Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/6sqP5AYrRFkqbIRJZ_2kgiFDMXI.roa
File: 6sqP5AYrRFkqbIRJZ_2kgiFDMXI.roa (raw, json)
Hash identifier: Skd3MJlwXd1HYpu8J6YnAuGurSrh5dJhdyj1qfIRhzs=
Subject key identifier: EA:CA:8F:E4:06:2B:44:59:2A:6C:84:49:67:FD:A4:82:21:43:31:72
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018E0F249B49C23600960B69CC83EB85FAC7
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/6sqP5AYrRFkqbIRJZ_2kgiFDMXI.roa
Signing time: Tue 05 Mar 2024 15:04:01 +0000
ROA not before: Tue 05 Mar 2024 15:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 103.102.229.0/24 maxlen: 24
103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:24:9b:49:c2:36:00:96:0b:69:cc:83:eb:85:fa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Mar 5 15:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaca8fe4062b44592a6c844967fda48221433172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:75:31:53:db:80:b4:7f:80:94:81:d4:87:18:
63:05:99:be:eb:4e:8b:e4:0e:3c:df:d7:18:de:bc:
f2:47:3d:0a:16:6c:7e:e9:82:47:8a:37:f9:52:2b:
14:45:9f:5a:99:e8:f6:7c:67:0c:3b:1a:bb:c8:93:
3d:ff:69:3b:32:b8:ab:0e:44:33:b4:44:48:54:d5:
b4:bb:d2:db:2d:11:c7:f3:45:eb:62:97:9f:86:ba:
50:79:58:9e:ed:80:a7:64:30:d7:8b:26:7b:71:fe:
5d:29:73:e3:4f:68:55:93:4a:3e:55:8a:d1:58:e0:
70:f3:98:a5:27:a1:2b:7f:b0:3b:34:4f:38:e8:f4:
fb:2d:1e:b7:f8:7a:d5:79:b7:42:18:97:fe:73:37:
bf:e8:d6:55:43:0c:0d:c1:1b:2c:5e:00:9e:fc:f6:
16:29:8d:e9:5f:ac:2d:54:ed:2d:12:57:0a:49:31:
5c:b7:e7:d1:18:4f:fd:12:7c:33:0b:f3:ae:be:b9:
a4:e9:d7:89:46:7d:55:e6:9e:63:81:a8:64:85:37:
6f:51:a4:e3:fe:2e:72:87:7b:8e:99:71:ab:5f:b6:
78:29:df:9a:89:43:2a:03:43:72:15:1c:b4:48:ec:
e8:ca:4a:d1:5f:b4:73:6b:d8:62:e9:d4:1d:60:20:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:8F:E4:06:2B:44:59:2A:6C:84:49:67:FD:A4:82:21:43:31:72
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/6sqP5AYrRFkqbIRJZ_2kgiFDMXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.229.0-103.102.230.255
Signature Algorithm: sha256WithRSAEncryption
34:c3:4a:df:d9:09:1f:49:2d:92:b1:6a:4d:ff:21:f7:c1:7f:
fe:9d:ac:7b:a1:ec:89:02:97:95:c3:01:8a:b1:d9:0d:39:50:
c1:ee:a1:60:d8:7a:e0:44:0c:0f:ec:4d:65:ea:af:d7:f8:d7:
46:30:d3:98:cd:af:2f:16:c2:6b:0b:25:91:d8:14:a7:28:fe:
cd:ef:0d:61:0a:7a:51:f8:39:55:d1:79:df:a5:de:4a:96:0c:
08:83:27:56:13:43:93:ca:91:59:c7:d4:5f:2d:82:9e:65:76:
5d:c9:49:05:b1:2c:81:89:60:d2:f9:d3:80:c2:fa:40:eb:e5:
b9:16:ef:04:89:c5:53:a6:7b:65:b3:38:a4:83:db:55:5a:c4:
40:8c:7d:46:28:28:c4:40:89:8e:0c:f8:69:f1:95:cd:34:4d:
aa:b1:e8:e0:b7:c8:f5:7a:a3:c8:b7:67:76:67:ba:b0:3e:19:
e7:5d:be:02:ec:e8:1d:0a:ed:36:5d:c9:1c:4a:1e:bd:81:ae:
7f:b9:5a:c7:f1:25:51:c5:fa:f7:45:09:6e:6d:57:54:a7:8b:
b6:fc:ae:77:ad:a0:23:58:54:25:38:cf:bf:57:97:f6:4b:b9:
fc:1c:ca:0f:ea:80:7a:2d:58:da:cb:b8:ec:fa:2b:51:66:f8:
6a:b9:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:04:56 2025 by rpki-client