Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ob2DGsfcXpFrlLTsaa81THSMSEM.roa
File: ob2DGsfcXpFrlLTsaa81THSMSEM.roa (raw, json)
Hash identifier: zngmKs1ZxB63diIp86ww6kBR+4iwGAYcm0qb4mm/9As=
Subject key identifier: A1:BD:83:1A:C7:DC:5E:91:6B:94:B4:EC:69:AF:35:4C:74:8C:48:43
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01914C9E2B205893E45B22F9F6C5D013483A
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ob2DGsfcXpFrlLTsaa81THSMSEM.roa
Signing time: Tue 13 Aug 2024 16:41:59 +0000
ROA not before: Tue 13 Aug 2024 16:41:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 103.102.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 21:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:9e:2b:20:58:93:e4:5b:22:f9:f6:c5:d0:13:48:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Aug 13 16:41:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1bd831ac7dc5e916b94b4ec69af354c748c4843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:9f:64:2b:b7:48:9b:35:67:92:76:31:27:
bd:51:0a:7d:56:b4:59:ea:d3:26:2a:d7:bc:f8:21:
88:7f:d2:47:f2:2c:6d:11:34:14:a1:03:91:aa:ab:
95:19:f4:45:5c:a9:84:73:58:3a:8b:90:9f:fc:2f:
c0:ca:f7:68:08:0f:bd:bb:cc:af:0a:8a:d3:84:e6:
4b:38:50:d7:9c:32:a1:6f:44:83:08:9d:3b:bc:ca:
fe:db:f8:82:ea:e1:c9:3c:92:bd:6f:80:74:dc:8b:
b4:5c:6b:2c:ca:e4:e4:96:c5:13:8e:44:2f:40:4d:
20:ae:97:b1:2d:e5:cf:06:e5:f0:43:a4:2b:f8:cb:
fb:9b:78:e6:18:b3:c0:f3:84:07:b0:95:14:69:7d:
7f:9b:f7:66:e8:75:36:9b:23:24:e4:8c:b9:4d:62:
39:84:e1:16:b4:0c:95:57:fe:a0:a2:1c:33:54:ee:
a9:64:73:83:6d:ac:6f:de:a0:d6:9f:ce:6a:a4:c7:
d1:31:7f:eb:f9:c1:f4:82:b1:e1:2c:e0:2c:91:8e:
ad:bc:8d:d4:bc:f6:b3:95:67:db:c6:77:24:de:b2:
ae:5f:c1:a3:35:ac:60:f5:c0:4f:57:ac:ab:4b:69:
0a:46:c5:19:8b:62:7e:f7:18:3f:93:e8:cf:7a:7a:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:83:1A:C7:DC:5E:91:6B:94:B4:EC:69:AF:35:4C:74:8C:48:43
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ob2DGsfcXpFrlLTsaa81THSMSEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8a:c4:41:26:bb:fd:65:84:ce:0d:97:20:ff:84:74:f9:f3:
b5:81:aa:17:60:3f:27:23:88:d2:87:34:29:10:5b:fe:06:9a:
6a:93:85:ae:8a:ee:e8:3c:fa:b3:59:78:24:8b:bf:91:e9:66:
70:d6:de:18:91:ac:42:be:40:f2:a7:10:20:ea:08:9d:80:6c:
dc:75:64:ab:2f:fb:02:f1:20:e9:ef:9c:5c:62:a0:52:13:89:
e1:ed:7f:dd:1f:0b:5a:20:a7:1f:0c:11:97:de:23:6c:5d:db:
8e:6a:a2:55:d3:e8:6b:b9:72:26:60:9f:33:5e:fc:e2:f8:f0:
48:bc:33:d4:3f:df:0e:bf:f6:b7:7a:b7:d7:d2:33:f6:3a:54:
03:93:84:e0:2a:3f:38:84:2f:16:cd:09:0e:03:7f:75:29:82:
36:aa:87:26:f8:8f:51:fb:bf:06:db:54:15:e5:ec:6c:70:a4:
99:a7:c5:98:52:dc:df:ed:86:69:e8:93:05:ba:34:af:16:ff:
0f:23:86:d4:0f:0f:fe:88:6c:08:4a:48:27:48:e0:3d:94:78:
34:2d:68:12:64:66:46:43:f8:17:ab:bd:7f:75:9e:86:36:60:
45:5c:f8:8f:51:59:7a:df:30:8e:ec:84:4d:02:92:e6:ac:05:
bb:8d:b8:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFMnisgWJPkWyL59sXQE0g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh
ZjZkYzQwHhcNMjQwODEzMTY0MTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWJkODMxYWM3ZGM1ZTkxNmI5NGI0ZWM2OWFmMzU0Yzc0OGM0ODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnmfZCu3SJs1Z5J2MSe9UQp9VrRZ
6tMmKte8+CGIf9JH8ixtETQUoQORqquVGfRFXKmEc1g6i5Cf/C/AyvdoCA+9u8yv
CorThOZLOFDXnDKhb0SDCJ07vMr+2/iC6uHJPJK9b4B03Iu0XGssyuTklsUTjkQv
QE0grpexLeXPBuXwQ6Qr+Mv7m3jmGLPA84QHsJUUaX1/m/dm6HU2myMk5Iy5TWI5
hOEWtAyVV/6gohwzVO6pZHODbaxv3qDWn85qpMfRMX/r+cH0grHhLOAskY6tvI3U
vPazlWfbxnck3rKuX8GjNaxg9cBPV6yrS2kKRsUZi2J+9xg/k+jPenoc3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKG9gxrH3F6Ra5S07GmvNUx0jEhDMB8GA1UdIwQY
MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt
ZTUyNmE5NDA5ZmI4LzEvb2IyREdzZmNYcEZybExUc2FhODFUSFNNU0VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4
LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2bkMA0G
CSqGSIb3DQEBCwUAA4IBAQCoisRBJrv9ZYTODZcg/4R0+fO1gaoXYD8nI4jShzQp
EFv+Bppqk4Wuiu7oPPqzWXgki7+R6WZw1t4YkaxCvkDypxAg6gidgGzcdWSrL/sC
8SDp75xcYqBSE4nh7X/dHwtaIKcfDBGX3iNsXduOaqJV0+hruXImYJ8zXvzi+PBI
vDPUP98Ov/a3erfX0jP2OlQDk4TgKj84hC8WzQkOA391KYI2qocm+I9R+78G21QV
5exscKSZp8WYUtzf7YZp6JMFujSvFv8PI4bUDw/+iGwISkgnSOA9lHg0LWgSZGZG
Q/gXq71/dZ6GNmBFXPiPUVl63zCO7IRNApLmrAW7jbiT
-----END CERTIFICATE-----
Generated at Wed Apr 16 07:14:11 2025 by rpki-client