Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/QgLwEY3DKZMw_iOc3x5hSgz4iZE.roa
File: QgLwEY3DKZMw_iOc3x5hSgz4iZE.roa (raw, json)
Hash identifier: qbI2HBRvYYuc9UsPcW2DEBwkw8TwZ55QyRkocHhTvaU=
Subject key identifier: 42:02:F0:11:8D:C3:29:93:30:FE:23:9C:DF:1E:61:4A:0C:F8:89:91
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018CB785F322C52513FEC851DB32D8439C8A
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/QgLwEY3DKZMw_iOc3x5hSgz4iZE.roa
Signing time: Fri 29 Dec 2023 21:40:58 +0000
ROA not before: Fri 29 Dec 2023 21:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213382
IP address blocks: 103.102.231.0/24 maxlen: 24
103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b7:85:f3:22:c5:25:13:fe:c8:51:db:32:d8:43:9c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Dec 29 21:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4202f0118dc3299330fe239cdf1e614a0cf88991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:3f:9a:db:38:bf:f2:7e:ba:fc:a2:3e:90:
38:73:d6:99:4a:0a:ea:b5:65:e9:9e:5f:8a:5b:e2:
aa:dd:de:81:91:fb:4a:9e:fe:c9:0f:a3:3e:6c:9e:
b8:83:c7:87:f6:4c:e4:f1:27:10:e0:25:40:d2:49:
73:43:45:c0:61:11:d0:ee:e8:ce:f6:ca:a6:0d:73:
c1:f3:38:33:4c:96:98:63:ce:10:93:71:90:57:ea:
5f:bf:ac:9f:48:17:63:d8:94:39:e1:3a:0f:a2:48:
8a:4e:71:59:d4:f2:cd:67:a8:e1:f2:05:a2:5d:a6:
a0:01:26:fd:55:2a:85:80:6d:56:4e:b0:46:0b:1f:
6b:ca:ae:17:97:35:a6:b0:d6:b8:a2:a6:33:50:44:
6b:55:f8:68:19:67:29:ed:7f:ea:e3:64:bf:87:c3:
10:c4:8a:fa:73:fb:a7:68:27:f2:c0:88:cf:35:fb:
ff:c0:56:12:d7:b2:ae:90:20:b7:f5:1c:ff:f5:47:
77:12:fa:4f:8e:30:9f:b5:1d:23:3d:8b:de:85:50:
5a:b1:ca:c8:1a:cb:75:39:ff:9c:c7:35:21:73:ba:
18:b6:75:63:ab:85:02:1d:f1:3b:d4:c0:21:35:6e:
f5:fc:25:ae:f3:43:c7:8d:76:e4:20:01:09:d9:e7:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:02:F0:11:8D:C3:29:93:30:FE:23:9C:DF:1E:61:4A:0C:F8:89:91
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/QgLwEY3DKZMw_iOc3x5hSgz4iZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/23
Signature Algorithm: sha256WithRSAEncryption
64:f0:27:02:66:02:54:f3:0b:91:f8:5f:29:49:e0:02:a6:2c:
e9:f1:be:bb:f9:bf:e2:a5:34:e1:d4:30:62:09:be:b8:16:d1:
af:e5:8e:71:28:36:32:ab:17:9d:ad:4e:e7:b3:c1:06:86:85:
57:7f:cd:d5:db:dc:e9:cb:ce:d9:11:22:f1:61:93:39:9b:7a:
03:80:84:15:38:65:67:a4:66:69:76:6c:57:ea:e5:8f:c3:13:
bc:c9:bc:4d:33:0a:9b:1a:ad:45:c8:06:f4:6b:3e:97:10:2a:
4b:5d:5d:e2:02:3c:40:cb:aa:42:04:28:00:dc:c6:20:ce:6d:
86:29:b7:56:ed:63:af:99:0f:5a:e4:33:d3:c0:ca:3e:b8:ae:
44:8f:8e:e7:02:d4:ba:e6:58:c7:0e:a1:99:d2:e6:6a:dd:5d:
11:b5:dd:fc:f4:c2:f7:16:f6:41:f4:74:df:6c:35:07:94:e2:
6f:15:c4:ed:e9:a1:aa:d5:a9:ef:e0:be:e5:c2:d3:55:dc:c5:
1b:76:a0:15:cd:b4:dc:68:73:53:19:c1:3c:df:a5:44:25:f1:
47:f5:0b:86:fe:3c:60:1a:68:80:1d:0e:91:45:ad:1c:6d:44:
0a:c0:99:c2:13:41:88:29:7d:9a:d4:4f:14:d9:fb:75:3b:5e:
a2:c3:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:29 2024 by rpki-client on console.sobornost.net