:66:b9:
86:3f:49:69:0b:63:3f:fa:15:b8:27:46:ee:4b:d2:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:C9:CB:FE:54:2B:41:89:BF:2B:F9:A5:BE:9A:D7:E8:C7:08:89
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/zlrJy_5UK0GJvyv5pb6a1-jHCIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.138.0/23
185.137.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:50:60:db:8d:1e:7d:f9:7f:8f:e7:d8:3c:22:7c:88:9e:42:
22:68:7a:08:ff:4b:2f:1e:22:42:d4:8d:83:fe:44:90:d0:17:
ff:6a:cb:cc:74:fc:3b:fb:82:dc:96:59:80:a7:65:5f:ef:6d:
f8:cb:12:4b:87:47:a9:db:93:c8:25:77:2c:e8:ab:19:31:68:
a1:d4:9d:ad:1d:b8:8b:4e:39:eb:cc:13:61:83:10:8f:f0:78:
af:9f:68:8a:76:ed:e5:60:43:4c:f9:65:bd:e2:71:f7:e2:46:
22:9c:57:ee:d5:57:cc:6b:9b:11:73:02:b1:c9:c1:f3:cb:23:
e2:c4:95:4e:36:31:6e:54:ff:a5:e1:75:ea:cd:9b:e6:fb:26:
cd:cc:59:9d:4f:49:69:e4:f3:7c:35:79:b8:3e:1d:53:b8:9e:
7d:53:6c:51:6d:e1:73:37:7d:6e:14:f2:2d:73:9b:ae:9a:5b:
2c:da:f4:80:9c:51:9e:59:00:6d:80:90:ff:66:6a:f6:52:dd:
7f:52:3b:2b:12:dd:d4:67:bd:b0:e1:91:75:5d:1e:b1:ab:08:
27:21:0c:70:9c:44:17:83:54:7f:aa:29:4f:e3:0e:6b:61:76:
66:db:c5:0d:a6:ad:67:de:95:e0:bd:5b:4c:2f:01:34:3e:a2:
17:fb:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:45 2024 by rpki-client on console-ams.rpki-client.org