Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/OPcamf1RH8luzWyplqrO4TRr4ZI.roa
File: OPcamf1RH8luzWyplqrO4TRr4ZI.roa (raw, json)
Hash identifier: 4OpEvzRbJxV2WPVC5za17/EjJy4htkbee47U4e40x/s=
Subject key identifier: 38:F7:1A:99:FD:51:1F:C9:6E:CD:6C:A9:96:AA:CE:E1:34:6B:E1:92
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018B29FF8DC2F479CB78209140A1F431FC1F
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/OPcamf1RH8luzWyplqrO4TRr4ZI.roa
Signing time: Fri 13 Oct 2023 17:04:55 +0000
ROA not before: Fri 13 Oct 2023 17:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6204
IP address blocks: 103.246.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 19:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:ff:8d:c2:f4:79:cb:78:20:91:40:a1:f4:31:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Oct 13 17:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38f71a99fd511fc96ecd6ca996aacee1346be192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:c7:aa:27:df:7d:57:6d:11:10:8a:8f:3b:
1d:c0:d6:d8:a7:3e:93:71:c6:8a:7f:cc:32:f2:bc:
f5:ba:e5:da:30:48:ea:a5:24:e7:b0:37:ab:48:f1:
70:ab:33:36:72:d7:e5:73:0b:72:2a:f6:e3:64:ce:
e0:da:c6:36:26:44:74:0a:c7:53:b8:00:04:f5:79:
28:e0:e0:75:e0:91:2b:69:8f:07:e1:ed:6e:e5:0a:
6e:45:db:7d:23:77:b8:6a:08:f3:70:6f:00:a3:95:
2a:eb:88:7c:14:39:54:11:4d:a1:ec:2a:08:10:c5:
f2:ba:8b:a9:1c:2c:6d:1b:9e:8b:ca:1e:d1:8d:0b:
d2:00:ef:79:13:08:7a:27:29:ae:05:85:a5:f5:61:
cb:e0:41:fb:4e:b8:8e:98:e1:c0:44:6a:39:34:32:
34:18:36:2c:0c:e5:77:e9:f0:76:eb:84:20:30:a7:
98:b5:9f:24:7e:06:d4:83:88:59:5d:ac:6a:52:6e:
48:42:ec:ed:e7:5d:2d:c5:a6:f4:18:f6:06:b8:ee:
63:4f:09:af:f8:ee:00:d9:33:e4:77:f2:db:2a:04:
4e:7d:96:49:89:ad:1f:71:12:70:3b:e4:26:8c:6b:
94:7a:e0:58:2f:1a:a2:70:51:01:0f:07:1d:e1:ca:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:1A:99:FD:51:1F:C9:6E:CD:6C:A9:96:AA:CE:E1:34:6B:E1:92
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/OPcamf1RH8luzWyplqrO4TRr4ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.248.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:8d:a1:1d:a7:d5:af:97:0f:ac:bb:d7:a2:b1:60:bb:4d:20:
4c:dc:88:ba:c0:8f:5c:a9:f1:5e:fa:5c:41:e9:a9:2d:2b:35:
ae:ce:aa:c1:b5:e8:46:a6:c7:a7:37:f1:3c:47:6d:2f:db:94:
8b:89:66:ba:8e:8f:92:c0:99:fd:60:dd:6c:27:69:02:52:f1:
22:b2:94:59:35:5a:d4:bf:2f:51:0e:45:38:2c:b1:96:d6:55:
01:71:41:2f:63:1f:6f:07:9d:9f:35:66:43:59:27:4f:4e:7c:
96:ef:eb:66:11:20:14:02:1a:2c:b6:04:58:32:fc:b7:32:25:
55:ad:7b:f4:64:f0:c4:bc:76:ce:7e:ff:55:8c:34:e3:6e:73:
00:15:e7:62:14:3e:2e:5a:15:ca:86:bc:7f:6b:e6:81:9f:61:
0e:f0:7e:ee:bc:5f:6c:30:ca:a1:49:f3:18:fe:ff:a0:9a:6c:
5c:dc:32:a1:93:fe:27:4d:37:9b:a6:1d:ef:b8:f4:3f:89:c6:
bf:f2:e0:15:4b:67:66:d6:a9:ff:f8:05:6f:e0:b8:ff:1a:d9:
16:b9:3f:69:b1:c8:3a:d8:d8:ea:bd:8c:78:17:49:10:86:74:
b6:6c:4f:d0:2d:b6:e9:4b:60:32:db:58:11:55:1d:6a:3a:e7:
35:be:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org