Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/v5Ii27bD4R8DdwPdUK0oKX4XvIs.roa
File: v5Ii27bD4R8DdwPdUK0oKX4XvIs.roa (raw, json)
Hash identifier: gtlbOG/PEwsgW+2LMXWVGk/EVUsYdtvt1waoXV8QBZw=
Subject key identifier: BF:92:22:DB:B6:C3:E1:1F:03:77:03:DD:50:AD:28:29:7E:17:BC:8B
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 018CC64B23BFD1549A4A6A527E55B14C167F
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/v5Ii27bD4R8DdwPdUK0oKX4XvIs.roa
Signing time: Mon 01 Jan 2024 18:31:02 +0000
ROA not before: Mon 01 Jan 2024 18:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213222
IP address blocks: 103.231.139.0/24 maxlen: 24
103.231.138.0/24 maxlen: 24
185.137.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Apr 2024 16:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:23:bf:d1:54:9a:4a:6a:52:7e:55:b1:4c:16:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf9222dbb6c3e11f037703dd50ad28297e17bc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:cf:8b:eb:05:04:83:ff:82:2e:29:3f:de:
df:6f:95:cf:44:13:5d:1c:d9:00:49:dc:75:ae:03:
32:81:69:31:56:0b:f6:26:93:c4:2c:3b:7a:0d:e4:
18:43:dc:12:f7:9b:51:19:0f:38:a4:1c:d7:1a:da:
ce:50:85:bc:82:2e:2b:de:38:95:01:47:60:a9:14:
83:cd:5c:f4:b8:59:87:2a:21:df:6a:19:b6:88:42:
48:c2:55:2a:ef:98:8e:de:2e:47:6f:55:e9:62:1e:
d8:80:e7:95:0f:6b:78:6e:61:6a:f6:f3:56:a1:cb:
47:4d:e0:78:b7:bd:fe:ff:7e:ff:8c:10:f2:65:a2:
ca:cc:ba:d2:ea:d2:b4:77:f5:87:50:bb:15:fb:64:
9e:01:8f:a6:4e:8b:d0:02:ce:9e:73:dc:a4:54:53:
15:ff:74:61:7c:0a:5b:79:25:58:ce:8c:12:8b:d7:
50:af:83:09:57:9f:27:60:68:60:2e:f5:e0:ea:1b:
5c:de:92:36:cd:0b:84:16:37:58:8f:c3:bd:7c:2e:
43:ca:c4:77:1e:30:d0:71:a7:b9:04:b7:28:e7:e4:
41:11:af:c1:58:cb:3f:f2:df:c6:7d:c6:0e:9b:05:
89:15:78:b8:ed:d0:9b:fa:a3:f2:d1:ab:08:03:d4:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:22:DB:B6:C3:E1:1F:03:77:03:DD:50:AD:28:29:7E:17:BC:8B
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/v5Ii27bD4R8DdwPdUK0oKX4XvIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.138.0/23
185.137.111.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b5:56:b3:53:57:a6:a8:b1:3a:f5:c7:d4:37:c1:91:c0:f6:
f7:52:28:91:2a:3f:d4:c7:8a:7c:db:46:43:82:47:a5:2d:49:
44:aa:78:8b:d1:e0:4a:c0:e0:b1:84:73:4b:c5:90:2b:d4:b2:
44:8d:da:33:c9:09:12:62:47:76:f2:ec:27:31:f0:b9:a3:fd:
bf:75:69:90:d2:6c:3d:8d:e3:ed:bc:cf:35:1f:da:29:16:e1:
5c:87:6d:21:f2:fa:9a:21:e9:62:fb:1c:14:f2:2a:c0:3b:6e:
6d:ec:c5:c5:ea:68:b5:77:e4:c3:79:5b:11:a5:bb:47:1b:1c:
50:30:6c:e0:3d:2e:dd:b7:2f:43:89:3e:a1:cc:3b:d5:44:c9:
ca:7d:da:d2:21:a6:3b:21:0d:11:1e:44:73:9d:df:d3:5d:2b:
5a:77:98:f6:83:1d:08:27:86:5f:4e:da:ce:f4:cf:03:62:2c:
e1:00:52:af:2d:05:47:0d:75:fe:1c:0a:80:96:98:80:bc:1f:
2a:3d:0f:f6:0e:b0:a7:38:c0:92:6a:37:22:0a:c2:8b:ff:f3:
33:90:e6:f9:3f:af:5b:3c:8f:13:dc:4a:67:b6:e0:85:13:a5:
27:82:f2:7e:62:48:a6:12:1f:c3:7e:90:50:c2:cc:02:0e:e8:
f4:f5:0b:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSyO/0VSaSmpSflWxTBZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRkYWUwNGRiY2IxZjgyZjU1YjA3ODMwN2JhNGIwODRi
OTk0YmIwHhcNMjQwMTAxMTgzMTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjkyMjJkYmI2YzNlMTFmMDM3NzAzZGQ1MGFkMjgyOTdlMTdiYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktLPi+sFBIP/gi4pP97fb5XPRBNd
HNkASdx1rgMygWkxVgv2JpPELDt6DeQYQ9wS95tRGQ84pBzXGtrOUIW8gi4r3jiV
AUdgqRSDzVz0uFmHKiHfahm2iEJIwlUq75iO3i5Hb1XpYh7YgOeVD2t4bmFq9vNW
octHTeB4t73+/37/jBDyZaLKzLrS6tK0d/WHULsV+2SeAY+mTovQAs6ec9ykVFMV
/3RhfApbeSVYzowSi9dQr4MJV58nYGhgLvXg6htc3pI2zQuEFjdYj8O9fC5DysR3
HjDQcae5BLco5+RBEa/BWMs/8t/GfcYOmwWJFXi47dCb+qPy0asIA9QNVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL+SItu2w+EfA3cD3VCtKCl+F7yLMB8GA1UdIwQY
MBaAFCa92uBNvLH4L1WweDB7pLCEuZS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAt
ZjYxNzlhOTEwYjE1LzEvdjVJaTI3YkQ0UjhEZHdQZFVLMG9LWDRYdklzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAtZjYxNzlhOTEwYjE1
LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZ+eKAwQA
uYlvMA0GCSqGSIb3DQEBCwUAA4IBAQCVtVazU1emqLE69cfUN8GRwPb3UiiRKj/U
x4p820ZDgkelLUlEqniL0eBKwOCxhHNLxZAr1LJEjdozyQkSYkd28uwnMfC5o/2/
dWmQ0mw9jePtvM81H9opFuFch20h8vqaIeli+xwU8irAO25t7MXF6mi1d+TDeVsR
pbtHGxxQMGzgPS7dty9DiT6hzDvVRMnKfdrSIaY7IQ0RHkRznd/TXStad5j2gx0I
J4ZfTtrO9M8DYizhAFKvLQVHDXX+HAqAlpiAvB8qPQ/2DrCnOMCSajciCsKL//Mz
kOb5P69bPI8T3EpntuCFE6UngvJ+YkimEh/DfpBQwswCDuj09QuX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:36 2024 by rpki-client on console-fra.rpki-client.org