Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5DdZdAjpPF7KtgfUAjKk3fmoPUg.roa
File: 5DdZdAjpPF7KtgfUAjKk3fmoPUg.roa (raw, json)
Hash identifier: HE5gUnwdIshCgIPDnPyILW1liMStGa10mLNbD/+337g=
Subject key identifier: E4:37:59:74:08:E9:3C:5E:CA:B6:07:D4:02:32:A4:DD:F9:A8:3D:48
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0185A10B34861846DC8C1AB5CDED6347F59A
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5DdZdAjpPF7KtgfUAjKk3fmoPUg.roa
Signing time: Wed 11 Jan 2023 13:35:44 +0000
ROA not before: Wed 11 Jan 2023 13:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.35.56.0/22 maxlen: 24
198.105.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:0b:34:86:18:46:dc:8c:1a:b5:cd:ed:63:47:f5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 11 13:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e437597408e93c5ecab607d40232a4ddf9a83d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:68:4f:d1:c8:79:7d:96:43:38:40:4e:54:
1b:9c:f6:35:57:11:3d:02:89:b5:f2:71:3a:9d:f6:
07:3a:67:7b:04:a0:69:32:09:58:71:cf:62:1d:da:
ca:d8:bd:ca:8d:4f:9a:23:54:33:ec:1c:b2:6d:16:
37:38:66:a6:a7:9a:94:bd:ed:c8:fa:a5:f1:67:d2:
93:cc:7d:f9:ad:18:7d:e8:60:df:34:8f:89:c6:00:
de:49:e6:bc:cb:bd:16:64:53:7d:24:9f:00:b6:6d:
cf:05:0d:e1:69:f2:6d:75:69:81:63:df:e6:5a:f8:
49:7e:ef:b0:85:91:99:1c:99:27:95:c5:32:33:d7:
f7:84:fc:c8:0a:61:a7:15:4d:fa:3a:d1:71:d0:a9:
83:20:98:6a:60:1e:95:ba:88:ff:1e:70:05:5f:e4:
cb:41:1d:ba:e9:ed:1f:51:1f:2a:e3:73:c7:c4:e3:
36:5d:3b:a8:d2:91:37:f4:f7:23:e8:42:07:21:c7:
4d:ae:e3:42:a0:f9:d7:a2:c2:86:e5:f8:f0:9d:06:
14:86:f7:08:c0:8f:d6:d1:c7:40:29:27:3d:6c:a7:
3a:65:f1:d2:32:bf:9f:bf:ec:8b:6c:32:f3:c1:1f:
a7:84:c7:cf:e0:82:9f:b3:0f:99:40:d0:34:fd:80:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:37:59:74:08:E9:3C:5E:CA:B6:07:D4:02:32:A4:DD:F9:A8:3D:48
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5DdZdAjpPF7KtgfUAjKk3fmoPUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.56.0/22
198.105.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f0:4b:79:a9:63:7a:a2:6d:e1:d1:18:b4:db:0f:7c:eb:f5:
d5:d9:3b:90:82:46:81:12:0b:7b:bc:42:27:79:d8:bf:9c:64:
b1:61:52:52:cd:be:9b:79:f4:74:88:27:61:d3:6b:7e:16:0e:
6d:d4:44:a5:7d:88:3a:1f:47:49:80:31:6a:05:34:32:00:66:
d4:13:ff:08:a4:84:d5:47:84:4a:b1:bb:03:76:c3:ac:15:c4:
c5:ba:6b:00:11:22:8b:d7:ef:ba:6d:53:34:86:56:a1:ed:34:
7c:a5:10:52:0e:ee:21:b0:44:e7:07:0a:2f:11:0a:44:37:fa:
61:9e:50:96:c7:5c:21:c1:c4:96:12:0b:4b:d8:47:ba:93:2a:
b0:92:9c:ed:08:a2:13:ef:17:c7:ef:26:de:ab:2b:80:7b:d4:
29:71:c6:e5:d8:91:04:95:a2:25:60:2a:10:1c:8f:1e:bb:02:
06:da:6c:4c:fc:6a:a9:39:d7:b6:d8:1e:ab:91:2e:d5:be:68:
b0:77:7b:ab:bd:67:3e:4c:ef:e0:69:3d:6d:35:74:4a:e4:62:
af:81:48:4e:b0:83:9c:af:20:b5:2b:7b:28:b9:65:11:74:11:
de:60:83:99:9b:9b:6c:4c:97:85:8f:d1:f2:be:94:3f:43:52:
c6:da:04:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWhCzSGGEbcjBq1ze1jR/WaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjMwMTExMTMzNTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDM3NTk3NDA4ZTkzYzVlY2FiNjA3ZDQwMjMyYTRkZGY5YTgzZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rZoT9HIeX2WQzhATlQbnPY1VxE9
Aom18nE6nfYHOmd7BKBpMglYcc9iHdrK2L3KjU+aI1Qz7ByybRY3OGamp5qUve3I
+qXxZ9KTzH35rRh96GDfNI+JxgDeSea8y70WZFN9JJ8Atm3PBQ3hafJtdWmBY9/m
WvhJfu+whZGZHJknlcUyM9f3hPzICmGnFU36OtFx0KmDIJhqYB6Vuoj/HnAFX+TL
QR266e0fUR8q43PHxOM2XTuo0pE39Pcj6EIHIcdNruNCoPnXosKG5fjwnQYUhvcI
wI/W0cdAKSc9bKc6ZfHSMr+fv+yLbDLzwR+nhMfP4IKfsw+ZQNA0/YDKoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOQ3WXQI6TxeyrYH1AIypN35qD1IMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvNURkWmRBanBQRjdLdGdmVUFqS2szZm1vUFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZyM4AwQC
xmlkMA0GCSqGSIb3DQEBCwUAA4IBAQA/8Et5qWN6om3h0Ri02w986/XV2TuQgkaB
Egt7vEInedi/nGSxYVJSzb6befR0iCdh02t+Fg5t1ESlfYg6H0dJgDFqBTQyAGbU
E/8IpITVR4RKsbsDdsOsFcTFumsAESKL1++6bVM0hlah7TR8pRBSDu4hsETnBwov
EQpEN/phnlCWx1whwcSWEgtL2Ee6kyqwkpztCKIT7xfH7ybeqyuAe9Qpccbl2JEE
laIlYCoQHI8euwIG2mxM/GqpOde22B6rkS7Vvmiwd3urvWc+TO/gaT1tNXRK5GKv
gUhOsIOcryC1K3souWURdBHeYIOZm5tsTJeFj9HyvpQ/Q1LG2gT0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org