Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/FttJ5YC--bi_wUIq53tkHAcyDPs.roa
File: FttJ5YC--bi_wUIq53tkHAcyDPs.roa (raw, json)
Hash identifier: LxS/emMEpMJJOz9wXGyAEH5vETCuqpGtCLlWpjomkug=
Subject key identifier: 16:DB:49:E5:80:BE:F9:B8:BF:C1:42:2A:E7:7B:64:1C:07:32:0C:FB
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019214149F0A1693A20DFAFD7213180F3467
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/FttJ5YC--bi_wUIq53tkHAcyDPs.roa
Signing time: Sat 21 Sep 2024 10:15:48 +0000
ROA not before: Sat 21 Sep 2024 10:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214304
IP address blocks: 103.102.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 19:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:14:14:9f:0a:16:93:a2:0d:fa:fd:72:13:18:0f:34:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Sep 21 10:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16db49e580bef9b8bfc1422ae77b641c07320cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:89:3d:7c:10:ad:74:56:c5:a4:4c:63:b8:8e:
9f:ab:3b:59:a8:33:74:53:21:60:c5:ab:bc:65:46:
88:57:55:56:27:ac:a1:46:df:c0:d0:3b:b2:18:77:
ab:7b:81:48:e1:70:48:bd:68:76:46:31:06:9c:ae:
62:cf:cc:50:0f:34:ff:25:19:e7:23:58:04:21:86:
38:68:9f:f8:b3:db:a1:3f:a2:25:f6:c3:f3:fe:1b:
b4:06:7b:5f:e0:48:4a:f1:e9:93:ba:d2:88:a1:cf:
2f:eb:c3:7f:a0:21:cd:29:70:bf:9c:95:d0:01:e3:
d4:fb:84:46:bc:a9:18:71:af:d4:e1:b7:d8:7a:9b:
ef:09:1b:91:bb:62:80:ce:d1:90:aa:3d:ec:48:ef:
a0:9e:c1:d6:fb:8f:29:ae:9b:b3:ec:37:27:11:1f:
96:2e:d8:e1:72:65:1c:4e:89:e6:84:5b:0a:44:7a:
57:33:41:b8:fd:c6:fd:3e:02:3c:c6:c5:9c:9f:82:
76:20:d7:bf:44:35:71:9d:40:4b:af:78:3a:85:fc:
b6:f5:8b:06:b8:55:3c:ba:3d:4e:22:04:bf:bc:1d:
25:0c:3a:d5:47:45:7f:7f:1b:f9:fb:9b:90:c2:97:
03:b3:72:7e:8a:44:c7:94:4c:57:35:7e:38:d2:e7:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:49:E5:80:BE:F9:B8:BF:C1:42:2A:E7:7B:64:1C:07:32:0C:FB
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/FttJ5YC--bi_wUIq53tkHAcyDPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:78:74:ec:f2:7c:47:03:90:51:bf:d0:94:17:39:d5:ae:64:
d8:85:58:c9:83:92:c9:a6:16:73:a9:73:2d:47:0c:1c:59:eb:
61:0f:dc:a5:fc:04:96:3b:7c:2a:71:ae:b7:13:86:e5:2e:fe:
f3:8e:c3:61:83:a5:8f:2f:b2:cc:58:73:94:8e:05:5a:24:85:
06:48:26:97:0d:fd:61:cd:62:ba:41:9e:1e:db:fb:24:a6:39:
02:dd:fe:6d:28:b8:92:4b:c7:ae:23:cf:76:e5:91:f3:06:60:
d0:d6:e1:42:fe:98:61:f1:72:a8:95:9d:ad:9b:00:56:de:f3:
f0:95:1b:41:02:dc:8b:dc:b0:a6:a3:d0:4d:ed:1f:3e:53:06:
84:0e:00:41:e0:28:68:5b:25:f2:54:3a:dd:c5:14:0f:a4:af:
43:3e:a5:7d:61:3b:99:e5:d6:9b:47:bc:e2:37:64:04:0a:27:
bd:60:34:7b:0e:5a:c6:7e:6e:0c:9f:7c:a1:8a:b8:ee:e9:63:
f8:1e:23:01:76:cd:00:fa:b3:67:c1:f8:45:5b:a8:ed:e2:9c:
52:f7:55:d0:95:ec:1d:99:5b:f6:35:2a:49:c3:c9:47:4a:b7:
03:d8:a5:ea:fb:21:a3:a4:2d:48:d6:87:05:91:57:74:04:e6:
b5:5a:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:00:34 2025 by rpki-client