Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/03zAt1NQXM7kWf4QocE-2VFNbDg.roa
File: 03zAt1NQXM7kWf4QocE-2VFNbDg.roa (raw, json)
Hash identifier: ykOfgg4CGGTuvTDAa2k2vN/0pzwgH31M/B2P5C/DqHA=
Subject key identifier: D3:7C:C0:B7:53:50:5C:CE:E4:59:FE:10:A1:C1:3E:D9:51:4D:6C:38
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 018CC6B8F456A050E4D1A2762B9335D6F7F8
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/03zAt1NQXM7kWf4QocE-2VFNbDg.roa
Signing time: Mon 01 Jan 2024 20:30:58 +0000
ROA not before: Mon 01 Jan 2024 20:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207990
IP address blocks: 91.132.114.0/23 maxlen: 32
103.53.82.0/23 maxlen: 32
193.28.237.0/24 maxlen: 32
103.240.180.0/22 maxlen: 32
193.19.206.0/24 maxlen: 32
193.28.182.0/24 maxlen: 32
193.28.191.0/24 maxlen: 32
193.28.202.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sun 24 Mar 2024 13:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f4:56:a0:50:e4:d1:a2:76:2b:93:35:d6:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 1 20:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d37cc0b753505ccee459fe10a1c13ed9514d6c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:e9:c9:f7:16:fc:9a:f3:9d:7f:d5:f9:ab:
ae:d3:0b:b6:7f:55:e8:e1:65:15:dd:b4:7c:99:7b:
29:5c:d5:ad:25:ad:ab:06:ec:f9:d4:5d:06:2c:1d:
07:22:4e:ae:92:e4:f9:b8:73:a2:9c:6c:a6:3d:ab:
9d:56:14:38:50:77:f3:73:3a:b8:a1:bb:45:4d:c5:
6b:14:e9:98:53:a2:6b:2b:4d:5c:a2:81:77:e7:4c:
cd:29:54:98:a1:04:e1:75:ce:6b:0c:3d:34:c9:39:
dc:6a:e3:50:02:9f:77:47:48:19:22:65:d3:a7:b2:
74:cd:00:57:03:88:f5:81:e8:7a:ad:49:60:d8:4d:
e3:41:c4:3a:26:61:e4:f6:a4:49:77:77:5f:21:b1:
aa:4e:69:c9:ca:7d:18:3c:10:ea:16:97:a1:5a:e1:
a7:c7:81:29:82:8f:ec:2a:85:1c:97:36:f1:94:d3:
57:f2:dc:9a:6a:e6:cb:7c:a2:39:38:dc:6b:b7:c3:
52:27:c9:61:f9:af:58:92:05:16:f5:d9:84:18:65:
bd:fb:41:e5:66:cb:86:5a:4b:78:8e:3f:a9:8f:44:
11:d9:c9:c4:c8:9b:92:9a:ec:1e:f4:6e:35:43:a5:
32:1c:b3:cc:cd:44:e9:71:72:8d:ae:8e:88:a2:11:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7C:C0:B7:53:50:5C:CE:E4:59:FE:10:A1:C1:3E:D9:51:4D:6C:38
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/03zAt1NQXM7kWf4QocE-2VFNbDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.114.0/23
103.53.82.0/23
103.240.180.0/22
193.19.206.0/24
193.28.182.0/24
193.28.191.0/24
193.28.202.0/24
193.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ea:bb:d2:f9:09:02:9c:dd:21:24:1d:0d:ba:7e:b1:5e:41:
da:3b:40:5a:26:ff:65:fb:03:e5:e4:c9:8d:7b:80:91:eb:bb:
d2:1f:78:d2:ed:20:41:f4:77:d2:14:4d:78:d9:1d:5b:1c:bc:
3c:38:53:1f:1d:03:c3:b5:d0:c5:32:63:72:f7:37:dc:75:9e:
8a:05:31:aa:62:ba:d3:55:f0:8e:6a:c8:af:de:35:30:7c:91:
c4:cf:26:47:1b:f9:2d:67:db:52:9b:db:3d:9b:90:78:f3:1b:
6a:36:26:e9:f0:88:09:5d:26:94:66:5e:97:8c:c8:e9:89:8b:
a1:d2:9c:2c:7e:a6:39:7d:7c:a1:cd:fa:59:04:ff:7f:92:fa:
a8:c9:8d:e1:26:ef:96:e6:41:e8:d9:ba:da:6e:22:94:78:a7:
ac:e4:5b:3d:1e:98:88:7a:ea:46:67:8b:26:eb:f2:a9:7a:bd:
e0:82:db:0c:b1:aa:e0:e5:47:eb:0d:38:a7:9b:81:9e:25:d0:
16:b2:22:00:7e:99:27:82:be:0d:47:d5:88:f4:08:2c:dd:54:
3d:56:a4:95:b5:98:0b:53:a5:b8:7d:1e:5d:8c:2e:06:45:19:
67:7d:ca:e7:8c:06:92:9f:fb:bb:a1:82:bf:ea:0e:51:45:a1:
b9:af:6e:9d
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYzGuPRWoFDk0aJ2K5M11vf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx
MGU4M2MwHhcNMjQwMTAxMjAzMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzdjYzBiNzUzNTA1Y2NlZTQ1OWZlMTBhMWMxM2VkOTUxNGQ2YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH7pyfcW/JrznX/V+auu0wu2f1Xo
4WUV3bR8mXspXNWtJa2rBuz51F0GLB0HIk6ukuT5uHOinGymPaudVhQ4UHfzczq4
obtFTcVrFOmYU6JrK01cooF350zNKVSYoQThdc5rDD00yTncauNQAp93R0gZImXT
p7J0zQBXA4j1geh6rUlg2E3jQcQ6JmHk9qRJd3dfIbGqTmnJyn0YPBDqFpehWuGn
x4Epgo/sKoUclzbxlNNX8tyaaubLfKI5ONxrt8NSJ8lh+a9YkgUW9dmEGGW9+0Hl
ZsuGWkt4jj+pj0QR2cnEyJuSmuwe9G41Q6UyHLPMzUTpcXKNro6IohFZtQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFNN8wLdTUFzO5Fn+EKHBPtlRTWw4MB8GA1UdIwQY
MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt
ZmMzN2ZiMGNkNDNiLzEvMDN6QXQxTlFYTTdrV2Y0UW9jRS0yVkZOYkRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi
LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBW4RyAwQB
ZzVSAwQCZ/C0AwQAwRPOAwQAwRy2AwQAwRy/AwQAwRzKAwQAwRztMA0GCSqGSIb3
DQEBCwUAA4IBAQBq6rvS+QkCnN0hJB0Nun6xXkHaO0BaJv9l+wPl5MmNe4CR67vS
H3jS7SBB9HfSFE142R1bHLw8OFMfHQPDtdDFMmNy9zfcdZ6KBTGqYrrTVfCOasiv
3jUwfJHEzyZHG/ktZ9tSm9s9m5B48xtqNibp8IgJXSaUZl6XjMjpiYuh0pwsfqY5
fXyhzfpZBP9/kvqoyY3hJu+W5kHo2brabiKUeKes5Fs9HpiIeupGZ4sm6/Kper3g
gtsMsarg5UfrDTinm4GeJdAWsiIAfpkngr4NR9WI9Ags3VQ9VqSVtZgLU6W4fR5d
jC4GRRlnfcrnjAaSn/u7oYK/6g5RRaG5r26d
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:49 2024 by rpki-client on console-ams.rpki-client.org