Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/ZIGPhPjWOe_VvhKFp2IM1vU5Djs.roa
File: ZIGPhPjWOe_VvhKFp2IM1vU5Djs.roa (raw, json)
Hash identifier: tRU84oj/J2DjJ0fci8VUj9mQxJ4EaWZeuNdnZyAjbhM=
Subject key identifier: 64:81:8F:84:F8:D6:39:EF:D5:BE:12:85:A7:62:0C:D6:F5:39:0E:3B
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018CC8DD93DF8AA52F4840E3EF1655127F49
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/ZIGPhPjWOe_VvhKFp2IM1vU5Djs.roa
Signing time: Tue 02 Jan 2024 06:30:13 +0000
ROA not before: Tue 02 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 103.130.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 05:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:93:df:8a:a5:2f:48:40:e3:ef:16:55:12:7f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64818f84f8d639efd5be1285a7620cd6f5390e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:96:51:67:7a:e1:d2:67:a4:38:38:34:ef:
02:c1:0d:e0:cf:0b:eb:87:df:8d:7f:f5:ad:1f:1a:
e0:5d:41:01:9f:c1:99:f8:23:94:26:6c:3b:56:5a:
d4:8b:0e:c8:59:7e:7e:db:a8:ca:f8:65:90:02:30:
d3:4f:51:35:bb:d9:7e:74:b9:e6:9c:cd:da:ab:47:
a5:e1:7d:47:7c:38:1b:10:48:ad:1a:f1:d8:fa:c6:
30:0b:a6:07:93:d0:d5:bc:f1:df:b7:65:51:e8:86:
69:8e:ad:2d:22:c4:f4:86:05:fc:5b:65:6f:67:f4:
2e:ac:cb:55:87:1a:ca:ea:59:5f:1d:c9:22:da:01:
e8:43:00:a7:d6:47:ab:91:02:6d:44:e3:81:ce:e5:
ab:34:90:c0:67:fc:f6:98:78:df:c7:5f:08:6a:26:
83:5b:d0:d3:f6:21:f3:6f:4a:a8:9f:82:42:6e:ab:
03:e6:37:98:6c:ba:f5:ee:94:0d:ed:71:a9:48:7f:
c1:0f:5c:49:7f:a3:01:d1:bd:08:27:7a:c3:47:53:
49:46:5f:b8:ee:90:94:fd:6f:49:24:b2:7f:ed:1b:
d8:39:7d:cc:29:32:6f:38:28:dd:0e:97:77:4a:10:
2f:da:a8:86:72:da:03:48:32:7a:04:dd:60:c3:2c:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:8F:84:F8:D6:39:EF:D5:BE:12:85:A7:62:0C:D6:F5:39:0E:3B
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/ZIGPhPjWOe_VvhKFp2IM1vU5Djs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.147.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9d:60:57:6f:a8:51:30:54:17:b9:1e:0d:a1:50:0d:8a:32:
96:5f:10:27:5f:a6:1d:a3:9a:16:73:02:46:47:92:aa:81:cd:
df:c5:ec:bb:0e:68:ec:7d:7a:ac:c2:d5:2a:12:3b:11:f7:68:
30:2d:25:02:64:da:0b:d4:88:90:18:b0:ac:84:f5:40:2e:80:
6e:17:fc:bd:62:1e:f9:35:31:18:3d:5b:51:9b:27:39:9b:6e:
9b:85:c5:9b:c7:42:55:07:4a:20:da:da:f3:91:c9:e3:d3:61:
0a:c3:ce:bd:71:f9:6a:de:05:a2:47:c4:a8:d0:6e:a9:67:93:
59:c8:1c:07:d9:03:4c:17:29:f1:1d:59:d3:d6:f8:06:8c:9d:
98:23:f5:b0:3d:7c:af:36:14:9f:e6:4e:16:7c:51:cd:a5:3b:
d1:bd:db:c4:fe:68:05:52:47:1b:d4:da:a1:26:3c:f4:81:17:
c6:ac:46:e1:a3:eb:37:48:78:d1:43:2b:35:63:0d:56:a1:01:
26:09:e3:82:ee:d7:9e:1d:e8:f8:39:5d:bc:de:58:47:b7:1d:
bd:19:e5:96:89:fd:8c:f5:f7:71:d3:6d:73:2a:ae:3d:a3:56:
47:8b:bc:14:cf:ef:cb:8c:87:ef:99:cf:e0:0b:dd:a1:a5:35:
06:11:50:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3ZPfiqUvSEDj7xZVEn9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz
YTBjZTIwHhcNMjQwMTAyMDYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDgxOGY4NGY4ZDYzOWVmZDViZTEyODVhNzYyMGNkNmY1MzkwZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4feWUWd64dJnpDg4NO8CwQ3gzwvr
h9+Nf/WtHxrgXUEBn8GZ+COUJmw7VlrUiw7IWX5+26jK+GWQAjDTT1E1u9l+dLnm
nM3aq0el4X1HfDgbEEitGvHY+sYwC6YHk9DVvPHft2VR6IZpjq0tIsT0hgX8W2Vv
Z/QurMtVhxrK6llfHcki2gHoQwCn1kerkQJtROOBzuWrNJDAZ/z2mHjfx18IaiaD
W9DT9iHzb0qon4JCbqsD5jeYbLr17pQN7XGpSH/BD1xJf6MB0b0IJ3rDR1NJRl+4
7pCU/W9JJLJ/7RvYOX3MKTJvOCjdDpd3ShAv2qiGctoDSDJ6BN1gwyxgqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGSBj4T41jnv1b4ShadiDNb1OQ47MB8GA1UdIwQY
MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt
NTZjYzM5ZGI2ZWQ2LzEvWklHUGhQaldPZV9WdmhLRnAySU0xdlU1RGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2
LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4KTMA0G
CSqGSIb3DQEBCwUAA4IBAQCUnWBXb6hRMFQXuR4NoVANijKWXxAnX6Ydo5oWcwJG
R5Kqgc3fxey7DmjsfXqswtUqEjsR92gwLSUCZNoL1IiQGLCshPVALoBuF/y9Yh75
NTEYPVtRmyc5m26bhcWbx0JVB0og2trzkcnj02EKw869cflq3gWiR8So0G6pZ5NZ
yBwH2QNMFynxHVnT1vgGjJ2YI/WwPXyvNhSf5k4WfFHNpTvRvdvE/mgFUkcb1Nqh
Jjz0gRfGrEbho+s3SHjRQys1Yw1WoQEmCeOC7teeHej4OV283lhHtx29GeWWif2M
9fdx021zKq49o1ZHi7wUz+/LjIfvmc/gC92hpTUGEVD2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org