Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/pf2HY1YBBgPNOVqGytnrvY00iBk.roa
File: pf2HY1YBBgPNOVqGytnrvY00iBk.roa (raw, json)
Hash identifier: KSBo4fS9EaoZcRkSHUNonjstLAVW4GDNjZfc3U3i6+U=
Subject key identifier: A5:FD:87:63:56:01:06:03:CD:39:5A:86:CA:D9:EB:BD:8D:34:88:19
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01928529F3468DCB614507EA2A9A19F9D02B
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/pf2HY1YBBgPNOVqGytnrvY00iBk.roa
Signing time: Sun 13 Oct 2024 09:16:11 +0000
ROA not before: Sun 13 Oct 2024 09:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215071
IP address blocks: 103.216.175.0/24 maxlen: 24
188.66.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:85:29:f3:46:8d:cb:61:45:07:ea:2a:9a:19:f9:d0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 13 09:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5fd876356010603cd395a86cad9ebbd8d348819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:29:db:37:ef:32:82:af:30:9b:02:13:7e:
bf:74:3e:a1:6e:91:36:74:bd:b6:59:98:b4:87:bb:
34:05:5d:90:6a:da:27:90:88:2e:f3:15:2c:55:f0:
c3:18:b6:8d:3b:cc:b0:12:47:35:a9:48:24:75:90:
72:e1:62:b3:53:fd:af:fa:7e:56:e3:32:14:7a:6f:
b4:ae:8b:c5:db:d6:65:9d:60:51:8a:07:43:20:08:
25:d2:32:07:d2:60:4e:36:a2:71:86:0f:3f:63:ff:
18:07:8a:fa:fb:52:b8:a8:2e:8f:35:fd:0e:b7:53:
b4:0b:9d:b1:78:1b:15:01:fe:cd:7d:aa:c3:42:be:
6f:b5:ef:b2:1a:a3:41:26:e3:c3:61:3b:d1:52:96:
83:b6:af:70:6b:31:54:b4:b3:54:7e:d3:51:41:78:
e9:3b:9b:87:e2:45:3b:0e:31:c9:35:b3:ec:93:0a:
37:b1:90:81:f5:32:95:05:27:b1:4c:34:58:05:9b:
0f:6e:71:eb:db:ec:3b:b2:0f:c4:b0:78:de:f4:00:
73:ca:bb:79:7a:49:b3:67:2e:d6:5b:df:5f:48:b6:
68:5c:4d:72:e9:e8:86:cb:16:fd:42:68:45:6a:93:
46:4f:55:da:c3:c3:bd:7c:d4:8e:bf:fd:72:01:34:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:87:63:56:01:06:03:CD:39:5A:86:CA:D9:EB:BD:8D:34:88:19
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/pf2HY1YBBgPNOVqGytnrvY00iBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.175.0/24
188.66.24.0/24
Signature Algorithm: sha256WithRSAEncryption
34:59:cc:6a:1a:ff:e4:98:2a:7b:09:4a:51:93:f8:a7:20:a4:
00:bd:74:7a:8d:67:2e:0f:ac:70:f7:da:19:f0:4f:d8:a3:82:
fc:cd:09:3b:98:55:55:dd:0a:02:b0:35:65:95:d3:a0:91:4d:
6a:a8:67:e5:81:65:92:ea:bf:76:ae:03:8f:35:96:27:ed:be:
d3:a8:25:b2:8b:09:ae:40:ec:b2:f3:79:62:69:b6:25:ab:b1:
88:76:75:68:82:25:12:f8:e5:21:aa:3c:2d:9b:3b:dc:d0:41:
e4:39:55:42:81:fe:1a:6b:8b:51:d7:42:34:75:44:1f:b8:f5:
fa:5f:6e:58:f0:c0:92:80:af:31:a8:9c:53:87:d8:a3:5e:c8:
9c:c0:50:fe:7c:7c:95:f8:c3:08:c7:3d:5f:1c:9e:78:9d:a6:
e5:c6:2e:f7:b8:ab:8c:6b:b3:bd:6d:6e:cd:77:64:7c:17:02:
28:1c:59:31:3e:76:f3:99:ea:63:b2:f1:62:de:6a:bc:32:c9:
06:95:79:32:27:0b:4e:cf:88:41:e0:54:f4:3c:ae:fe:47:96:
ee:16:e4:6a:00:03:86:9b:b2:91:1b:3c:84:35:b2:ea:d5:48:
cf:08:de:e5:f9:72:1c:31:9f:80:58:7f:4b:ed:45:4b:e3:21:
39:33:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:15 2025 by rpki-client