Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/tHwLfJO6lMeBACxnaySQC37V3gg.roa
File: tHwLfJO6lMeBACxnaySQC37V3gg.roa (raw, json)
Hash identifier: sWSAQc9CEaFHuGov76/SnthwwF4hw0sPTgcG+3zQtoU=
Subject key identifier: B4:7C:0B:7C:93:BA:94:C7:81:00:2C:67:6B:24:90:0B:7E:D5:DE:08
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018CC5012FCD0E26221C1BC7D176FB14B04E
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/tHwLfJO6lMeBACxnaySQC37V3gg.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213382
IP address blocks: 103.102.231.0/24 maxlen: 24
103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 14:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2f:cd:0e:26:22:1c:1b:c7:d1:76:fb:14:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b47c0b7c93ba94c781002c676b24900b7ed5de08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:f7:fe:5f:c9:ca:7f:e4:07:25:38:1f:d9:
89:61:f1:ed:8e:ac:3c:a2:24:8b:47:a2:3b:08:21:
ee:e2:77:e0:ef:e8:fd:f4:cd:bb:89:d3:92:bf:04:
5a:c9:95:1c:46:07:a0:3a:83:90:75:0b:d8:03:05:
c8:46:4b:1f:02:2c:64:5d:f4:76:c3:5c:55:5f:f0:
74:a5:84:b4:75:c0:d2:78:e2:59:27:1e:43:b5:68:
d9:fc:77:4f:15:27:7c:3f:95:11:f6:db:78:db:81:
bd:45:8e:f2:44:4d:01:b1:5f:12:64:81:e9:7b:20:
50:17:c0:be:51:45:31:dd:80:26:a4:b2:ce:3b:9a:
31:69:db:42:88:20:66:f6:03:35:c8:f4:14:81:cc:
18:7d:e3:9b:ab:e9:f3:64:cb:c4:be:79:9a:e2:5a:
32:5b:04:5c:7a:31:d8:6e:f1:61:17:41:32:29:9e:
99:a7:38:7c:84:8d:c7:74:af:cb:68:ea:e1:2a:46:
2a:ea:a6:9d:8b:95:64:7e:0d:76:89:a4:34:90:d3:
02:38:90:c4:b4:a5:d9:58:8f:dd:13:87:36:2f:bf:
10:19:65:79:bd:12:27:1d:c3:fc:c6:6b:85:a8:ee:
e7:83:a2:9a:c4:a6:a1:51:46:dd:2f:fe:c5:04:2a:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:0B:7C:93:BA:94:C7:81:00:2C:67:6B:24:90:0B:7E:D5:DE:08
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/tHwLfJO6lMeBACxnaySQC37V3gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:70:e5:30:c7:4b:0f:c1:ed:c1:cb:ad:4f:25:0e:da:4d:dd:
d2:c0:f6:cf:66:8a:16:5f:03:47:a7:42:ce:68:fa:42:8c:09:
e6:16:37:bf:df:a4:a6:87:72:20:68:22:ea:50:76:d4:aa:ea:
d8:e7:14:df:29:e0:9f:02:97:8a:b7:05:b2:d8:27:b3:22:be:
8f:d9:af:9b:d4:45:63:33:6d:3a:78:1c:60:85:dd:b7:bd:cd:
22:68:3b:cd:4d:8a:a8:49:c4:32:e8:91:32:8d:81:b6:19:1b:
b3:46:21:e5:32:bb:0e:12:c4:55:9d:03:72:52:87:30:7c:3b:
69:05:03:e2:c8:9d:11:26:ae:14:a9:f1:ec:1f:e6:c5:5b:4d:
a1:0b:96:8e:93:b4:11:c2:84:e8:66:96:0d:89:f8:9c:74:ad:
c0:ed:da:c9:39:5e:9b:50:8e:b0:01:9c:3c:32:3e:f4:50:b5:
8c:55:fe:6d:bb:86:34:c1:4e:46:a6:95:fe:b4:ad:d3:9d:66:
fb:99:df:b8:16:92:f5:9f:6c:a3:b9:7c:b3:42:23:37:d7:74:
4e:0c:61:b8:af:22:5a:a3:69:24:6f:3e:76:ae:1f:aa:6a:40:
94:33:ed:29:ca:5e:19:54:97:bf:d3:d1:e6:6c:9d:fd:a5:d9:
df:6f:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:23:02 2025 by rpki-client