Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/kEEeE060LU4N6qzp0YL_1DSlg8o.roa
File: kEEeE060LU4N6qzp0YL_1DSlg8o.roa (raw, json)
Hash identifier: BZEbYuIGicqSg+nUE+dLV/3L0iZnXekIAZ9/ssJHiKs=
Subject key identifier: 90:41:1E:13:4E:B4:2D:4E:0D:EA:AC:E9:D1:82:FF:D4:34:A5:83:CA
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018DC43237D7526215EFF6D1F517D389DDD1
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/kEEeE060LU4N6qzp0YL_1DSlg8o.roa
Signing time: Tue 20 Feb 2024 01:47:21 +0000
ROA not before: Tue 20 Feb 2024 01:47:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213382
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 21:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:32:37:d7:52:62:15:ef:f6:d1:f5:17:d3:89:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Feb 20 01:47:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90411e134eb42d4e0deaace9d182ffd434a583ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:ce:90:fe:cb:85:1d:ef:b4:4d:29:30:53:
05:3e:1d:b6:02:a5:6b:b5:28:ca:c8:f8:a0:2a:14:
d9:21:ac:7d:2e:33:af:ba:28:5a:18:18:36:ad:a5:
31:e0:b2:98:85:ed:0f:5b:9a:8b:69:8c:d6:ed:a1:
75:08:66:04:ce:3d:57:63:f4:21:4c:c9:cb:00:06:
89:4f:04:cd:df:c1:40:a8:36:41:04:eb:03:28:69:
06:a2:80:b7:fd:e4:47:b4:c3:09:9d:f5:5d:a8:19:
99:a2:c5:6a:d4:36:7b:b3:50:6a:5a:9c:38:ad:7c:
79:dd:3a:81:26:10:7b:27:8f:0d:19:1d:40:63:5c:
c4:73:90:8b:06:1e:20:e5:6c:50:ff:be:d1:ec:98:
45:38:9f:44:a4:b7:4c:47:32:48:4e:31:f3:85:ce:
cf:13:6e:14:36:47:f9:a5:14:ef:a2:48:a6:b2:ec:
0e:07:c8:a0:c1:76:5c:ea:a2:0f:45:79:fc:30:25:
30:2d:06:31:14:da:b1:07:cf:0f:15:f6:52:fd:8d:
ea:14:d7:30:17:58:f0:11:19:1f:e8:4b:37:40:5e:
33:31:f0:cb:e8:19:7a:11:40:ca:44:81:af:28:b8:
53:1e:11:4a:e2:cf:d0:bf:93:50:c6:9f:7e:1c:6d:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:1E:13:4E:B4:2D:4E:0D:EA:AC:E9:D1:82:FF:D4:34:A5:83:CA
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/kEEeE060LU4N6qzp0YL_1DSlg8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b7:04:12:ca:31:ac:3f:aa:e0:ad:55:ac:f9:73:55:a5:a5:
b7:aa:f8:77:65:6c:04:af:4c:b0:87:ee:35:69:da:09:0c:fe:
65:d2:78:f4:de:ca:f0:93:fe:74:98:c1:53:d4:90:cb:16:ed:
d8:05:83:61:06:24:f2:5d:f5:22:75:55:a5:2c:4b:e7:a0:88:
9f:cf:ee:af:f6:46:c4:ef:6e:26:62:1b:8a:8e:08:a2:e6:72:
3e:08:a5:a3:7e:dd:81:10:98:18:3f:89:38:a8:3f:d8:53:8e:
39:ad:f5:79:d0:a8:27:06:4f:3c:e5:1f:55:5d:da:e2:2f:ee:
7d:ca:a4:be:f5:71:8d:7e:e2:6b:ac:a8:e5:b4:7c:1b:88:31:
c9:dc:73:a7:be:de:c4:a0:3c:f7:84:4c:b7:6c:fd:43:d2:6b:
df:02:a2:33:16:e1:6f:d8:57:0a:9e:c4:08:8b:98:94:62:ca:
06:f4:fe:c1:62:d9:09:e1:bc:63:da:b4:98:6c:c3:a3:a0:aa:
42:60:69:65:08:73:6b:e6:32:b1:1e:fe:c0:56:6b:1e:db:72:
bb:45:05:fd:1e:e6:16:ca:42:dc:a3:42:a5:1d:7a:33:62:ba:
a0:46:ec:6f:7f:92:fa:fa:ac:0b:66:21:15:3b:34:3e:82:c0:
45:01:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:38:03 2025 by rpki-client