Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TesQJx79NwYAIimzdVyYVfzIHOk.roa
File: TesQJx79NwYAIimzdVyYVfzIHOk.roa (raw, json)
Hash identifier: XS5VjfEnNP440k/+znBunrKTO3GUd0AkwXo9O/3asJg=
Subject key identifier: 4D:EB:10:27:1E:FD:37:06:00:22:29:B3:75:5C:98:55:FC:C8:1C:E9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018B63AE6750E574619D51C2AF2FA9BB4985
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TesQJx79NwYAIimzdVyYVfzIHOk.roa
Signing time: Tue 24 Oct 2023 21:54:15 +0000
ROA not before: Tue 24 Oct 2023 21:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 202.133.90.0/23 maxlen: 24
188.253.8.0/22 maxlen: 24
103.25.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:63:ae:67:50:e5:74:61:9d:51:c2:af:2f:a9:bb:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 24 21:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4deb10271efd3706002229b3755c9855fcc81ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:2b:d2:f3:e9:ef:0a:9b:44:a3:ea:39:e1:
60:98:7e:9e:f3:c0:e0:65:6d:b5:4a:fd:99:b4:ba:
86:8a:1f:c3:ea:69:4c:72:4e:91:c9:81:91:c7:18:
90:cf:29:68:5e:35:64:29:17:2c:4b:65:54:f2:ab:
b2:cb:c9:5c:b8:47:4f:75:7b:ef:bc:79:49:c6:7a:
e1:9b:73:f2:f0:48:9a:88:80:89:00:4d:33:98:75:
b3:c7:ab:a0:e5:56:98:2a:76:f5:c9:72:c4:f0:6b:
13:06:d1:dd:34:17:53:5f:b6:14:d1:c8:95:cc:da:
f7:aa:94:21:41:57:b9:cd:b5:69:9e:b6:82:1d:34:
9f:21:39:fb:ae:1b:da:6a:fe:d7:ce:d6:85:2d:f0:
b6:57:2c:f0:b7:50:d0:69:61:76:6a:e8:62:42:32:
5e:16:78:86:5e:a4:41:cb:1e:72:cc:b3:eb:dd:35:
a6:7a:1f:d9:bf:5c:16:89:7e:30:6f:ab:18:15:62:
e2:76:a4:35:39:98:62:48:1b:68:27:3f:02:f9:69:
c3:a0:3c:da:99:9b:e8:4f:e3:c1:68:29:17:d3:6a:
6a:51:a6:cc:cd:7a:b0:b7:0f:eb:f0:6a:02:1c:b2:
b7:a8:44:04:79:ed:13:a1:7f:a6:f3:32:81:33:b1:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EB:10:27:1E:FD:37:06:00:22:29:B3:75:5C:98:55:FC:C8:1C:E9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TesQJx79NwYAIimzdVyYVfzIHOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.86.0/23
188.253.8.0/22
202.133.90.0/23
Signature Algorithm: sha256WithRSAEncryption
97:68:0c:8e:d7:12:d2:0a:b6:ec:0c:b5:90:e0:e3:07:50:14:
da:28:ad:b1:13:9e:52:45:84:59:a9:cf:b7:fe:7a:61:d2:ff:
0e:b0:ac:93:91:19:2e:03:2b:85:81:c2:01:0e:28:4b:65:09:
3f:50:32:87:5a:96:02:2a:db:62:89:b1:af:90:1b:9e:14:fb:
2b:c1:a0:d8:22:62:9f:15:c8:2d:77:ed:37:0a:b7:7c:9d:ce:
4b:c0:62:bc:14:29:c7:fe:d8:7f:0e:ea:0f:fa:89:75:04:c1:
95:ec:e5:2e:47:59:be:9a:ca:76:31:f2:5e:39:f6:43:a9:fe:
e1:7e:69:03:b5:9d:e3:78:a2:0e:12:17:97:4f:71:2b:5d:8d:
8f:4f:79:28:08:b3:2b:b2:37:b2:0f:00:d2:95:f7:b1:51:77:
7c:b4:41:6b:b7:ec:dd:db:9b:eb:bb:14:7a:67:dc:e1:93:d3:
16:a7:dd:a4:30:01:5c:78:60:a6:09:be:47:a0:06:ff:3f:e1:
26:7b:25:5a:5e:f3:24:b6:6b:2e:d6:df:89:e2:2b:5b:bf:c4:
88:1e:75:d3:14:ba:13:2f:0c:33:98:ad:2f:4b:6e:3a:c9:06:
c3:be:99:de:a3:69:77:58:05:87:0d:28:87:f1:95:c2:49:8d:
06:b4:41:29
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYtjrmdQ5XRhnVHCry+pu0mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMxMDI0MjE1NDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGViMTAyNzFlZmQzNzA2MDAyMjI5YjM3NTVjOTg1NWZjYzgxY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRor0vPp7wqbRKPqOeFgmH6e88Dg
ZW21Sv2ZtLqGih/D6mlMck6RyYGRxxiQzyloXjVkKRcsS2VU8quyy8lcuEdPdXvv
vHlJxnrhm3Py8EiaiICJAE0zmHWzx6ug5VaYKnb1yXLE8GsTBtHdNBdTX7YU0ciV
zNr3qpQhQVe5zbVpnraCHTSfITn7rhvaav7XztaFLfC2Vyzwt1DQaWF2auhiQjJe
FniGXqRByx5yzLPr3TWmeh/Zv1wWiX4wb6sYFWLidqQ1OZhiSBtoJz8C+WnDoDza
mZvoT+PBaCkX02pqUabMzXqwtw/r8GoCHLK3qEQEee0ToX+m8zKBM7F3iQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE3rECce/TcGACIps3VcmFX8yBzpMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvVGVzUUp4NzlOd1lBSWltemRWeVlWZnpJSE9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBZxlWAwQC
vP0IAwQByoVaMA0GCSqGSIb3DQEBCwUAA4IBAQCXaAyO1xLSCrbsDLWQ4OMHUBTa
KK2xE55SRYRZqc+3/nph0v8OsKyTkRkuAyuFgcIBDihLZQk/UDKHWpYCKttiibGv
kBueFPsrwaDYImKfFcgtd+03Crd8nc5LwGK8FCnH/th/DuoP+ol1BMGV7OUuR1m+
msp2MfJeOfZDqf7hfmkDtZ3jeKIOEheXT3ErXY2PT3koCLMrsjeyDwDSlfexUXd8
tEFrt+zd25vruxR6Z9zhk9MWp92kMAFceGCmCb5HoAb/P+EmeyVaXvMktmsu1t+J
4itbv8SIHnXTFLoTLwwzmK0vS246yQbDvpneo2l3WAWHDSiH8ZXCSY0GtEEp
Generated at Fri Oct 27 13:16:43 2023 by rpki-client on console-ams.rpki-client.org