Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/g87igGki2BZ41fcRHtNRdobF5GM.roa
File: g87igGki2BZ41fcRHtNRdobF5GM.roa (raw, json)
Hash identifier: 4p6kMg7GQMChSt4zGzcT8OJ7UpRCl5i7IqSsz7bFOKg=
Subject key identifier: 83:CE:E2:80:69:22:D8:16:78:D5:F7:11:1E:D3:51:76:86:C5:E4:63
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 01892047E6DD5C22610194D17092C1D25051
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/g87igGki2BZ41fcRHtNRdobF5GM.roa
Signing time: Tue 04 Jul 2023 09:42:10 +0000
ROA not before: Tue 04 Jul 2023 09:42:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133450
IP address blocks: 103.240.180.0/22 maxlen: 32
45.114.8.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:47:e6:dd:5c:22:61:01:94:d1:70:92:c1:d2:50:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jul 4 09:42:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83cee2806922d81678d5f7111ed3517686c5e463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:9e:8e:d3:00:52:7b:85:58:c8:7b:62:52:
3b:97:c1:61:6b:43:b5:f1:e6:03:01:5a:63:33:d6:
7b:61:30:32:35:d6:79:5f:75:17:0a:8c:79:49:34:
78:d2:b3:b5:a9:e8:ee:54:55:31:ec:43:1e:cf:6c:
fb:8b:94:32:18:ae:e8:8b:ba:dc:38:c8:3c:e6:9a:
bd:54:bf:4e:bd:4f:70:71:ba:63:54:b1:fd:b6:48:
c1:50:9e:3b:21:28:b8:37:dd:d0:d7:d0:7e:96:90:
e2:38:ec:57:64:6c:61:14:f1:92:c2:95:6b:68:ac:
72:91:5e:4b:2d:a9:ef:56:b8:28:30:43:78:56:8d:
f8:67:d8:4b:bc:29:7e:f3:23:67:13:a5:40:9d:f8:
ae:2a:ce:60:98:c0:93:eb:8a:e4:84:a1:64:2a:90:
12:e5:7e:d3:6f:d1:07:74:4b:0a:cc:7e:c2:2b:1a:
02:57:d5:52:b4:44:50:05:ae:17:51:c8:da:5d:1b:
c1:f5:36:1c:d0:5f:47:e9:59:0a:4b:a3:9f:05:ad:
b2:4f:b4:bc:0d:9c:23:28:50:b2:65:68:93:50:57:
d9:ef:67:42:83:a4:2c:e7:82:79:bd:74:38:f8:21:
62:97:8f:be:32:0f:f8:dd:e4:9e:53:89:61:04:fb:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:E2:80:69:22:D8:16:78:D5:F7:11:1E:D3:51:76:86:C5:E4:63
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/g87igGki2BZ41fcRHtNRdobF5GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.8.0/22
103.240.180.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:c9:9d:ce:f5:5c:ba:c5:b9:f9:8a:1b:64:eb:00:d9:11:59:
1a:fe:ce:f0:06:f1:fe:08:0f:f6:63:48:c5:a6:3f:e6:ab:3a:
76:15:56:c7:28:18:27:e1:ea:66:83:09:c9:57:f7:43:97:54:
c1:84:19:d0:54:47:49:16:e1:15:82:f9:5c:36:c0:68:37:fc:
d9:14:8d:87:9b:15:ed:56:ba:41:0a:3a:22:b3:1d:60:48:45:
d9:18:e4:35:1b:3e:a0:b4:2c:63:06:83:00:56:c4:94:60:84:
80:6a:9f:7b:65:12:64:e1:a7:ee:cf:7e:13:48:d7:22:4c:94:
69:3e:68:cc:ea:4c:b3:e6:e6:b5:5a:d2:27:ef:7d:77:88:24:
e6:8c:f5:d4:6c:e7:08:d8:64:05:ec:0b:6c:ba:da:24:3b:b3:
83:58:c7:7e:79:cd:94:23:0f:2b:be:b7:b1:00:2b:98:ad:63:
58:7e:b7:66:ff:2d:f7:d9:58:df:d0:72:6a:43:8f:77:b8:2a:
6c:37:f5:d3:45:95:04:fd:b5:ed:f9:33:33:83:3c:57:8b:e8:
51:9a:76:db:52:e8:98:ea:44:46:66:40:32:fe:85:6e:90:5e:
4c:f1:74:55:43:9a:3b:83:78:35:e6:31:3d:58:f8:47:0e:c4:
01:d6:fc:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkgR+bdXCJhAZTRcJLB0lBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx
MGU4M2MwHhcNMjMwNzA0MDk0MjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2NlZTI4MDY5MjJkODE2NzhkNWY3MTExZWQzNTE3Njg2YzVlNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlaejtMAUnuFWMh7YlI7l8Fha0O1
8eYDAVpjM9Z7YTAyNdZ5X3UXCox5STR40rO1qejuVFUx7EMez2z7i5QyGK7oi7rc
OMg85pq9VL9OvU9wcbpjVLH9tkjBUJ47ISi4N93Q19B+lpDiOOxXZGxhFPGSwpVr
aKxykV5LLanvVrgoMEN4Vo34Z9hLvCl+8yNnE6VAnfiuKs5gmMCT64rkhKFkKpAS
5X7Tb9EHdEsKzH7CKxoCV9VStERQBa4XUcjaXRvB9TYc0F9H6VkKS6OfBa2yT7S8
DZwjKFCyZWiTUFfZ72dCg6Qs54J5vXQ4+CFil4++Mg/43eSeU4lhBPuVAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIPO4oBpItgWeNX3ER7TUXaGxeRjMB8GA1UdIwQY
MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt
ZmMzN2ZiMGNkNDNiLzEvZzg3aWdHa2kyQlo0MWZjUkh0TlJkb2JGNUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi
LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLXIIAwQC
Z/C0MA0GCSqGSIb3DQEBCwUAA4IBAQC3yZ3O9Vy6xbn5ihtk6wDZEVka/s7wBvH+
CA/2Y0jFpj/mqzp2FVbHKBgn4epmgwnJV/dDl1TBhBnQVEdJFuEVgvlcNsBoN/zZ
FI2HmxXtVrpBCjoisx1gSEXZGOQ1Gz6gtCxjBoMAVsSUYISAap97ZRJk4afuz34T
SNciTJRpPmjM6kyz5ua1WtIn7313iCTmjPXUbOcI2GQF7AtsutokO7ODWMd+ec2U
Iw8rvrexACuYrWNYfrdm/y332Vjf0HJqQ493uCpsN/XTRZUE/bXt+TMzgzxXi+hR
mnbbUuiY6kRGZkAy/oVukF5M8XRVQ5o7g3g15jE9WPhHDsQB1vxV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:29 2023 by rpki-client on console-ams.rpki-client.org