Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/qELeA5DH9FYbfaTlG8KzGZmTOIw.roa
File: qELeA5DH9FYbfaTlG8KzGZmTOIw.roa (raw, json)
Hash identifier: 9mc3yw/uK5e3IdDPNmPGeTgz0dBPM8bl64dc1hUeQUg=
Subject key identifier: A8:42:DE:03:90:C7:F4:56:1B:7D:A4:E5:1B:C2:B3:19:99:93:38:8C
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018DF66F08B8734FDE1757E7FC61BC7716BC
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/qELeA5DH9FYbfaTlG8KzGZmTOIw.roa
Signing time: Thu 29 Feb 2024 19:54:48 +0000
ROA not before: Thu 29 Feb 2024 19:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216308
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 14:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:6f:08:b8:73:4f:de:17:57:e7:fc:61:bc:77:16:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Feb 29 19:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a842de0390c7f4561b7da4e51bc2b3199993388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:5b:97:73:a2:90:f9:3f:20:4e:18:af:58:
dc:ca:ea:43:7f:bb:fc:de:94:68:b1:4b:06:25:00:
9e:f1:4c:bf:2d:bf:ab:9d:4b:34:d1:8c:47:ff:ff:
67:7c:43:8e:91:f0:9e:bc:56:f9:76:75:80:1e:f9:
24:e3:d6:cb:8f:dd:2a:fc:ef:46:2b:2b:0a:a3:bb:
f9:51:a4:35:63:bb:68:0d:8f:47:d4:f3:90:3a:de:
b9:73:34:96:b8:71:26:2d:88:2a:bb:71:30:33:61:
3b:aa:ec:69:63:70:6e:1e:78:af:29:56:a4:0a:0b:
8b:16:35:f9:5e:e6:2b:42:cf:1e:c1:99:e9:af:cc:
cf:e0:36:dc:b7:1f:c5:7f:aa:33:36:dc:00:77:5d:
10:19:48:81:d1:2f:e3:6c:0b:99:16:8e:fa:d8:c5:
ed:80:dc:33:1f:9c:f9:66:9f:3e:bf:81:d9:97:8e:
88:9d:ae:26:a0:9a:bc:b8:e0:8a:b4:49:3a:77:85:
8d:e2:cc:29:fa:f8:ca:27:74:7d:8d:f2:71:f0:e6:
dd:df:23:d3:fd:3d:56:cb:ca:23:76:6b:80:cc:d3:
39:de:7c:8c:5a:bb:54:d3:44:33:20:6c:de:e1:21:
80:1e:ac:e7:00:48:3c:99:7b:dc:57:db:89:05:cd:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:42:DE:03:90:C7:F4:56:1B:7D:A4:E5:1B:C2:B3:19:99:93:38:8C
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/qELeA5DH9FYbfaTlG8KzGZmTOIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d8:dc:c8:74:53:9e:42:6d:36:a3:00:c3:08:4f:60:ad:f9:
17:19:62:05:97:d6:76:19:99:7b:74:75:67:97:97:0c:ed:6c:
7a:e8:de:7a:36:0d:d2:f9:16:c5:94:f5:43:68:e3:8b:66:f9:
e3:84:52:51:d7:bc:39:ed:c2:6b:dd:a0:7d:cc:35:27:04:d0:
ed:ed:71:32:16:5c:34:05:c8:f2:e9:9e:7b:0e:58:3f:02:57:
2e:ac:3c:a5:8f:4b:55:cd:e6:22:1b:1c:f1:e0:67:88:05:21:
d9:bd:c5:ef:27:32:4b:a8:fe:1c:81:e8:31:91:6a:07:25:7e:
81:a7:8d:81:06:ae:ae:57:7e:a0:07:ed:a3:dc:28:eb:2d:be:
83:b6:1b:f0:cc:c4:fb:58:85:7f:46:e6:11:8b:3b:63:6f:b5:
65:42:48:d9:de:3e:fd:54:25:ee:97:47:24:6b:b0:81:3c:19:
3c:93:29:8f:f2:3e:3c:93:e4:27:8b:14:d5:c7:71:8c:93:06:
22:8a:53:7f:1a:95:34:a2:2d:b3:0d:18:c7:e5:28:e9:b8:b4:
8a:94:b1:51:da:cc:22:b4:f1:e7:c3:5a:cd:b2:83:62:27:2e:
a4:2b:20:d1:00:f7:26:22:a1:53:67:73:b0:ee:d1:ff:54:be:
09:95:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:44:23 2025 by rpki-client