Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/TKG3cVwl6uf7ukNo5sbNCkXEl20.roa
File: TKG3cVwl6uf7ukNo5sbNCkXEl20.roa (raw, json)
Hash identifier: gm+EM8392gWFz4CZXa8L/OoC1xXTITDuacJ0hp1Do/M=
Subject key identifier: 4C:A1:B7:71:5C:25:EA:E7:FB:BA:43:68:E6:C6:CD:0A:45:C4:97:6D
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 018F5705EAFF6BCBD651DC591CA159D52B7A
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/TKG3cVwl6uf7ukNo5sbNCkXEl20.roa
Signing time: Wed 08 May 2024 07:05:56 +0000
ROA not before: Wed 08 May 2024 07:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.69.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 10:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:05:ea:ff:6b:cb:d6:51:dc:59:1c:a1:59:d5:2b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: May 8 07:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ca1b7715c25eae7fbba4368e6c6cd0a45c4976d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:87:b4:66:78:fc:9d:db:ef:98:ea:23:87:
c7:80:4e:d2:58:9e:b3:d0:0c:3b:8c:87:3f:e6:5e:
87:b0:49:57:76:21:d4:a9:20:b4:11:78:31:21:be:
b6:dc:0c:80:40:c8:f7:36:0d:f0:16:35:fa:fe:24:
ba:e9:66:12:18:59:e4:8d:a4:d2:7b:47:2e:f1:22:
ac:84:f6:de:be:c6:24:ab:6e:9c:34:a8:a9:ca:ef:
e0:b4:da:4b:1c:e9:aa:d6:0c:c6:9a:04:76:0a:a1:
0f:48:01:2e:b0:4e:65:1a:b9:32:9e:90:51:fe:97:
30:b6:df:2c:1f:81:36:b1:08:28:a6:df:b3:23:ab:
56:85:7b:9e:ec:a2:f7:f7:e8:75:11:36:98:1c:f6:
9e:37:57:47:67:93:12:67:d1:c4:95:64:58:f6:56:
3a:71:57:e4:7c:3a:76:72:d8:2e:76:e4:60:79:b6:
4d:08:9c:88:5f:95:7f:90:39:8e:e9:e3:9d:e2:78:
63:13:e8:2e:7f:c3:56:1f:e9:5f:28:ab:82:81:41:
d8:7d:f6:e3:28:ec:24:18:17:e1:46:13:54:9d:ac:
7a:45:2b:0f:a7:a9:fb:1c:48:b3:c8:fb:7b:9b:2a:
dd:00:89:97:3f:60:f2:1e:4f:2a:ce:b1:7d:66:12:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A1:B7:71:5C:25:EA:E7:FB:BA:43:68:E6:C6:CD:0A:45:C4:97:6D
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/TKG3cVwl6uf7ukNo5sbNCkXEl20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.224.0/24
Signature Algorithm: sha256WithRSAEncryption
75:39:4f:e1:ff:9e:de:ea:5e:cb:05:e3:9c:dd:7e:d9:a3:b2:
33:c1:71:87:f3:75:b5:d1:e6:3b:50:ed:0d:be:b6:28:51:ec:
3a:b2:5f:22:ca:7b:89:a5:e5:1a:fc:2f:17:d3:1f:84:04:17:
9f:2e:ba:f8:98:ec:8d:b4:ba:f6:83:8b:06:17:de:81:6f:7f:
40:4e:45:6a:59:37:bf:f1:32:c0:a3:26:2c:20:b1:f2:67:95:
91:75:83:32:9e:df:27:0e:c3:44:11:67:7c:38:2a:cc:64:e6:
44:6a:3a:d6:d1:65:a0:f3:f9:23:3c:4a:1b:be:b5:b6:ea:fe:
de:d7:e8:bc:33:79:23:71:2e:d6:41:98:ab:18:1b:c6:b2:ae:
fc:b8:88:a7:62:61:cd:61:9a:de:8a:ff:8f:ce:a5:d4:bb:9c:
0d:90:10:6d:05:2c:b1:9d:6f:2a:15:1a:b9:a1:76:a5:68:2b:
26:37:a8:f7:79:ba:55:38:2a:2a:6d:92:06:3c:a7:89:36:55:
41:f9:a7:e2:68:82:96:42:21:ed:55:ca:49:20:f2:8f:61:a2:
da:3a:67:f0:0b:e3:f5:95:93:c9:ad:cf:a7:26:11:31:c8:ca:
99:1b:49:76:96:25:03:67:95:2b:86:31:0b:34:d7:49:c9:b9:
c4:d6:3a:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9XBer/a8vWUdxZHKFZ1St6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4
MzFhOWQwHhcNMjQwNTA4MDcwNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2ExYjc3MTVjMjVlYWU3ZmJiYTQzNjhlNmM2Y2QwYTQ1YzQ5NzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbqHtGZ4/J3b75jqI4fHgE7SWJ6z
0Aw7jIc/5l6HsElXdiHUqSC0EXgxIb623AyAQMj3Ng3wFjX6/iS66WYSGFnkjaTS
e0cu8SKshPbevsYkq26cNKipyu/gtNpLHOmq1gzGmgR2CqEPSAEusE5lGrkynpBR
/pcwtt8sH4E2sQgopt+zI6tWhXue7KL39+h1ETaYHPaeN1dHZ5MSZ9HElWRY9lY6
cVfkfDp2ctguduRgebZNCJyIX5V/kDmO6eOd4nhjE+guf8NWH+lfKKuCgUHYffbj
KOwkGBfhRhNUnax6RSsPp6n7HEizyPt7myrdAImXP2DyHk8qzrF9ZhIpfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEyht3FcJern+7pDaObGzQpFxJdtMB8GA1UdIwQY
MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt
NzZhMWQ0ZDgzMTk3LzEvVEtHM2NWd2w2dWY3dWtObzVzYk5Da1hFbDIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3
LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0XgMA0G
CSqGSIb3DQEBCwUAA4IBAQB1OU/h/57e6l7LBeOc3X7Zo7IzwXGH83W10eY7UO0N
vrYoUew6sl8iynuJpeUa/C8X0x+EBBefLrr4mOyNtLr2g4sGF96Bb39ATkVqWTe/
8TLAoyYsILHyZ5WRdYMynt8nDsNEEWd8OCrMZOZEajrW0WWg8/kjPEobvrW26v7e
1+i8M3kjcS7WQZirGBvGsq78uIinYmHNYZreiv+PzqXUu5wNkBBtBSyxnW8qFRq5
oXalaCsmN6j3ebpVOCoqbZIGPKeJNlVB+afiaIKWQiHtVcpJIPKPYaLaOmfwC+P1
lZPJrc+nJhExyMqZG0l2liUDZ5UrhjELNNdJybnE1jo+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:19 2024 by rpki-client on console-ams.rpki-client.org