Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/GP2rid5GCcnhoAcDcCkAZ_rJIic.roa
File: GP2rid5GCcnhoAcDcCkAZ_rJIic.roa (raw, json)
Hash identifier: fI8gSN4G2GbvRmA15EcK207iWso85gu1NSsQf4kfLsI=
Subject key identifier: 18:FD:AB:89:DE:46:09:C9:E1:A0:07:03:70:29:00:67:FA:C9:22:27
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018DADA311CB7AB667AE46E8920F99C433ED
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/GP2rid5GCcnhoAcDcCkAZ_rJIic.roa
Signing time: Thu 15 Feb 2024 16:39:21 +0000
ROA not before: Thu 15 Feb 2024 16:39:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 103.102.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 15:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:a3:11:cb:7a:b6:67:ae:46:e8:92:0f:99:c4:33:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Feb 15 16:39:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18fdab89de4609c9e1a0070370290067fac92227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:16:5f:28:bd:ba:32:8b:af:2e:37:4d:64:
11:ab:5f:f7:7f:84:43:65:63:6f:f2:1d:79:1b:59:
79:61:c6:9a:50:42:5a:bb:de:3d:1a:fb:04:3b:af:
7c:85:d8:ba:ad:b4:77:f6:e9:23:e2:f1:6d:34:c3:
38:99:65:7d:f8:6c:69:9c:5a:ca:e5:22:8e:cc:b9:
92:62:9c:9c:62:f3:8f:05:7b:8d:8f:27:f4:56:e7:
d7:05:0f:7a:1f:fd:c6:14:96:12:0e:e8:4a:49:93:
22:94:f2:2f:b2:d4:5f:ce:73:81:95:77:70:ad:cb:
6d:19:c2:c6:c4:19:95:60:eb:cc:6b:61:a0:4a:8d:
0b:2e:19:2e:4d:3f:a2:6d:2c:8c:7c:6a:b9:51:6f:
b6:53:28:67:b7:65:cb:de:f3:d8:7c:05:34:39:4c:
e3:9b:d4:42:b7:21:dd:39:f7:0c:df:5e:c3:a0:7d:
af:1d:27:76:16:1e:9f:5f:00:d4:05:e8:51:7f:e2:
88:f5:c8:86:22:c0:c0:ae:6e:a9:42:29:cd:df:62:
52:2f:74:ae:dd:ba:a1:ef:ee:d6:ec:d6:d6:b0:2f:
8b:e1:52:a1:07:da:b9:ac:cb:42:f1:da:6d:bc:4c:
ad:c6:4d:67:10:b8:ae:10:de:19:b6:26:06:38:ef:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:AB:89:DE:46:09:C9:E1:A0:07:03:70:29:00:67:FA:C9:22:27
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/GP2rid5GCcnhoAcDcCkAZ_rJIic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.229.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b9:f9:54:e4:39:c4:4b:49:ee:6d:15:43:35:22:3d:a6:52:
63:a2:f5:07:58:90:6a:3a:e0:96:fb:ae:15:0e:34:31:e7:7b:
f1:db:84:72:3b:8e:7c:1b:f3:6b:05:ef:a2:5d:bc:03:d3:ff:
d0:fe:8b:48:0b:36:1a:f1:a4:3f:f1:67:54:42:1c:4b:e7:19:
c0:51:bc:44:5c:6b:12:91:c1:ca:4a:d8:eb:34:e4:9e:0d:63:
01:db:52:7f:d6:a3:70:03:54:e0:bc:33:20:33:7d:56:cb:6c:
30:c9:9b:40:ec:df:10:0e:6e:84:32:b3:fd:5e:fd:5f:26:12:
3e:e1:77:0f:8f:14:c9:f5:3e:ed:57:44:a3:d2:24:a5:37:fb:
03:09:a8:aa:8e:a6:b2:da:61:f7:d0:ab:aa:b1:1d:4a:82:50:
74:0d:b0:f2:c5:4b:d2:96:a3:68:9e:d9:a2:60:55:86:db:c5:
44:40:32:e0:2b:bc:70:fd:96:c0:4d:c9:37:88:4b:3c:89:be:
d9:88:2e:f0:c6:8c:c9:af:23:ab:52:65:b9:5c:e8:63:f7:ca:
3f:97:57:1b:15:e3:61:d0:c3:9b:68:af:fe:b6:0f:1a:18:21:
87:6a:4d:99:fe:c5:88:5d:f0:2d:21:45:b1:00:8b:99:e8:92:
bd:d9:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:20:44 2025 by rpki-client