Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Or_zghljESIqFgw_q8HxDi9hoKk.roa
File: Or_zghljESIqFgw_q8HxDi9hoKk.roa (raw, json)
Hash identifier: 8CEijm+o7bj8uEYoLxS0m8RhnkB6jwj9s+k7oFkEb5o=
Subject key identifier: 3A:BF:F3:82:19:63:11:22:2A:16:0C:3F:AB:C1:F1:0E:2F:61:A0:A9
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 018CC34898F2C103CD5A00D01597660624D4
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Or_zghljESIqFgw_q8HxDi9hoKk.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33103
IP address blocks: 202.22.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:98:f2:c1:03:cd:5a:00:d0:15:97:66:06:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3abff382196311222a160c3fabc1f10e2f61a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:74:e5:72:c4:67:ae:d8:9c:c9:e8:c4:62:
09:75:28:02:02:9e:47:a6:cb:0f:da:53:b6:37:8a:
2c:54:d7:b9:71:09:90:2d:a4:e0:d3:e6:cd:49:e0:
5e:53:2e:77:91:b1:fd:b8:48:67:9e:fe:1e:e3:0f:
21:b8:51:8e:07:88:78:cd:b1:96:7e:c8:8b:2a:12:
d9:da:60:ab:28:a0:47:b4:42:b8:10:4d:f6:8f:64:
44:84:7f:57:74:52:3d:ca:ef:35:f0:b8:b9:7d:38:
85:c9:a8:4c:75:ef:02:47:8e:ec:52:4e:c7:03:c6:
53:b9:61:7e:1c:98:17:da:ec:ba:30:9c:f7:79:e7:
d3:70:9a:57:cc:cb:06:21:f6:cb:bb:21:b0:aa:62:
c5:49:0b:48:4c:97:7d:3f:6c:ca:77:f9:f7:4c:28:
41:2f:da:ac:90:14:11:e2:c5:a3:5d:ab:6b:3e:ff:
37:dd:f0:dd:1d:45:12:8f:b4:93:a8:f0:c0:28:a3:
b5:e8:5b:90:d2:d2:0d:19:87:89:aa:03:b9:e9:9d:
23:75:ed:7a:32:24:7e:0c:3f:ce:4a:53:cf:79:72:
b8:a9:4c:96:5e:36:c8:ff:d0:0f:8f:ac:a2:07:7a:
fb:42:07:c4:a2:73:7b:27:b7:12:0a:16:dc:27:44:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BF:F3:82:19:63:11:22:2A:16:0C:3F:AB:C1:F1:0E:2F:61:A0:A9
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Or_zghljESIqFgw_q8HxDi9hoKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.22.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:16:fc:7a:d1:c2:90:90:ab:17:fb:f6:21:26:48:cb:92:29:
0f:5f:5c:63:85:e0:16:4c:16:5d:f2:1c:de:95:f4:6e:fc:7b:
e7:87:a2:9c:b2:87:73:d4:96:b4:0b:81:16:30:b8:9a:3e:02:
a6:4c:e4:22:95:e6:2e:7c:1c:0a:74:8c:f4:38:d4:b5:7b:f2:
b4:8c:21:a5:21:4a:86:5d:90:f3:ba:94:1a:8a:c6:b6:bb:c2:
d9:ab:30:0c:9d:e7:ae:5b:b6:31:a1:8d:3b:e4:af:c3:ef:17:
ae:4e:d9:fc:e6:c3:b4:e5:82:24:1a:ad:78:5b:5a:11:0f:5c:
14:46:51:dd:2e:47:87:61:f1:ef:0c:cd:bb:d8:0e:21:29:3f:
18:28:2e:31:c9:cb:5e:da:e3:2b:8e:be:43:58:61:9d:82:ce:
99:4f:a4:7e:08:c5:77:ff:79:de:b9:65:fa:f1:a5:2d:ed:dc:
71:c2:b1:a3:92:48:75:b6:e6:b8:4a:05:de:5f:81:21:4e:43:
c4:2d:1b:98:77:3c:e0:6f:f4:0d:0f:40:d5:4a:26:80:57:0c:
9c:c1:24:12:58:d1:0e:71:71:30:21:9a:3c:0e:88:25:3e:54:
f0:17:e1:40:76:2c:7b:3c:d6:9d:cc:ce:5c:9d:18:56:b7:fc:
fe:d6:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:14 2025 by rpki-client