Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/bKe-pd6qAtmN5vyfaf37RsZv-B4.roa
File: bKe-pd6qAtmN5vyfaf37RsZv-B4.roa (raw, json)
Hash identifier: g8xJBuJ3GBsj8GmFYqQyWf86oSJMNc0coxrIvL/ZFXg=
Subject key identifier: 6C:A7:BE:A5:DE:AA:02:D9:8D:E6:FC:9F:69:FD:FB:46:C6:6F:F8:1E
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018DCF032D3F7854207280EFAF22583B4160
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/bKe-pd6qAtmN5vyfaf37RsZv-B4.roa
Signing time: Thu 22 Feb 2024 04:11:48 +0000
ROA not before: Thu 22 Feb 2024 04:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7922
IP address blocks: 103.130.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 16:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:03:2d:3f:78:54:20:72:80:ef:af:22:58:3b:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 22 04:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ca7bea5deaa02d98de6fc9f69fdfb46c66ff81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:60:d0:4a:83:a9:90:4a:0e:aa:12:01:d4:
24:27:3c:4d:56:d6:89:8f:fd:4b:dc:52:92:11:7e:
e9:5a:3b:c9:6b:f2:63:b0:02:c9:07:18:14:e7:15:
e2:08:b1:82:d0:30:80:6b:b6:64:49:b5:1a:58:91:
eb:b2:b4:96:7a:86:96:d0:75:2f:10:61:a0:47:3b:
3e:48:f1:4a:32:68:f4:1a:7e:49:2a:86:a2:72:1f:
dd:98:69:0d:e4:f2:5e:56:e6:01:38:e1:c7:2f:a3:
9e:3d:39:32:2f:2c:0d:e2:27:87:2c:e0:ff:87:42:
7c:b8:3a:c8:fc:7b:45:5e:ea:81:73:f2:69:98:a0:
bd:3e:c1:95:d7:12:3d:99:58:76:16:86:a1:32:4d:
3d:be:0f:40:9b:df:9b:31:80:16:ff:25:58:8b:ff:
93:50:e6:0c:39:58:80:50:bf:3f:44:57:71:c6:9b:
ed:b3:82:ef:2d:9c:fc:15:b1:70:50:3b:05:8a:f2:
a8:a0:08:31:67:7b:68:91:86:cb:54:3c:ad:99:08:
25:77:9a:dc:d4:43:89:09:26:0f:b8:28:e5:d1:67:
45:f0:57:1f:9e:f0:00:1b:d3:0d:30:6d:fd:97:5c:
85:f5:37:04:4b:6c:38:8a:2d:b4:25:0c:0e:55:88:
61:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:BE:A5:DE:AA:02:D9:8D:E6:FC:9F:69:FD:FB:46:C6:6F:F8:1E
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/bKe-pd6qAtmN5vyfaf37RsZv-B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.178.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:48:b5:8e:a8:48:59:e2:22:5d:1e:65:d3:b8:16:d0:0f:8d:
bc:aa:4e:44:2f:45:5c:9a:62:d7:5b:00:68:1e:a1:3d:e0:04:
c2:cc:ef:85:0f:16:7d:d6:47:30:bc:24:81:d6:47:8d:04:d8:
87:72:2b:66:26:01:98:50:3b:3d:fd:a2:7b:f1:45:84:97:ad:
1e:22:4a:f9:57:c1:72:5f:18:16:29:a4:aa:5b:2d:49:83:a1:
e7:cc:ad:e5:9a:8b:6b:51:1e:aa:c9:cf:e1:7e:cb:00:30:05:
34:a6:53:cc:10:90:bc:f7:41:bb:1b:39:cf:98:d2:e0:31:4d:
c5:0f:f8:b4:36:e5:80:9b:6e:72:01:38:36:d6:a8:3c:0b:ff:
e7:19:1a:f2:2d:36:f3:bf:ef:1a:69:54:6e:3f:58:7a:07:86:
1a:cd:85:67:87:6e:85:b9:a6:61:2e:f4:57:1d:06:ee:7c:bb:
a4:0b:60:b2:a3:43:33:73:4e:c8:84:b3:78:ee:34:3c:ff:a2:
e6:28:93:5a:4a:42:42:e2:9e:9f:6d:dd:54:71:f4:8d:11:a7:
7e:d0:a2:75:3b:4c:94:8c:20:7f:ee:42:37:6c:d2:de:ca:1e:
1d:d2:eb:fa:5a:f9:96:6b:74:20:b1:23:57:f0:06:5c:1a:25:
e9:22:b7:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3PAy0/eFQgcoDvryJYO0FgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMjIyMDQxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2E3YmVhNWRlYWEwMmQ5OGRlNmZjOWY2OWZkZmI0NmM2NmZmODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4dg0EqDqZBKDqoSAdQkJzxNVtaJ
j/1L3FKSEX7pWjvJa/JjsALJBxgU5xXiCLGC0DCAa7ZkSbUaWJHrsrSWeoaW0HUv
EGGgRzs+SPFKMmj0Gn5JKoaich/dmGkN5PJeVuYBOOHHL6OePTkyLywN4ieHLOD/
h0J8uDrI/HtFXuqBc/JpmKC9PsGV1xI9mVh2FoahMk09vg9Am9+bMYAW/yVYi/+T
UOYMOViAUL8/RFdxxpvts4LvLZz8FbFwUDsFivKooAgxZ3tokYbLVDytmQgld5rc
1EOJCSYPuCjl0WdF8FcfnvAAG9MNMG39l1yF9TcES2w4ii20JQwOVYhhXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGynvqXeqgLZjeb8n2n9+0bGb/geMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvYktlLXBkNnFBdG1ONXZ5ZmFmMzdSc1p2LUI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4KyMA0G
CSqGSIb3DQEBCwUAA4IBAQBqSLWOqEhZ4iJdHmXTuBbQD428qk5EL0VcmmLXWwBo
HqE94ATCzO+FDxZ91kcwvCSB1keNBNiHcitmJgGYUDs9/aJ78UWEl60eIkr5V8Fy
XxgWKaSqWy1Jg6HnzK3lmotrUR6qyc/hfssAMAU0plPMEJC890G7GznPmNLgMU3F
D/i0NuWAm25yATg21qg8C//nGRryLTbzv+8aaVRuP1h6B4YazYVnh26FuaZhLvRX
HQbufLukC2Cyo0Mzc07IhLN47jQ8/6LmKJNaSkJC4p6fbd1UcfSNEad+0KJ1O0yU
jCB/7kI3bNLeyh4d0uv6WvmWa3QgsSNX8AZcGiXpIreW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:55 2024 by rpki-client on console-fra.rpki-client.org