Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/95yM-upUeBtpJzXvPU-EwAy32mE.roa
File: 95yM-upUeBtpJzXvPU-EwAy32mE.roa (raw, json)
Hash identifier: /zMXVtWoLQkuVE6/Xlp+nG+f+ccU3eL7Lp6aaJKnDng=
Subject key identifier: F7:9C:8C:FA:EA:54:78:1B:69:27:35:EF:3D:4F:84:C0:0C:B7:DA:61
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018CC26D5851411FCA6D817C94DFBB19179B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/95yM-upUeBtpJzXvPU-EwAy32mE.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 103.47.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 21:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:58:51:41:1f:ca:6d:81:7c:94:df:bb:19:17:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f79c8cfaea54781b692735ef3d4f84c00cb7da61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5c:e3:4e:53:c9:b7:6a:37:ac:e5:c6:fe:53:
c0:91:c0:8d:63:b1:2c:8d:4e:90:e3:8e:3b:ab:9a:
b0:9c:bf:4c:55:7c:1b:01:0b:81:98:f0:b4:34:55:
e4:6a:cd:54:f5:23:ff:23:44:b8:4e:b5:f1:41:30:
02:92:6e:a5:30:91:8b:43:f2:f3:e3:ef:37:f2:02:
86:d6:de:55:fa:bd:c5:e3:84:7c:fe:68:ea:74:27:
07:d9:11:f5:b2:95:ee:c7:f5:f4:5a:d0:90:19:83:
10:e3:57:40:54:cc:e2:d2:00:ba:0d:7e:e1:18:37:
5a:aa:af:46:bf:37:d9:03:c0:73:93:1c:c9:34:6a:
e6:cc:f9:06:93:d3:55:80:51:89:00:50:17:5e:d8:
8b:9c:e4:e0:a6:a6:59:3a:4c:5d:fa:cb:8a:b9:b1:
68:ac:9d:2b:51:59:21:e0:a0:f1:db:9d:53:0b:2c:
96:99:38:9c:bf:4e:c3:82:c8:b8:4d:fb:0c:80:3d:
1e:15:7f:dd:d1:60:51:3d:03:5f:91:8f:c6:e8:9d:
61:d3:0a:d8:c4:57:29:93:39:24:74:f7:d3:7b:53:
1b:b2:f4:19:9f:ba:58:76:b0:1e:9a:84:79:60:0f:
5c:56:60:1d:b1:48:d0:7e:ef:4d:c5:ca:96:83:d0:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9C:8C:FA:EA:54:78:1B:69:27:35:EF:3D:4F:84:C0:0C:B7:DA:61
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/95yM-upUeBtpJzXvPU-EwAy32mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b6:f4:30:3c:14:9f:28:25:31:55:3c:2e:75:22:12:b9:0b:
93:93:82:f8:dc:3a:65:b0:25:81:96:73:87:4b:57:2f:8d:8f:
ab:91:01:f6:5e:aa:2b:71:bc:b5:7f:d4:2b:8a:1b:ec:b4:93:
26:36:15:03:22:01:19:14:07:5a:dc:9a:e5:70:29:f6:67:c9:
fd:68:a4:61:6d:94:4b:6e:83:48:bf:a0:a6:6d:c6:87:8d:91:
1e:23:94:c3:f5:23:18:a9:0c:eb:29:26:b4:e9:76:7a:9d:21:
14:26:a5:ea:bc:9b:5a:87:b9:e8:a4:d1:fa:21:85:1f:ec:f3:
81:90:40:1e:43:c2:c6:f4:fb:3e:7d:90:16:a8:64:94:5c:c7:
1f:69:26:73:94:bc:af:c9:5c:eb:80:c1:fc:06:91:58:b4:2a:
ee:ef:02:ab:9d:08:c2:6c:65:89:dd:28:49:b9:fb:96:a1:0a:
50:b6:91:d1:d9:83:4a:ba:2a:9a:7f:90:7c:2b:8a:9e:fc:38:
54:46:c8:a5:23:fa:ca:fd:e5:73:9a:5d:07:93:92:bb:c7:75:
a6:22:bb:c0:6d:51:6d:f6:b7:d4:d7:62:c4:af:f4:33:c3:a0:
43:30:cf:d7:7d:ba:af:9d:0e:6f:d6:c5:d4:53:f1:c4:0d:33:
a2:21:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:16 2025 by rpki-client