Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/CcBRBDvLy3Luiw12GnXs0Yqhhx4.roa
File: CcBRBDvLy3Luiw12GnXs0Yqhhx4.roa (raw, json)
Hash identifier: SLWCQqMC0Fxp6YovcPHx1IJnen8iumNRtT5AR2doE2k=
Subject key identifier: 09:C0:51:04:3B:CB:CB:72:EE:8B:0D:76:1A:75:EC:D1:8A:A1:87:1E
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018BD5CAC5695782C539F997404D44A7C1A0
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/CcBRBDvLy3Luiw12GnXs0Yqhhx4.roa
Signing time: Thu 16 Nov 2023 01:41:57 +0000
ROA not before: Thu 16 Nov 2023 01:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50200
IP address blocks: 103.246.248.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Dec 2023 19:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d5:ca:c5:69:57:82:c5:39:f9:97:40:4d:44:a7:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Nov 16 01:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09c051043bcbcb72ee8b0d761a75ecd18aa1871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:ac:8c:94:c4:69:6c:d3:f7:4d:55:82:99:
33:a3:0c:55:a9:97:aa:f1:be:eb:0a:70:da:a4:ea:
1e:d3:24:6e:7f:d0:38:1d:f4:19:c0:50:59:66:81:
a2:93:bc:f1:52:ea:e3:37:71:cc:07:ea:b3:f7:65:
4d:69:63:84:e5:a0:f7:42:e3:9d:12:9a:c6:6b:b0:
da:b1:9d:35:ec:bf:ca:4d:fa:bf:f3:55:17:da:06:
1f:19:e4:e2:28:8d:89:bc:20:e8:85:1c:a2:69:93:
47:9d:80:65:6c:6d:c6:3b:71:a7:88:ae:e2:50:9c:
24:25:c6:ae:af:25:34:8b:16:94:e1:40:79:eb:ec:
6b:a9:21:a1:1b:fc:a0:09:51:3b:4a:33:52:45:fd:
c3:6b:cf:0a:9f:c8:e9:00:77:f9:58:57:ed:8e:62:
fb:b6:7a:8e:bf:46:54:8d:7a:38:7e:2d:33:2c:f4:
47:a3:a3:e1:84:4f:ff:1d:17:82:87:0d:38:b3:63:
39:de:2c:9a:d1:b1:77:f6:53:2c:f0:5b:57:e9:aa:
48:85:fa:31:ab:a1:bc:2e:90:e7:59:4c:fb:34:d6:
00:5e:fa:77:34:e5:7c:34:3f:e9:ce:40:7f:89:86:
ed:b8:f6:87:9a:9b:50:ea:bf:e0:ed:14:18:65:52:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:51:04:3B:CB:CB:72:EE:8B:0D:76:1A:75:EC:D1:8A:A1:87:1E
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/CcBRBDvLy3Luiw12GnXs0Yqhhx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.251.0/24
77.74.123.0/24
103.246.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d5:31:c8:78:17:bf:ec:70:7f:56:91:ab:fe:cd:60:93:2c:
e1:b9:4b:f9:28:6c:3e:34:22:78:ee:10:4c:5b:86:ac:b4:25:
4c:e1:af:80:19:7d:1d:3e:03:20:90:89:9b:b8:88:30:22:74:
0b:cb:17:73:3b:73:e1:62:a2:9f:21:1b:51:36:6e:4a:d9:42:
b8:e6:e4:43:aa:ca:28:39:3b:10:80:d7:00:b4:5d:a9:05:e9:
91:04:3f:42:22:be:64:9b:27:fd:18:35:b2:9f:6d:2e:8c:3b:
08:d9:73:cf:2a:f4:45:4d:59:4b:11:0b:a5:3c:48:31:86:a0:
ee:a8:eb:d9:d0:bf:56:84:f0:05:81:a6:75:28:c6:52:bf:97:
0e:1e:27:47:cd:ca:6d:69:ff:95:78:94:cc:8d:51:4f:93:79:
0b:d4:ab:9f:58:0c:09:bf:e8:4b:ed:fb:9d:47:04:65:71:3b:
bb:d3:f1:46:e3:72:03:31:43:73:88:92:c7:fa:eb:33:5e:fc:
26:75:56:72:35:c3:8a:08:54:98:41:7d:5e:c2:01:75:e6:52:
e2:fe:bb:d6:b5:3c:bf:bf:dc:bd:bd:c6:33:93:92:d2:aa:f8:
ac:f9:12:ef:5c:c0:01:98:16:e9:f0:fd:09:49:3a:33:4c:8c:
31:7f:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org