Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/SZGfzd3006gKa7_NmaCY7r1VjF4.roa
File: SZGfzd3006gKa7_NmaCY7r1VjF4.roa (raw, json)
Hash identifier: iTMcyRdZGbIpOA0CA7L2xBLGM0A0BByBthdjcDem0Ds=
Subject key identifier: 49:91:9F:CD:DD:F4:D3:A8:0A:6B:BF:CD:99:A0:98:EE:BD:55:8C:5E
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 01919793F7FC49A699762D307E3E7620EFA5
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/SZGfzd3006gKa7_NmaCY7r1VjF4.roa
Signing time: Wed 28 Aug 2024 06:02:22 +0000
ROA not before: Wed 28 Aug 2024 06:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202588
IP address blocks: 103.132.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 11:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:97:93:f7:fc:49:a6:99:76:2d:30:7e:3e:76:20:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Aug 28 06:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49919fcdddf4d3a80a6bbfcd99a098eebd558c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:d1:fd:db:e8:8d:13:a4:88:96:42:4a:02:
9c:50:fe:15:b0:7a:1d:0f:32:6b:c0:3a:0d:91:86:
14:75:09:80:3d:a4:b3:bf:d8:6e:da:5b:85:3e:d0:
a2:0f:29:a6:dc:89:0e:ad:3f:d2:54:81:25:78:c1:
e4:66:9d:4e:b7:80:bd:3a:cb:2d:44:28:e1:08:bf:
90:67:49:95:ad:5b:c2:0f:0b:9c:70:65:33:21:ba:
3f:16:79:6f:d4:7f:86:a2:a5:ce:25:55:ba:b9:31:
11:12:59:68:7c:7c:5a:d5:fe:dd:52:e7:52:6f:ed:
85:2b:8b:3d:7c:d7:cc:53:1b:66:8c:0b:4b:6f:f9:
41:d4:0a:d0:de:5a:09:e6:b5:46:6b:d2:fb:b9:43:
24:63:4a:69:ea:6a:c0:2c:eb:53:d8:8f:2e:bb:6a:
de:54:3e:5b:1b:ea:a3:40:cb:a4:46:be:51:62:dd:
53:4a:6f:a4:42:f1:7d:42:b9:03:c8:1a:87:bd:7a:
98:ea:7d:1d:17:35:86:aa:fb:76:2c:0b:4f:f5:c8:
d2:16:5d:59:19:17:c7:76:67:f1:9d:2b:b9:9e:ee:
4f:14:a5:ae:99:61:8a:b0:1b:46:c7:30:d3:6e:75:
95:ad:00:0b:bd:ea:f5:a1:8f:41:6b:7a:66:8e:88:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:9F:CD:DD:F4:D3:A8:0A:6B:BF:CD:99:A0:98:EE:BD:55:8C:5E
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/SZGfzd3006gKa7_NmaCY7r1VjF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.129.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c2:f0:f7:78:67:78:2a:f4:b9:7c:d2:77:73:b1:c8:52:dd:
e2:2e:00:d8:41:fa:25:ab:ac:38:7c:f2:ce:72:12:f4:a0:ac:
45:c4:5f:46:a0:4a:14:9d:48:c4:67:ff:8b:6c:6e:cf:51:ad:
b0:73:fc:01:35:47:c7:fb:88:5d:8b:a1:75:ec:dd:ac:ef:5e:
4a:cd:44:aa:81:00:aa:d1:99:71:78:38:ee:f7:bb:26:21:be:
16:68:89:f6:66:4d:84:b9:e6:c8:d6:34:e1:c4:a2:34:a6:a9:
bd:02:8e:b7:26:4e:3d:ed:bc:43:0c:fe:a8:19:c7:54:d7:54:
fe:38:55:df:b1:42:4c:8a:c0:05:32:e4:5a:cf:26:c3:3a:9e:
94:f5:9e:67:3f:1e:25:05:fc:a9:a8:92:32:95:f9:36:a8:12:
87:ea:a5:f1:2e:86:aa:56:6f:ac:62:27:0c:ed:fd:83:bc:bd:
1f:07:5d:bc:94:32:97:1a:13:89:bb:08:33:8f:10:9b:67:fd:
c1:8d:fd:30:87:cf:83:f9:89:de:ca:b3:77:37:92:fa:a5:2a:
2f:92:69:9e:cc:93:83:0a:ee:e5:b5:a2:fe:51:de:39:15:91:
1b:a8:51:0d:d3:85:c7:58:01:9c:c9:21:70:0c:7f:a7:ee:3e:
b3:66:89:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGXk/f8SaaZdi0wfj52IO+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjQwODI4MDYwMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTkxOWZjZGRkZjRkM2E4MGE2YmJmY2Q5OWEwOThlZWJkNTU4YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbXR/dvojROkiJZCSgKcUP4VsHod
DzJrwDoNkYYUdQmAPaSzv9hu2luFPtCiDymm3IkOrT/SVIEleMHkZp1Ot4C9Osst
RCjhCL+QZ0mVrVvCDwuccGUzIbo/Fnlv1H+GoqXOJVW6uTEREllofHxa1f7dUudS
b+2FK4s9fNfMUxtmjAtLb/lB1ArQ3loJ5rVGa9L7uUMkY0pp6mrALOtT2I8uu2re
VD5bG+qjQMukRr5RYt1TSm+kQvF9QrkDyBqHvXqY6n0dFzWGqvt2LAtP9cjSFl1Z
GRfHdmfxnSu5nu5PFKWumWGKsBtGxzDTbnWVrQALver1oY9Ba3pmjojghQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmRn83d9NOoCmu/zZmgmO69VYxeMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvU1pHZnpkMzAwNmdLYTdfTm1hQ1k3cjFWakY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4SBMA0G
CSqGSIb3DQEBCwUAA4IBAQAWwvD3eGd4KvS5fNJ3c7HIUt3iLgDYQfolq6w4fPLO
chL0oKxFxF9GoEoUnUjEZ/+LbG7PUa2wc/wBNUfH+4hdi6F17N2s715KzUSqgQCq
0ZlxeDju97smIb4WaIn2Zk2EuebI1jThxKI0pqm9Ao63Jk497bxDDP6oGcdU11T+
OFXfsUJMisAFMuRazybDOp6U9Z5nPx4lBfypqJIylfk2qBKH6qXxLoaqVm+sYicM
7f2DvL0fB128lDKXGhOJuwgzjxCbZ/3Bjf0wh8+D+YneyrN3N5L6pSovkmmezJOD
Cu7ltaL+Ud45FZEbqFEN04XHWAGcySFwDH+n7j6zZonn
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:25 2025 by rpki-client