Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/OPCF_hfLTMY80SPw8j8WwzilHKY.roa
File: OPCF_hfLTMY80SPw8j8WwzilHKY.roa (raw, json)
Hash identifier: 5QHGzle9VRAZe/hSOx3zqj4RW6NJlpdmvyRjIY/Tflk=
Subject key identifier: 38:F0:85:FE:17:CB:4C:C6:3C:D1:23:F0:F2:3F:16:C3:38:A5:1C:A6
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01939A88658523B44B47A5A17724F0B87242
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/OPCF_hfLTMY80SPw8j8WwzilHKY.roa
Signing time: Fri 06 Dec 2024 05:54:10 +0000
ROA not before: Fri 06 Dec 2024 05:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 83.147.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9a:88:65:85:23:b4:4b:47:a5:a1:77:24:f0:b8:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 6 05:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38f085fe17cb4cc63cd123f0f23f16c338a51ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:2d:ee:6e:02:a2:92:46:07:23:16:d1:9c:
a7:9d:4c:9f:2f:5a:3d:b5:b4:dd:69:b7:fa:21:c4:
bd:d3:4e:2b:8e:50:ab:79:d3:a0:a4:17:fb:8f:be:
83:6b:1e:f6:73:7d:e9:ff:e0:93:67:6d:93:c0:de:
e6:20:98:f1:ae:25:be:0b:4c:21:ba:2a:71:89:b2:
d1:e6:d8:3e:26:be:cc:70:82:f7:bc:d9:e9:da:14:
76:76:d7:d6:e1:3f:17:9d:4d:4f:b0:87:16:58:8f:
cd:77:e9:8e:5d:38:0a:fd:af:1a:3e:02:c7:17:ed:
f6:87:2e:44:ee:3b:36:51:69:cf:fa:92:ee:d6:62:
e9:54:3c:30:8b:0a:ac:98:4e:96:b2:f3:9f:25:82:
1c:34:49:66:39:71:ae:ff:3b:4b:05:0f:89:9f:0e:
6f:b6:3e:75:06:80:55:d4:c7:01:d1:df:32:45:a8:
b7:fa:8b:df:d4:b0:c5:0d:37:93:ca:7f:86:b3:0b:
2f:1f:e8:b0:31:18:29:e0:55:8d:01:6a:d8:70:c1:
87:3a:a2:10:b7:8c:fa:5e:94:9a:24:90:bf:75:d0:
13:f5:1f:59:4f:d4:82:fb:e3:d4:dc:c4:a1:96:64:
04:50:c6:b2:6d:bd:51:c6:ab:3d:50:b9:22:ed:c7:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:85:FE:17:CB:4C:C6:3C:D1:23:F0:F2:3F:16:C3:38:A5:1C:A6
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/OPCF_hfLTMY80SPw8j8WwzilHKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
06:c4:69:57:28:67:13:cd:19:6c:5b:5f:4a:30:2b:2b:51:36:
0c:4e:d9:ee:f8:a7:92:88:ed:dc:b4:f9:aa:a6:1a:b2:d7:05:
db:1b:c5:49:29:a8:3f:ff:87:63:70:44:be:aa:b3:ac:2b:b2:
c7:de:6f:af:71:e3:18:a8:31:ba:e6:0d:18:21:46:64:c1:aa:
16:78:9c:1d:25:52:54:9c:c8:e2:8a:f9:61:e7:c7:21:19:d4:
7c:91:23:19:f1:28:34:f4:b8:7b:ec:a0:a8:78:76:aa:58:4e:
6d:d3:5b:cb:d5:37:ba:99:93:44:21:c7:e5:3d:97:32:87:60:
d2:8e:15:63:eb:59:43:7a:cc:d8:b9:fe:eb:6e:75:1e:28:8a:
01:1a:3b:c9:79:4d:7f:70:c7:40:91:c4:72:73:29:34:07:0b:
0c:b8:cb:b5:0d:f0:ff:02:b4:2f:13:b6:23:8e:b4:90:99:df:
ed:20:2b:9c:5f:f9:6a:e4:9e:a8:05:7d:9c:1c:08:95:13:a0:
b3:4a:e6:0a:1f:f8:35:0e:95:0b:29:ba:08:45:a8:1c:77:24:
90:1f:0d:11:63:20:d5:38:c6:02:b8:00:8f:a4:8f:d0:b7:9b:
d6:45:70:40:8c:82:cb:00:30:3d:ee:9f:f0:e8:27:7c:b3:40:
57:63:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:00 2025 by rpki-client