Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/9PLMpWMJfTx2EON724wdZD2lRSo.roa
File: 9PLMpWMJfTx2EON724wdZD2lRSo.roa (raw, json)
Hash identifier: w4UIk3izGKq1Lhc7kjl4DqEGT46pi+zEy06wHKfplOA=
Subject key identifier: F4:F2:CC:A5:63:09:7D:3C:76:10:E3:7B:DB:8C:1D:64:3D:A5:45:2A
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0186A6A04F829493ED123C0565FDBF1BA30A
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/9PLMpWMJfTx2EON724wdZD2lRSo.roa
Signing time: Fri 03 Mar 2023 08:39:29 +0000
ROA not before: Fri 03 Mar 2023 08:39:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 103.101.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 10 Aug 2023 11:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:a0:4f:82:94:93:ed:12:3c:05:65:fd:bf:1b:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Mar 3 08:39:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4f2cca563097d3c7610e37bdb8c1d643da5452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:70:2f:0a:55:87:4f:e0:47:b4:70:b5:a6:
e8:e7:9e:fc:ce:5f:dd:c9:15:8a:d4:3e:ed:79:ef:
58:6b:6f:e5:63:7b:bd:7b:6d:bc:83:fd:34:90:b5:
73:6f:19:c7:e3:02:23:b1:c9:44:dc:3c:82:3c:f7:
80:08:49:06:f8:f0:4a:e6:37:bc:be:04:61:71:89:
08:2c:5e:0b:8d:54:c2:93:d2:16:fa:9b:2f:24:c3:
16:94:75:51:76:bb:bc:90:d4:e3:13:58:01:38:70:
73:49:2a:9f:79:ef:f2:72:aa:13:b2:c7:93:c9:56:
ee:60:2d:b5:6e:5a:35:82:10:75:3f:61:c9:a0:6b:
a5:dd:aa:f2:7a:13:4d:25:21:93:e4:3c:e7:8b:df:
a4:b2:23:b8:e3:a6:cf:20:7a:e1:db:66:cc:f4:9f:
c6:7f:71:93:42:ae:10:4d:09:8b:b4:43:3f:12:00:
bd:3f:1f:27:21:3b:ca:41:0d:97:c1:5c:24:8f:65:
b7:55:26:d1:71:87:78:1d:3b:30:fd:0f:24:93:b1:
0a:5f:7e:e0:6d:a1:74:e0:6c:1a:37:a3:66:32:52:
09:52:e2:ed:37:a5:96:69:90:1e:05:ea:b9:2c:23:
c7:95:a0:9b:78:ef:2c:ec:59:ba:39:2f:c2:3f:54:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F2:CC:A5:63:09:7D:3C:76:10:E3:7B:DB:8C:1D:64:3D:A5:45:2A
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/9PLMpWMJfTx2EON724wdZD2lRSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.101.88.0/22
Signature Algorithm: sha256WithRSAEncryption
51:99:16:f6:c8:a0:86:57:c7:8b:90:90:5a:7a:9c:74:61:c5:
5d:41:c6:36:95:e6:c5:41:6f:d6:f7:9a:2c:ee:95:8e:bb:54:
db:44:d3:9c:18:1a:30:fa:53:23:b2:e9:30:bc:d0:c1:dd:1d:
c2:0d:cf:4b:27:5c:ed:f6:6e:af:f1:a0:9e:c1:64:d3:58:b8:
99:33:e6:50:6f:70:85:d7:1d:0b:52:34:95:1d:02:62:5b:5f:
90:5a:5d:d0:45:3a:04:82:37:da:ca:fc:b1:b3:c8:41:e7:07:
7c:82:a8:5d:84:53:37:57:b8:00:31:75:24:2e:31:6f:7d:9b:
65:c9:d1:f5:83:04:67:29:aa:06:dc:3e:05:3a:56:00:bd:c0:
36:f3:f3:26:59:cc:73:a5:c9:70:38:d2:4d:b8:9e:ad:bb:cd:
b3:12:f5:48:61:39:28:34:51:a5:97:56:09:5e:36:85:49:bc:
fa:7d:45:4d:76:d8:94:fa:64:fa:4b:2d:06:33:da:03:ab:96:
d1:46:ed:a3:67:c8:82:df:17:00:2e:67:df:40:4c:26:3d:b1:
2d:f2:ca:d3:5b:9e:7a:43:5f:da:86:8c:1e:17:4b:e5:31:0a:
5b:11:5f:21:81:99:0f:79:4c:83:0c:a4:0c:2f:4b:c2:0c:f7:
e6:9f:b8:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYamoE+ClJPtEjwFZf2/G6MKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx
MGU4M2MwHhcNMjMwMzAzMDgzOTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGYyY2NhNTYzMDk3ZDNjNzYxMGUzN2JkYjhjMWQ2NDNkYTU0NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjRwLwpVh0/gR7Rwtabo5578zl/d
yRWK1D7tee9Ya2/lY3u9e228g/00kLVzbxnH4wIjsclE3DyCPPeACEkG+PBK5je8
vgRhcYkILF4LjVTCk9IW+psvJMMWlHVRdru8kNTjE1gBOHBzSSqfee/ycqoTsseT
yVbuYC21blo1ghB1P2HJoGul3aryehNNJSGT5Dzni9+ksiO446bPIHrh22bM9J/G
f3GTQq4QTQmLtEM/EgC9Px8nITvKQQ2XwVwkj2W3VSbRcYd4HTsw/Q8kk7EKX37g
baF04GwaN6NmMlIJUuLtN6WWaZAeBeq5LCPHlaCbeO8s7Fm6OS/CP1S0GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTyzKVjCX08dhDje9uMHWQ9pUUqMB8GA1UdIwQY
MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt
ZmMzN2ZiMGNkNDNiLzEvOVBMTXBXTUpmVHgyRU9ONzI0d2RaRDJsUlNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi
LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2VYMA0G
CSqGSIb3DQEBCwUAA4IBAQBRmRb2yKCGV8eLkJBaepx0YcVdQcY2lebFQW/W95os
7pWOu1TbRNOcGBow+lMjsukwvNDB3R3CDc9LJ1zt9m6v8aCewWTTWLiZM+ZQb3CF
1x0LUjSVHQJiW1+QWl3QRToEgjfayvyxs8hB5wd8gqhdhFM3V7gAMXUkLjFvfZtl
ydH1gwRnKaoG3D4FOlYAvcA28/MmWcxzpclwONJNuJ6tu82zEvVIYTkoNFGll1YJ
XjaFSbz6fUVNdtiU+mT6Sy0GM9oDq5bRRu2jZ8iC3xcALmffQEwmPbEt8srTW556
Q1/ahoweF0vlMQpbEV8hgZkPeUyDDKQML0vCDPfmn7hT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org