Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oaLj_R5iSy6k-_xQ-yu-QO61dFw.roa
File: oaLj_R5iSy6k-_xQ-yu-QO61dFw.roa (raw, json)
Hash identifier: 6AUr7faGy3LBEo6nhIgup7W78aFeYfjq7CuGXfailxs=
Subject key identifier: A1:A2:E3:FD:1E:62:4B:2E:A4:FB:FC:50:FB:2B:BE:40:EE:B5:74:5C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01939CEC75417E5096E4C5012BCCB825D875
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oaLj_R5iSy6k-_xQ-yu-QO61dFw.roa
Signing time: Fri 06 Dec 2024 17:02:42 +0000
ROA not before: Fri 06 Dec 2024 17:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399646
IP address blocks: 103.245.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:ec:75:41:7e:50:96:e4:c5:01:2b:cc:b8:25:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 6 17:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1a2e3fd1e624b2ea4fbfc50fb2bbe40eeb5745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:7d:f8:a0:a3:9c:8e:c4:10:d4:b3:1e:d9:
f5:8c:8c:f2:5c:8a:cf:c9:51:38:91:1a:71:77:94:
98:47:b1:04:85:d0:94:8b:04:59:67:7a:2b:a1:5e:
8d:45:11:e8:c0:93:78:d2:b6:7f:8e:05:a0:fd:b4:
75:a4:c6:07:e3:f9:4c:2e:d7:02:8c:61:d0:2b:81:
e9:36:24:8b:14:c2:bc:a3:97:fe:47:ae:5f:a9:d8:
78:cb:79:ae:4d:a6:5c:63:10:e3:43:3a:93:6f:63:
31:d1:aa:7d:f4:99:3f:09:58:ab:b6:c3:58:b6:cb:
f0:89:61:39:75:cd:02:06:5b:a5:8e:cc:d2:dd:d1:
50:6d:ad:27:fb:7d:21:81:35:b0:46:e5:9d:b5:f8:
d4:1f:28:02:59:b0:41:10:c4:fa:dd:bd:f2:eb:84:
a9:08:f9:a4:90:39:2e:50:27:a0:cc:5c:58:27:42:
95:ea:44:50:5b:dd:68:f7:ad:01:94:a3:93:4b:a1:
46:e6:57:43:77:9e:ae:52:d9:7b:af:47:47:e0:ec:
0a:8d:8c:4f:3e:d8:3e:e8:80:5f:3a:9d:5f:09:44:
1a:ce:7d:aa:68:be:21:0d:ef:3a:30:ec:c5:b9:04:
97:9e:da:58:89:30:cc:5c:97:47:ab:bc:92:ab:96:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:E3:FD:1E:62:4B:2E:A4:FB:FC:50:FB:2B:BE:40:EE:B5:74:5C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oaLj_R5iSy6k-_xQ-yu-QO61dFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.228.0/24
Signature Algorithm: sha256WithRSAEncryption
87:88:fd:2c:f9:3e:7d:cd:65:5d:83:d8:67:fc:84:3a:93:21:
70:dd:d8:2b:94:9e:4b:91:98:19:4f:2d:e7:71:3a:7b:9b:37:
a6:c4:ae:91:ba:04:95:6c:b5:07:5e:48:fb:a5:1c:64:30:c2:
1c:c8:b1:17:5d:d0:a5:78:60:75:47:4f:3b:3b:30:34:36:33:
46:4a:7d:9a:d8:b3:6b:c0:d3:e0:dc:00:65:22:bc:5c:de:fe:
03:59:ef:2d:04:20:a0:4d:2c:89:c7:f9:1d:e1:6e:75:e4:d0:
48:85:92:ec:a4:1f:20:ee:93:19:92:f9:14:9d:71:95:5e:0b:
00:bd:e7:18:c2:9f:3c:91:ca:57:17:8b:a3:42:4a:a0:85:95:
f1:75:c6:67:3a:9a:14:07:7f:50:0f:74:6f:48:41:1e:5f:7c:
f8:60:18:f5:9c:5d:83:25:26:08:4b:47:81:aa:ea:99:19:d8:
3d:27:e5:3d:db:44:9d:b2:89:14:ea:b0:81:e5:15:fb:a4:44:
63:cb:e3:0d:72:df:04:73:f6:b2:b6:1e:fb:5a:f1:b0:6d:ad:
b1:a5:6d:0a:ed:60:ad:c5:6d:a0:29:3d:08:db:e1:d9:68:72:
5d:ee:71:3e:da:8f:64:7d:fa:9b:21:40:29:0a:07:77:a5:c7:
c0:7b:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:18 2025 by rpki-client