Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OFQwW_0ggp3lQYuTAO1_3CZNp68.roa
File: OFQwW_0ggp3lQYuTAO1_3CZNp68.roa (raw, json)
Hash identifier: EltLU6DeD8r6BpuZqfG0K0QcmrgPWKxTta59PCHg1NU=
Subject key identifier: 38:54:30:5B:FD:20:82:9D:E5:41:8B:93:00:ED:7F:DC:26:4D:A7:AF
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0185718300E2AF2B0129C28341A9E269728E
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OFQwW_0ggp3lQYuTAO1_3CZNp68.roa
Signing time: Mon 02 Jan 2023 08:04:48 +0000
ROA not before: Mon 02 Jan 2023 08:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147001
IP address blocks: 103.76.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 14:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:00:e2:af:2b:01:29:c2:83:41:a9:e2:69:72:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jan 2 08:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3854305bfd20829de5418b9300ed7fdc264da7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:dc:f8:13:97:5a:e7:1e:a1:ae:84:6f:82:
d5:6f:40:f1:35:0e:f6:41:36:2a:8f:7b:e5:65:35:
cb:08:6e:00:70:0e:4f:71:ad:c2:e1:6f:21:67:ba:
6e:09:05:1c:24:99:8f:f4:cd:f3:04:2f:17:b4:2c:
f5:df:5f:2e:93:ae:27:6b:6c:21:94:fc:b2:1f:bb:
1c:1c:97:9d:d7:98:99:e1:70:17:40:29:c0:9a:f9:
65:38:dd:ba:5e:eb:1a:7f:57:3b:09:f4:a0:95:4f:
14:e6:b5:2e:0a:2d:ca:82:c0:0c:b4:4c:d7:bf:4f:
be:c9:af:84:cd:de:9d:4c:e0:43:17:c8:0f:50:67:
69:a2:d8:1b:ce:ae:d4:b6:c1:4b:75:93:a1:b2:d9:
f9:64:68:4b:0c:0b:53:e3:98:07:70:9a:b5:e1:43:
0f:14:f2:65:8d:c1:73:cb:de:af:9e:98:bb:c8:10:
b3:f1:30:7d:34:2e:5b:41:42:49:fc:fb:92:0b:20:
a8:ee:34:dc:76:07:7a:6c:ad:0a:59:1a:fe:fa:61:
ab:4d:e9:db:f9:fe:fa:79:d3:b0:f2:aa:69:36:e3:
4f:10:c7:db:2d:ca:e6:b7:9b:f5:22:18:63:5b:0b:
f3:b1:0a:ef:96:b1:20:11:49:83:5c:74:5d:bd:70:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:54:30:5B:FD:20:82:9D:E5:41:8B:93:00:ED:7F:DC:26:4D:A7:AF
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OFQwW_0ggp3lQYuTAO1_3CZNp68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:67:4b:b5:e6:22:40:ea:5d:2d:0f:a5:d1:a0:6e:5e:ed:ce:
8b:e2:fb:48:95:da:16:ed:d1:ef:b4:d5:7f:1f:e6:88:ad:67:
e8:49:c7:1d:6a:e1:9a:a6:ea:2f:2e:6d:bc:ca:ad:4a:35:0b:
d9:4c:61:9e:e0:cc:6c:36:0b:d6:b5:ac:bb:81:e5:f6:b9:92:
66:2d:53:cc:3b:7d:2e:3e:cf:fe:54:bc:4b:35:8c:a9:b9:89:
66:42:82:a6:8c:ee:73:5a:a5:e2:69:1f:42:19:84:0f:4d:0d:
2f:99:ce:05:5a:c8:a7:bb:09:ec:50:b0:31:a8:83:0d:98:3d:
81:19:e8:71:ce:40:d5:9e:25:a5:de:66:a5:0d:5b:e6:a1:69:
7c:3f:b7:6a:88:13:5c:72:18:1f:3b:77:c5:9e:0e:0b:a2:db:
0e:79:30:6e:6c:b2:e0:88:c8:94:66:8a:cd:1a:e1:37:af:77:
1f:65:5a:1a:da:cd:27:0b:fa:f5:b4:06:53:df:62:c3:90:54:
33:6f:6d:06:11:b9:e6:ce:41:8d:cc:1b:b2:c7:cd:55:5e:09:
46:a0:e0:fa:fe:8d:bf:4a:53:99:96:44:51:04:1e:94:8c:24:
da:90:8a:e8:b6:63:fa:a4:22:bb:10:3f:74:f0:13:ac:f2:51:
3f:df:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org