Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zWGyDuiRYvuxtpBtPcJ9f3Zp62g.roa
File: zWGyDuiRYvuxtpBtPcJ9f3Zp62g.roa (raw, json)
Hash identifier: LI4ixd1Eja+Ia3SPZzjrrskG03BFouqlu44b3u4bBzo=
Subject key identifier: CD:61:B2:0E:E8:91:62:FB:B1:B6:90:6D:3D:C2:7D:7F:76:69:EB:68
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018BF6E8EADA60E1FE89C615EC35964F8CF9
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zWGyDuiRYvuxtpBtPcJ9f3Zp62g.roa
Signing time: Wed 22 Nov 2023 12:02:21 +0000
ROA not before: Wed 22 Nov 2023 12:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6204
IP address blocks: 103.246.249.0/24 maxlen: 24
2a12:3200:f000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:e8:ea:da:60:e1:fe:89:c6:15:ec:35:96:4f:8c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Nov 22 12:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd61b20ee89162fbb1b6906d3dc27d7f7669eb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:b3:60:0e:39:e2:a8:12:97:26:69:1e:7f:
d3:ca:3c:c8:72:0b:67:57:51:a5:8b:ae:b4:63:61:
8d:42:f6:fc:72:21:be:16:15:e2:33:1c:8b:d1:8f:
64:80:b0:2f:8c:79:86:3d:d0:b5:fe:98:80:a8:71:
31:1f:2e:36:ba:ae:31:cb:3f:6a:d8:56:81:49:d7:
1e:73:f2:ba:0f:d4:73:61:fb:4d:10:ed:6c:54:e4:
fe:d0:dc:66:a6:ff:90:8b:73:e9:6e:21:bd:9a:c3:
44:2a:21:6d:c2:ed:dd:31:e3:66:3c:10:55:c3:5a:
27:4f:37:73:be:1f:14:e7:54:c9:18:c6:12:7f:07:
ec:0c:d3:ee:6c:53:72:90:59:0e:67:dc:23:3b:24:
d9:ea:46:70:9d:e3:53:60:83:e6:eb:e6:96:a4:29:
ed:18:3a:7c:a4:31:00:32:db:08:90:56:be:54:08:
61:c9:e1:79:d7:ea:3e:0b:8e:e7:27:b9:0f:dc:5a:
bc:67:b4:1f:7e:c6:b5:4e:db:45:22:07:d2:4d:86:
d9:f8:f0:e5:b8:f4:37:ee:ab:28:e2:0f:fa:1f:f0:
12:75:ad:a1:41:18:d3:c5:8d:4e:01:d6:33:8b:01:
1f:ca:7b:22:f1:88:d7:96:d5:b3:c7:94:6e:ed:29:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:61:B2:0E:E8:91:62:FB:B1:B6:90:6D:3D:C2:7D:7F:76:69:EB:68
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zWGyDuiRYvuxtpBtPcJ9f3Zp62g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.249.0/24
IPv6:
2a12:3200:f000::/36
Signature Algorithm: sha256WithRSAEncryption
13:35:8d:81:9f:8b:cc:96:2e:a1:de:05:7a:fa:f5:28:19:ca:
9c:66:2a:14:5d:d4:2e:2b:10:44:60:00:2c:d4:ed:b0:bf:d5:
2b:01:38:69:a3:68:28:7d:aa:30:cf:26:e4:ad:e2:0e:1d:e8:
4c:ec:70:5c:ac:d2:19:b8:42:43:a1:ba:e4:a7:d5:24:2f:cd:
c1:5d:2b:67:59:4b:f1:79:8f:16:82:b5:9b:b5:b7:b4:93:c4:
e9:14:1c:0e:e7:78:20:97:f9:84:e6:0c:61:97:f2:d0:f3:fe:
82:24:86:2e:a6:c3:a6:9a:e9:62:6d:1e:13:9f:07:3e:8b:73:
b0:88:46:0b:ec:b3:b0:1b:99:eb:96:20:d3:0c:db:aa:15:ca:
2a:b6:07:0e:08:4e:23:c3:5a:75:9b:65:83:de:43:b3:c6:c7:
b2:a1:69:de:7b:b9:4d:36:06:2b:bb:9f:c4:7e:e7:7a:e4:7d:
d7:33:09:b7:4e:26:19:09:87:dc:dd:23:47:d9:f7:ac:a5:b0:
1e:b4:3f:bc:10:ae:f4:27:7c:c1:ae:26:b0:f9:c0:42:e7:c4:
c6:c7:b7:98:cd:12:71:13:02:6d:fc:d7:46:9e:ef:fc:06:52:
e9:12:0c:5e:0e:b8:60:4c:19:9c:b1:cb:b3:ab:02:e8:1e:2f:
39:5f:4f:77
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYv26OraYOH+icYV7DWWT4z5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjMxMTIyMTIwMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDYxYjIwZWU4OTE2MmZiYjFiNjkwNmQzZGMyN2Q3Zjc2NjllYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ezYA454qgSlyZpHn/TyjzIcgtn
V1Gli660Y2GNQvb8ciG+FhXiMxyL0Y9kgLAvjHmGPdC1/piAqHExHy42uq4xyz9q
2FaBSdcec/K6D9RzYftNEO1sVOT+0Nxmpv+Qi3PpbiG9msNEKiFtwu3dMeNmPBBV
w1onTzdzvh8U51TJGMYSfwfsDNPubFNykFkOZ9wjOyTZ6kZwneNTYIPm6+aWpCnt
GDp8pDEAMtsIkFa+VAhhyeF51+o+C47nJ7kP3Fq8Z7Qffsa1TttFIgfSTYbZ+PDl
uPQ37qso4g/6H/ASda2hQRjTxY1OAdYziwEfynsi8YjXltWzx5Ru7Skr6QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFM1hsg7okWL7sbaQbT3CfX92aetoMB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEveldHeUR1aVJZdnV4dHBCdFBjSjlmM1pwNjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAZ/b5MA4E
AgACMAgDBgQqEjIA8DANBgkqhkiG9w0BAQsFAAOCAQEAEzWNgZ+LzJYuod4Fevr1
KBnKnGYqFF3ULisQRGAALNTtsL/VKwE4aaNoKH2qMM8m5K3iDh3oTOxwXKzSGbhC
Q6G65KfVJC/NwV0rZ1lL8XmPFoK1m7W3tJPE6RQcDud4IJf5hOYMYZfy0PP+giSG
LqbDpprpYm0eE58HPotzsIhGC+yzsBuZ65Yg0wzbqhXKKrYHDghOI8NadZtlg95D
s8bHsqFp3nu5TTYGK7ufxH7neuR91zMJt04mGQmH3N0jR9n3rKWwHrQ/vBCu9Cd8
wa4msPnAQufExse3mM0ScRMCbfzXRp7v/AZS6RIMXg64YEwZnLHLs6sC6B4vOV9P
dw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:44 2024 by rpki-client on console-fra.rpki-client.org