Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/G_F8_w6fmtTW988y43OoDQBdIus.roa
File: G_F8_w6fmtTW988y43OoDQBdIus.roa (raw, json)
Hash identifier: W7oLgu5yWWxVfEQfQIUK6RsAJVosf6Dwyu4fGkNRlQ4=
Subject key identifier: 1B:F1:7C:FF:0E:9F:9A:D4:D6:F7:CF:32:E3:73:A8:0D:00:5D:22:EB
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018EF70B7176B3F017F239C89A5743D77845
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/G_F8_w6fmtTW988y43OoDQBdIus.roa
Signing time: Fri 19 Apr 2024 15:48:25 +0000
ROA not before: Fri 19 Apr 2024 15:48:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216167
IP address blocks: 103.102.228.0/24 maxlen: 24
103.102.230.0/24 maxlen: 24
203.55.81.0/24 maxlen: 24
2a13:c7c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Aug 2024 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:0b:71:76:b3:f0:17:f2:39:c8:9a:57:43:d7:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Apr 19 15:48:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf17cff0e9f9ad4d6f7cf32e373a80d005d22eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:d0:f7:a7:e2:ae:f6:6e:d9:5c:95:14:a7:
b7:3f:77:a1:e4:db:e6:0b:e0:07:2e:4a:ad:2e:1b:
0e:9d:c1:0a:3c:04:2a:69:26:af:89:28:f8:8f:d6:
52:9a:ac:30:8c:3e:15:7d:7c:3f:21:e2:ba:e2:ce:
9b:cd:fb:58:9f:c7:9f:18:38:18:2a:66:88:8f:fd:
26:cc:ab:5e:9a:60:6c:da:2f:1b:73:46:48:91:72:
c1:4d:e5:26:5c:fb:2f:be:af:0d:47:d8:b5:16:3f:
80:4d:fb:c5:cb:b3:96:ac:50:b9:aa:fc:3f:b8:cd:
57:92:9c:7f:16:f3:62:e5:6a:a3:fd:77:2e:58:55:
7c:00:39:33:54:cf:11:a5:81:76:be:41:04:ce:1b:
92:96:ca:f5:cc:d2:30:fb:12:a7:bb:f9:21:3c:72:
84:62:b5:64:59:c0:59:80:24:5c:a8:ed:1d:6d:84:
75:be:5c:cb:5d:98:c7:9e:45:4a:7d:a0:c9:22:7b:
f9:6e:6f:82:84:35:a4:c2:76:78:b9:0e:2b:7b:c8:
c6:d6:2c:c5:e1:31:17:55:65:4d:ad:55:2e:dc:4f:
cd:18:0c:63:60:1e:bc:a3:93:e1:20:dc:0d:72:01:
91:8b:51:ef:82:9e:43:26:a8:b1:f2:d4:54:92:c9:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:7C:FF:0E:9F:9A:D4:D6:F7:CF:32:E3:73:A8:0D:00:5D:22:EB
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/G_F8_w6fmtTW988y43OoDQBdIus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.228.0/24
103.102.230.0/24
203.55.81.0/24
IPv6:
2a13:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:fb:3b:a0:2d:db:b7:52:cd:80:52:9e:c8:0c:6e:b9:f4:3b:
1a:15:82:6d:c8:76:fa:fb:11:d8:80:bf:f1:94:5a:dd:8d:ec:
f7:12:17:97:74:a8:6c:f9:d1:0c:8c:b0:80:0b:24:6c:5e:97:
68:af:a4:60:75:39:fc:79:5c:32:93:8f:b0:83:bb:68:14:e9:
8f:f0:ad:b2:d9:4c:9b:b5:1a:e4:e9:6a:b9:dd:e4:50:70:94:
d1:fc:d7:c6:39:73:49:85:5f:f5:98:68:69:3c:85:ff:b2:d6:
d3:11:b3:31:42:12:0a:bc:99:40:ef:50:33:8f:88:c8:fd:93:
7f:db:27:22:90:74:ac:4c:d2:ca:6a:80:00:1f:ac:82:50:54:
00:09:83:ff:f9:09:05:78:b6:a8:eb:ff:b5:77:6c:aa:95:da:
c7:f4:52:cf:ba:5c:11:54:75:e3:62:c4:6f:6a:0b:c4:84:66:
ab:95:71:39:08:1e:41:3a:b2:d7:b0:0d:9b:82:1b:62:08:5d:
4a:6d:57:e2:a6:1e:9d:d6:4e:17:ef:20:d0:02:fc:1c:b5:a4:
dd:fe:a0:cb:3d:62:8b:a0:03:69:a6:9f:af:d6:0c:cf:19:a9:
fc:fe:0c:69:07:7b:4f:b0:3f:d1:21:00:0c:2f:5d:66:30:c8:
b9:e3:69:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:26:18 2025 by rpki-client