Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/83PoGC1gDMaJSmD06gCPtrjxRXI.roa
File: 83PoGC1gDMaJSmD06gCPtrjxRXI.roa (raw, json)
Hash identifier: LAzC2hXKqgyo4jz29DipFWyA6DZHKTYy39hIKcVOGYA=
Subject key identifier: F3:73:E8:18:2D:60:0C:C6:89:4A:60:F4:EA:00:8F:B6:B8:F1:45:72
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01943AC231F2BC2887F7DA270392590EE3D1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/83PoGC1gDMaJSmD06gCPtrjxRXI.roa
Signing time: Mon 06 Jan 2025 08:36:32 +0000
ROA not before: Mon 06 Jan 2025 08:36:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214128
IP address blocks: 103.245.230.0/24 maxlen: 24
103.245.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 08:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:c2:31:f2:bc:28:87:f7:da:27:03:92:59:0e:e3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 6 08:36:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f373e8182d600cc6894a60f4ea008fb6b8f14572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:45:ec:43:9e:a7:f4:56:f5:e3:fe:31:22:
ac:31:6d:85:6f:0e:ee:c1:b6:cd:3c:6c:ec:93:ed:
77:05:24:8d:ff:0f:6a:6c:84:7c:42:14:6f:43:0d:
f4:a7:4a:fc:eb:38:d3:42:5e:48:22:86:52:0b:88:
22:af:79:ef:75:8a:bf:4c:9f:bc:c5:62:25:d1:43:
a9:d2:d8:c9:39:ac:04:d8:3d:34:d6:36:3e:01:6c:
88:39:2c:2c:bb:cc:19:28:bf:24:16:47:ae:f5:f8:
ab:f8:53:26:ee:7c:a4:18:7e:ee:77:ec:39:b9:b6:
f1:9a:e1:3c:70:43:ed:36:f5:cc:73:46:73:81:8d:
79:25:bb:2d:44:ca:eb:76:52:12:46:87:7f:60:84:
c7:a3:20:c7:2b:70:80:c9:2f:1c:e6:a7:76:64:4a:
c4:b8:92:66:8b:c2:37:fa:bc:f9:97:7a:03:0b:47:
d4:c8:28:6f:17:9e:ba:4c:1d:55:26:03:4e:18:a0:
6e:cf:98:4d:22:ec:6f:9f:a7:5d:9b:ba:63:aa:54:
d5:c7:c8:6a:06:80:cc:bf:83:e5:6a:5d:a7:56:43:
c9:bb:56:ab:79:97:41:b1:de:f2:99:1c:9f:d1:37:
34:d2:c7:f6:cd:7b:54:e8:df:9e:05:5d:4d:84:60:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:E8:18:2D:60:0C:C6:89:4A:60:F4:EA:00:8F:B6:B8:F1:45:72
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/83PoGC1gDMaJSmD06gCPtrjxRXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:aa:fd:dc:c7:f3:b6:9a:5c:c4:ee:85:05:de:90:bc:c0:ea:
16:c4:d8:29:60:4e:37:3f:ba:88:c2:75:b0:b1:85:2b:49:bf:
0c:46:b0:76:a9:f9:ae:fd:0b:76:c1:ba:d1:f0:30:4f:3d:f9:
c4:78:16:64:db:43:ec:d9:67:34:e5:a2:97:34:ad:b6:cb:58:
9c:94:d6:d4:77:2e:17:1b:b8:97:81:be:7a:49:8f:db:08:b0:
2f:16:0a:d2:5a:74:24:26:7d:18:fc:4f:e1:e3:ec:f9:83:cc:
8b:92:4f:98:fe:9a:ee:f7:36:c0:42:7c:a4:8d:08:34:ed:7f:
3f:3a:5e:be:80:40:c7:58:1c:80:28:db:11:9f:b4:f9:59:20:
f2:6f:40:f5:50:a5:61:53:c2:19:6c:83:09:b6:2d:98:60:b4:
33:31:46:73:2b:94:03:55:91:96:d3:c3:7e:b5:b9:79:5b:6b:
1b:d1:b7:3d:70:1a:87:c9:33:32:51:67:3c:db:39:e1:b7:82:
8a:f2:c9:9a:5e:50:66:45:4d:2b:e9:43:41:0c:03:b4:2a:c6:
60:16:94:15:94:b2:bd:06:97:70:06:cb:81:c5:4a:1f:d2:f2:
f9:7d:65:ca:3e:c8:a4:3d:5c:45:5c:0a:44:4e:53:f6:11:d6:
db:62:18:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQ6wjHyvCiH99onA5JZDuPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTA2MDgzNjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzczZTgxODJkNjAwY2M2ODk0YTYwZjRlYTAwOGZiNmI4ZjE0NTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfpF7EOep/RW9eP+MSKsMW2Fbw7u
wbbNPGzsk+13BSSN/w9qbIR8QhRvQw30p0r86zjTQl5IIoZSC4gir3nvdYq/TJ+8
xWIl0UOp0tjJOawE2D001jY+AWyIOSwsu8wZKL8kFkeu9fir+FMm7nykGH7ud+w5
ubbxmuE8cEPtNvXMc0ZzgY15JbstRMrrdlISRod/YITHoyDHK3CAyS8c5qd2ZErE
uJJmi8I3+rz5l3oDC0fUyChvF566TB1VJgNOGKBuz5hNIuxvn6ddm7pjqlTVx8hq
BoDMv4Plal2nVkPJu1areZdBsd7ymRyf0Tc00sf2zXtU6N+eBV1NhGC9AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNz6BgtYAzGiUpg9OoAj7a48UVyMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvODNQb0dDMWdETWFKU21EMDZnQ1B0cmp4UlhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/XmMA0G
CSqGSIb3DQEBCwUAA4IBAQB6qv3cx/O2mlzE7oUF3pC8wOoWxNgpYE43P7qIwnWw
sYUrSb8MRrB2qfmu/Qt2wbrR8DBPPfnEeBZk20Ps2Wc05aKXNK22y1iclNbUdy4X
G7iXgb56SY/bCLAvFgrSWnQkJn0Y/E/h4+z5g8yLkk+Y/pru9zbAQnykjQg07X8/
Ol6+gEDHWByAKNsRn7T5WSDyb0D1UKVhU8IZbIMJti2YYLQzMUZzK5QDVZGW08N+
tbl5W2sb0bc9cBqHyTMyUWc82znht4KK8smaXlBmRU0r6UNBDAO0KsZgFpQVlLK9
BpdwBsuBxUof0vL5fWXKPsikPVxFXApETlP2EdbbYhiV
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:18 2025 by rpki-client