Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/6p81AvMmQmwhKSixLLNnz0065kU.roa
File: 6p81AvMmQmwhKSixLLNnz0065kU.roa (raw, json)
Hash identifier: Acp1vLh002+xIfjljJA72nM8FxLwtHg7pEBYzPdEbBo=
Subject key identifier: EA:9F:35:02:F3:26:42:6C:21:29:28:B1:2C:B3:67:CF:4D:3A:E6:45
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019148D3B5999D343ED4582747F847C33E7D
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/6p81AvMmQmwhKSixLLNnz0065kU.roa
Signing time: Mon 12 Aug 2024 23:01:59 +0000
ROA not before: Mon 12 Aug 2024 23:01:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216167
IP address blocks: 103.102.230.0/24 maxlen: 24
203.55.81.0/24 maxlen: 24
2a13:c7c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Sep 2024 05:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:48:d3:b5:99:9d:34:3e:d4:58:27:47:f8:47:c3:3e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Aug 12 23:01:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea9f3502f326426c212928b12cb367cf4d3ae645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:d9:43:2d:c6:a5:e1:fb:02:26:2f:62:a0:
b8:3f:61:e5:7d:b7:21:91:28:9f:95:8f:2a:a8:ea:
fd:1b:08:96:ef:c7:d8:2d:fc:e5:22:31:83:77:a0:
b5:8e:04:09:19:5f:b3:29:03:ba:a8:37:18:13:b4:
6d:35:21:2c:3e:9a:67:eb:ab:d1:03:23:a3:4e:4a:
8f:cb:bf:46:e6:a1:0f:5a:f1:8e:24:17:33:8f:36:
0f:f9:d4:d4:62:71:c0:5f:4f:78:23:ec:fe:be:67:
20:1f:f6:ab:45:22:12:08:31:e2:89:54:9c:9f:92:
1c:c3:3d:64:00:4d:8a:10:d2:b9:92:2a:f0:4e:5b:
f0:0d:a3:49:ef:58:cf:62:58:a9:9d:9d:9e:3e:29:
3b:49:cd:11:b9:c2:5b:d7:a1:e8:13:7a:6d:44:62:
c0:46:32:f5:7b:9b:68:94:23:84:46:71:b8:48:9e:
cc:32:52:40:87:c5:e0:71:e8:8a:1f:d7:13:83:77:
f7:07:e9:48:f9:44:35:86:97:fd:a6:1e:b6:b6:10:
86:04:f5:6c:ff:e3:5b:f5:b5:ab:5d:b4:e6:fb:47:
77:ce:3b:45:88:ca:36:45:47:e6:40:c1:ac:4a:10:
a4:20:06:66:d8:34:06:7e:d9:48:4c:6c:dc:ae:60:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9F:35:02:F3:26:42:6C:21:29:28:B1:2C:B3:67:CF:4D:3A:E6:45
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/6p81AvMmQmwhKSixLLNnz0065kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
203.55.81.0/24
IPv6:
2a13:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:09:ec:a0:56:8d:6c:72:c3:33:28:04:53:50:2d:04:c6:a8:
ef:0a:2d:d5:45:8f:eb:4d:41:8d:48:66:06:4e:46:aa:ec:f2:
3b:a9:18:05:65:47:55:a6:ed:ec:98:42:44:86:6b:02:39:54:
02:74:53:89:ba:43:b4:9c:ce:7f:ff:f1:8c:78:a9:57:60:5f:
93:f2:a6:2e:7c:2d:af:95:47:2e:b5:30:47:3a:38:68:1b:07:
15:bf:90:75:83:01:36:10:38:6f:e9:50:c8:87:37:78:e4:be:
6a:89:a2:04:0b:60:2d:f7:13:77:8c:6d:45:8d:35:38:1d:81:
64:25:54:5b:1b:1f:4f:90:e6:4d:2a:04:61:63:19:98:14:ea:
4d:d8:c8:7d:20:84:a0:45:db:57:25:be:60:8d:de:ad:00:ba:
c7:12:ed:52:43:e5:4e:03:e2:54:f9:af:94:08:1e:8d:11:f3:
1a:bb:d2:b3:da:0c:00:d2:e9:93:6e:be:84:43:b2:e8:f2:f8:
48:70:80:ff:fd:3c:46:3b:a7:2f:d1:96:7e:bd:f2:59:fa:a2:
68:25:54:9f:3a:ab:00:82:22:33:a9:d7:6a:42:6d:e0:05:28:
ec:77:0d:c6:29:8b:dc:53:e1:c8:62:7e:be:bd:32:12:0d:53:
99:88:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:35:33 2025 by rpki-client