Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xiDsLlFB9XpLuhBCcxphOZxN8fE.roa
File: xiDsLlFB9XpLuhBCcxphOZxN8fE.roa (raw, json)
Hash identifier: 30w4aNPdQ0B/nCv8LzICclVmeBc4hF9732+wLD7R/fs=
Subject key identifier: C6:20:EC:2E:51:41:F5:7A:4B:BA:10:42:73:1A:61:39:9C:4D:F1:F1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018E1F0A438777E7929615F8D2EB080D2998
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xiDsLlFB9XpLuhBCcxphOZxN8fE.roa
Signing time: Fri 08 Mar 2024 17:09:10 +0000
ROA not before: Fri 08 Mar 2024 17:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9087
IP address blocks: 103.47.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 16:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1f:0a:43:87:77:e7:92:96:15:f8:d2:eb:08:0d:29:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 8 17:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c620ec2e5141f57a4bba1042731a61399c4df1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:aa:5f:15:8f:13:f6:0e:d1:5d:0f:1f:ba:
7d:0c:40:af:5e:9c:34:28:a0:04:ed:26:d4:d7:34:
40:16:f4:54:8c:9c:8e:84:bd:80:c3:10:70:2d:49:
5c:1e:1f:ba:90:18:34:64:59:43:53:dc:2b:f3:ca:
43:39:26:be:a9:98:66:9e:23:a3:92:5f:68:2a:d3:
90:e2:a3:8d:65:f3:40:12:77:b6:cd:03:69:dc:c4:
62:74:56:73:fd:fa:03:e4:fe:3d:a7:ea:33:e5:0d:
70:b3:53:61:fe:c7:68:0c:ea:e9:82:ed:88:84:15:
57:4a:5b:fe:58:ff:84:1b:63:29:b7:23:34:e9:ac:
c2:1f:5f:60:af:ec:27:73:4e:86:c1:6e:cf:f9:e9:
73:ac:8d:3d:9a:7d:c7:84:73:00:59:88:f4:5c:da:
7a:b0:85:cf:36:b5:d5:be:32:9f:f4:09:02:d6:5c:
3f:97:64:0e:d8:cf:3c:81:74:c9:25:6c:68:2a:b2:
56:73:23:52:90:be:8c:da:d0:03:34:04:a9:97:11:
cd:4f:d2:55:cc:e8:8d:df:40:8e:4a:9e:89:c4:cd:
58:e4:f4:89:b0:f0:a1:cb:d2:b8:cd:ea:bd:ee:05:
7a:db:aa:3c:bf:e1:3f:d2:43:3b:0d:0e:49:9a:6d:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:20:EC:2E:51:41:F5:7A:4B:BA:10:42:73:1A:61:39:9C:4D:F1:F1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xiDsLlFB9XpLuhBCcxphOZxN8fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
75:88:c9:63:dd:b4:88:58:57:09:43:0d:db:95:6e:83:e2:05:
da:56:ab:2a:04:43:d0:00:b9:4e:c9:a5:be:5c:68:77:59:87:
58:76:77:3e:55:7f:02:36:a7:2a:b0:84:03:f8:47:14:2f:49:
6a:47:ca:97:ac:1b:0d:f6:a1:ea:f8:22:fc:0e:a3:41:fb:a6:
d9:69:d3:91:4d:88:d6:ab:0a:00:1c:ff:d6:57:a4:0d:ba:47:
a0:f2:a1:12:7e:58:2b:89:e1:01:39:27:c2:30:a5:12:74:4c:
b2:99:07:12:1b:bb:1c:d8:d0:f1:32:c5:17:0e:1c:8f:c2:b9:
bf:87:27:c4:73:4c:23:f0:2f:e7:2f:1f:10:46:c5:d1:df:b3:
4f:d0:e1:91:44:e8:e1:f6:c8:f4:b0:e2:83:14:64:60:23:ce:
25:84:3f:b2:d2:0b:66:dc:a6:3c:0d:3d:a4:a0:d7:34:57:87:
b1:86:62:c7:76:df:4a:07:4e:22:7f:d2:b1:9f:e0:f3:d6:4a:
e0:93:7c:f1:57:dd:9f:9b:cd:5d:9b:98:46:8c:aa:bf:da:76:
08:6a:93:a3:bc:87:67:4a:44:36:9f:9e:9d:d4:a0:c4:ab:a9:
c2:33:c6:fd:31:00:ee:5a:c3:26:3e:47:24:2c:9f:a1:4f:cc:
7d:11:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:33 2025 by rpki-client