Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/m0PtdwRGQyn9CxI4flDpLMjuq_g.roa
File: m0PtdwRGQyn9CxI4flDpLMjuq_g.roa (raw, json)
Hash identifier: U9qBO5X6ZJBBliekfUcqOirDpEOfH3hbszMv8Hsk1ug=
Subject key identifier: 9B:43:ED:77:04:46:43:29:FD:0B:12:38:7E:50:E9:2C:C8:EE:AB:F8
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01866F548C628F7C8C481A172947EC58FDA1
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/m0PtdwRGQyn9CxI4flDpLMjuq_g.roa
Signing time: Mon 20 Feb 2023 14:57:37 +0000
ROA not before: Mon 20 Feb 2023 14:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147001
IP address blocks: 103.76.86.0/23 maxlen: 24
103.76.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:54:8c:62:8f:7c:8c:48:1a:17:29:47:ec:58:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Feb 20 14:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b43ed7704464329fd0b12387e50e92cc8eeabf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:73:10:a7:da:76:01:b1:cb:d8:c8:77:68:
15:2b:23:58:fc:0a:82:de:51:31:0e:86:20:34:da:
27:53:7f:32:78:e7:d2:5e:36:07:1a:c8:88:7a:3f:
b5:57:cb:cc:fe:85:6d:7e:f6:e9:29:31:8b:f8:b3:
33:a9:b3:a1:8b:fe:d4:4e:a1:b2:91:8b:91:4e:60:
a5:e9:84:12:92:f9:80:9c:d5:f8:1c:1c:08:f6:7e:
1d:04:3a:93:45:dc:a3:f8:57:b2:3e:84:0d:46:28:
fb:8a:46:dd:fb:b8:92:30:5f:3a:17:32:cb:3a:8a:
9e:3c:28:8b:ce:73:94:7f:a3:0d:48:1c:db:4c:d4:
99:0c:05:79:a2:b7:43:28:49:94:f9:9d:8f:b1:26:
8f:36:90:5c:a5:46:45:c4:66:64:77:dc:08:4c:00:
ee:09:fc:8e:2c:ee:2a:31:54:20:69:80:15:2e:8e:
58:17:42:51:bc:b0:12:7c:9f:9b:90:d9:94:06:5c:
a6:80:1e:49:15:90:a9:68:fb:23:fe:25:22:63:6b:
23:8e:b2:25:da:4e:60:2f:9a:aa:7d:af:08:86:c4:
da:6f:aa:97:5e:b3:bd:3e:e4:25:fd:8e:29:23:35:
08:67:7f:cf:08:f2:d7:22:57:8d:96:90:ab:83:85:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:ED:77:04:46:43:29:FD:0B:12:38:7E:50:E9:2C:C8:EE:AB:F8
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/m0PtdwRGQyn9CxI4flDpLMjuq_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.86.0/23
Signature Algorithm: sha256WithRSAEncryption
51:a9:eb:1d:b5:cf:a1:8b:2b:40:f2:cb:9a:ad:4e:33:d3:18:
8f:99:05:c4:ab:fb:a0:c3:ca:52:a9:8d:39:7e:33:20:a7:58:
9f:31:27:af:3e:05:aa:1f:a6:f4:a4:ca:f0:22:f4:7f:a2:eb:
1f:e7:51:aa:93:70:2f:60:b7:94:9c:d4:ef:78:63:ac:8e:9d:
2e:0a:ae:13:f1:91:17:c3:63:28:30:90:84:3d:10:e0:8b:05:
ac:55:8e:08:01:12:3d:a4:56:b7:12:dd:b5:1e:b7:32:5b:df:
e2:eb:0f:74:21:00:16:ba:ee:3c:1b:3b:29:c0:e1:a5:46:f9:
64:e7:1b:cd:35:1e:16:71:f0:5b:0a:88:bd:e2:b0:c1:4b:19:
06:20:31:0c:a4:42:94:cc:cf:ad:cd:9e:8c:9f:44:ff:70:14:
48:9d:63:c0:54:aa:96:92:ad:cb:ba:cf:31:48:1e:8d:cd:02:
11:fd:cc:76:b6:dd:34:67:a7:a2:96:a9:e7:be:20:55:c4:ac:
68:c4:f6:f3:b6:07:36:3d:b9:70:8f:5e:64:48:91:c3:10:3f:
d7:1e:1f:77:c0:99:26:a3:a4:eb:d8:7b:8c:ec:8b:ca:ce:b7:
38:46:91:5b:a9:fa:68:db:01:18:f1:46:c7:a6:39:2b:4f:9b:
d8:58:83:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZvVIxij3yMSBoXKUfsWP2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjMwMjIwMTQ1NzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjQzZWQ3NzA0NDY0MzI5ZmQwYjEyMzg3ZTUwZTkyY2M4ZWVhYmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDBzEKfadgGxy9jId2gVKyNY/AqC
3lExDoYgNNonU38yeOfSXjYHGsiIej+1V8vM/oVtfvbpKTGL+LMzqbOhi/7UTqGy
kYuRTmCl6YQSkvmAnNX4HBwI9n4dBDqTRdyj+FeyPoQNRij7ikbd+7iSMF86FzLL
OoqePCiLznOUf6MNSBzbTNSZDAV5ordDKEmU+Z2PsSaPNpBcpUZFxGZkd9wITADu
CfyOLO4qMVQgaYAVLo5YF0JRvLASfJ+bkNmUBlymgB5JFZCpaPsj/iUiY2sjjrIl
2k5gL5qqfa8IhsTab6qXXrO9PuQl/Y4pIzUIZ3/PCPLXIleNlpCrg4WhdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtD7XcERkMp/QsSOH5Q6SzI7qv4MB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvbTBQdGR3UkdReW45Q3hJNGZsRHBMTWp1cV9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0xWMA0G
CSqGSIb3DQEBCwUAA4IBAQBRqesdtc+hiytA8suarU4z0xiPmQXEq/ugw8pSqY05
fjMgp1ifMSevPgWqH6b0pMrwIvR/ousf51Gqk3AvYLeUnNTveGOsjp0uCq4T8ZEX
w2MoMJCEPRDgiwWsVY4IARI9pFa3Et21HrcyW9/i6w90IQAWuu48GzspwOGlRvlk
5xvNNR4WcfBbCoi94rDBSxkGIDEMpEKUzM+tzZ6Mn0T/cBRInWPAVKqWkq3Lus8x
SB6NzQIR/cx2tt00Z6eilqnnviBVxKxoxPbztgc2Pblwj15kSJHDED/XHh93wJkm
o6Tr2HuM7IvKzrc4RpFbqfpo2wEY8UbHpjkrT5vYWIOj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:41 2023 by rpki-client on console-ams.rpki-client.org