Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/H5ZxtvHag3bgHYY2UDkfsFTog4g.roa
File: H5ZxtvHag3bgHYY2UDkfsFTog4g.roa (raw, json)
Hash identifier: 6VautbhJHCxu10/jYzcm8jVfumbUyM6G/+Q4xNCnxLo=
Subject key identifier: 1F:96:71:B6:F1:DA:83:76:E0:1D:86:36:50:39:1F:B0:54:E8:83:88
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01856C6EFD81C322596E09DC9B1B68C57D6E
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/H5ZxtvHag3bgHYY2UDkfsFTog4g.roa
Signing time: Sun 01 Jan 2023 08:24:51 +0000
ROA not before: Sun 01 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6424
IP address blocks: 103.229.81.0/24 maxlen: 24
93.114.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 05:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:fd:81:c3:22:59:6e:09:dc:9b:1b:68:c5:7d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 1 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f9671b6f1da8376e01d863650391fb054e88388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:de:2c:17:c9:79:fc:4d:ec:a7:97:0b:82:
e1:76:8b:78:e3:e8:51:d2:5b:ca:86:bd:66:74:04:
72:48:29:11:f6:ce:09:54:2a:71:66:f3:9e:4a:f2:
bb:28:d9:f3:81:e4:75:a8:65:f7:f7:8f:b2:a4:df:
af:e2:50:47:f1:cb:9f:4b:8b:a9:6d:4e:e5:ac:92:
1c:63:0d:c5:13:7b:fe:31:e5:03:d7:3f:e1:2c:9a:
4d:e9:99:8d:1f:d2:01:f6:a3:db:31:25:4c:99:d2:
26:77:cc:a0:cb:50:19:eb:6f:e8:c0:ce:d0:dc:b6:
a4:88:e7:be:33:73:cf:2d:3a:ca:e4:6d:8e:c3:cd:
4e:73:8f:5c:0d:2a:b9:70:c4:ab:3d:bb:3f:a7:32:
1b:e0:ba:a2:8c:6f:d7:18:66:6b:5b:57:89:c2:35:
a7:65:56:56:00:8b:43:64:64:46:da:42:ad:f8:87:
05:53:f9:63:57:a2:92:2e:c4:8e:fd:ad:b9:89:23:
d5:77:30:78:a3:40:06:b1:e8:72:aa:c5:8a:19:62:
b3:ee:e0:2f:e9:fe:c3:51:3c:ef:6b:b1:d5:df:de:
ca:05:24:26:f7:21:85:99:20:59:98:fc:9b:7d:f8:
cb:53:aa:87:1f:c8:db:82:1f:e4:6b:a9:eb:07:c1:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:71:B6:F1:DA:83:76:E0:1D:86:36:50:39:1F:B0:54:E8:83:88
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/H5ZxtvHag3bgHYY2UDkfsFTog4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.181.0/24
103.229.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:58:70:1a:80:ef:f0:3d:4e:7c:a3:86:a9:06:84:e8:41:e5:
3d:f0:04:33:48:6e:1f:81:e7:5f:a3:09:40:41:de:da:f7:a3:
67:c9:f7:31:b5:09:37:b0:4e:a0:41:8a:a8:ac:ae:cd:94:63:
74:da:ac:db:2e:26:da:00:3a:cd:94:e2:fe:c4:f6:fc:f1:35:
47:9a:7e:2b:22:eb:39:eb:95:09:79:aa:1b:2a:22:e0:94:3d:
49:44:86:4d:e7:9b:35:92:81:52:fc:b1:cd:e3:b0:18:1b:99:
ec:ff:1b:59:70:c4:cc:7c:69:90:db:59:4c:db:01:b2:fb:d8:
bd:d7:e8:01:42:4c:53:12:fc:2c:b0:32:f6:4a:6b:40:c4:40:
a1:20:dc:61:f9:fe:c2:0b:a9:44:12:30:8b:4e:97:be:d2:c9:
a5:3f:b6:c8:b1:ad:9a:96:24:c4:61:68:b6:aa:0f:f3:3a:65:
56:44:d0:1d:14:fa:e7:28:6c:38:73:06:4d:9e:20:c6:72:84:
f7:5c:05:58:34:e3:c5:96:de:d3:62:93:24:37:11:fa:98:77:
32:aa:f5:30:d7:c7:e7:59:b3:ac:90:11:9f:75:71:ef:b5:a9:
46:cf:ff:be:58:dd:00:f9:be:05:c9:9e:51:bf:6c:a3:ad:eb:
49:b0:77:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsbv2BwyJZbgncmxtoxX1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjMwMTAxMDgyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjk2NzFiNmYxZGE4Mzc2ZTAxZDg2MzY1MDM5MWZiMDU0ZTg4Mzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2beLBfJefxN7KeXC4Lhdot44+hR
0lvKhr1mdARySCkR9s4JVCpxZvOeSvK7KNnzgeR1qGX394+ypN+v4lBH8cufS4up
bU7lrJIcYw3FE3v+MeUD1z/hLJpN6ZmNH9IB9qPbMSVMmdImd8ygy1AZ62/owM7Q
3LakiOe+M3PPLTrK5G2Ow81Oc49cDSq5cMSrPbs/pzIb4LqijG/XGGZrW1eJwjWn
ZVZWAItDZGRG2kKt+IcFU/ljV6KSLsSO/a25iSPVdzB4o0AGsehyqsWKGWKz7uAv
6f7DUTzva7HV397KBSQm9yGFmSBZmPybffjLU6qHH8jbgh/ka6nrB8HaxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB+Wcbbx2oN24B2GNlA5H7BU6IOIMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvSDVaeHR2SGFnM2JnSFlZMlVEa2ZzRlRvZzRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXK1AwQA
Z+VRMA0GCSqGSIb3DQEBCwUAA4IBAQA6WHAagO/wPU58o4apBoToQeU98AQzSG4f
gedfowlAQd7a96NnyfcxtQk3sE6gQYqorK7NlGN02qzbLibaADrNlOL+xPb88TVH
mn4rIus565UJeaobKiLglD1JRIZN55s1koFS/LHN47AYG5ns/xtZcMTMfGmQ21lM
2wGy+9i91+gBQkxTEvwssDL2SmtAxEChINxh+f7CC6lEEjCLTpe+0smlP7bIsa2a
liTEYWi2qg/zOmVWRNAdFPrnKGw4cwZNniDGcoT3XAVYNOPFlt7TYpMkNxH6mHcy
qvUw18fnWbOskBGfdXHvtalGz/++WN0A+b4FyZ5Rv2yjretJsHct
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org