Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/uXyfYK4Yev6_EimOf0V_fzUG5K0.roa
File: uXyfYK4Yev6_EimOf0V_fzUG5K0.roa (raw, json)
Hash identifier: P004O8oSC+E85LOGNuBYB+RrCMOwIM1OZKzi5Tyan+4=
Subject key identifier: B9:7C:9F:60:AE:18:7A:FE:BF:12:29:8E:7F:45:7F:7F:35:06:E4:AD
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01869D2BA7B1DD43D328411983F0472B2F82
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/uXyfYK4Yev6_EimOf0V_fzUG5K0.roa
Signing time: Wed 01 Mar 2023 12:35:29 +0000
ROA not before: Wed 01 Mar 2023 12:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 103.213.248.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Mar 2023 17:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:2b:a7:b1:dd:43:d3:28:41:19:83:f0:47:2b:2f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Mar 1 12:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b97c9f60ae187afebf12298e7f457f7f3506e4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:9d:1b:57:fe:f5:5c:79:e2:56:15:65:6b:
fd:fa:e5:1c:26:23:77:a2:df:90:27:1e:55:c4:74:
46:f9:1d:5e:15:31:eb:b1:cf:3d:bc:3d:68:34:e0:
3e:73:b5:b4:89:bb:14:a4:08:cf:8d:2a:1c:49:00:
9d:cc:11:33:f9:f5:8a:90:af:e0:ce:1e:d7:d2:ef:
59:16:29:e0:ce:54:e3:77:fc:49:23:60:a7:88:a0:
4a:9a:2e:44:60:f0:90:90:f2:d7:4d:da:2f:7e:ca:
0f:10:0e:7a:ae:d7:5f:be:a9:23:57:bc:46:f9:ad:
39:8b:57:8b:a7:56:14:0d:2d:4f:3d:e6:a0:3b:2b:
16:c9:b2:e4:46:0a:1c:9f:70:8d:b1:13:93:b9:94:
16:1d:32:1e:43:7a:03:7f:ee:1f:00:66:73:fc:80:
99:f9:1b:c6:e7:16:8c:ad:65:a1:bc:b2:b5:07:b8:
4d:da:b5:7e:33:f5:0c:88:2b:87:c7:53:af:b3:cb:
86:32:fe:96:99:dd:41:75:54:d6:6b:b1:00:05:89:
ad:a0:d7:b5:fb:0f:a2:67:34:6a:5a:eb:4d:ee:80:
b3:be:09:13:9b:a3:6a:86:df:d2:68:15:e9:c9:78:
48:cc:24:8a:9c:b0:10:52:c7:8a:78:10:9c:4a:7e:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7C:9F:60:AE:18:7A:FE:BF:12:29:8E:7F:45:7F:7F:35:06:E4:AD
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/uXyfYK4Yev6_EimOf0V_fzUG5K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.248.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:81:9c:44:2f:40:11:0d:d3:ed:9d:bf:c8:db:c6:9f:7c:06:
4e:9b:5c:d7:5f:59:85:21:8d:fc:26:fb:20:9d:fe:f2:00:ea:
31:fa:f2:dd:da:0f:9c:04:1c:aa:68:d1:0d:55:ab:00:86:a4:
11:83:52:94:13:7c:59:40:5a:c9:83:a4:77:b1:a5:9c:32:2b:
57:52:fe:ca:cd:61:b6:49:69:1b:b8:c6:d2:59:a0:2d:22:be:
a3:44:a5:88:32:16:68:1e:8a:d7:a6:d9:d0:8f:93:76:be:03:
22:3e:9e:25:00:7c:48:f2:9a:ce:0d:60:b2:62:5a:aa:0a:9a:
a0:8c:f3:d4:ad:8e:c3:4c:92:64:3b:57:c4:2c:e8:df:d3:34:
fa:70:1e:e2:77:41:62:ee:2a:1f:ca:b1:fc:f6:a6:4f:6e:81:
5b:2d:e2:70:83:ca:9c:e5:3f:17:89:a3:a0:ae:0f:7a:b2:19:
86:69:ac:ae:3b:ae:c8:12:58:d3:94:1d:38:37:97:5e:92:0d:
b9:1b:76:bf:2c:ef:40:76:fc:9e:56:4b:73:9c:f8:97:fc:10:
8f:de:ab:58:83:a5:81:bc:6f:46:55:fb:97:0c:32:2d:d0:ab:
7d:91:27:be:36:ef:d1:64:7b:cf:d6:f8:39:d9:8d:11:8b:f5:
cf:39:97:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYadK6ex3UPTKEEZg/BHKy+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjMwMzAxMTIzNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTdjOWY2MGFlMTg3YWZlYmYxMjI5OGU3ZjQ1N2Y3ZjM1MDZlNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa2dG1f+9Vx54lYVZWv9+uUcJiN3
ot+QJx5VxHRG+R1eFTHrsc89vD1oNOA+c7W0ibsUpAjPjSocSQCdzBEz+fWKkK/g
zh7X0u9ZFingzlTjd/xJI2CniKBKmi5EYPCQkPLXTdovfsoPEA56rtdfvqkjV7xG
+a05i1eLp1YUDS1PPeagOysWybLkRgocn3CNsROTuZQWHTIeQ3oDf+4fAGZz/ICZ
+RvG5xaMrWWhvLK1B7hN2rV+M/UMiCuHx1Ovs8uGMv6Wmd1BdVTWa7EABYmtoNe1
+w+iZzRqWutN7oCzvgkTm6Nqht/SaBXpyXhIzCSKnLAQUseKeBCcSn7QhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLl8n2CuGHr+vxIpjn9Ff381BuStMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvdVh5ZllLNFlldjZfRWltT2YwVl9melVHNUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9X4MA0G
CSqGSIb3DQEBCwUAA4IBAQBbgZxEL0ARDdPtnb/I28affAZOm1zXX1mFIY38Jvsg
nf7yAOox+vLd2g+cBByqaNENVasAhqQRg1KUE3xZQFrJg6R3saWcMitXUv7KzWG2
SWkbuMbSWaAtIr6jRKWIMhZoHorXptnQj5N2vgMiPp4lAHxI8prODWCyYlqqCpqg
jPPUrY7DTJJkO1fELOjf0zT6cB7id0Fi7iofyrH89qZPboFbLeJwg8qc5T8XiaOg
rg96shmGaayuO67IEljTlB04N5dekg25G3a/LO9AdvyeVktznPiX/BCP3qtYg6WB
vG9GVfuXDDIt0Kt9kSe+Nu/RZHvP1vg52Y0Ri/XPOZdz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org