Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9luUI4F2ZkU2H10qSf2hm_0U8-A.roa
File: 9luUI4F2ZkU2H10qSf2hm_0U8-A.roa (raw, json)
Hash identifier: SOefyAmYjvJ2w5ZkDGZO3Gqd1PW0dUXaIVy6Dq8ERxY=
Subject key identifier: F6:5B:94:23:81:76:66:45:36:1F:5D:2A:49:FD:A1:9B:FD:14:F3:E0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018DF2E1EA5DC9C1500C5985ADDA85CECE03
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9luUI4F2ZkU2H10qSf2hm_0U8-A.roa
Signing time: Thu 29 Feb 2024 03:21:48 +0000
ROA not before: Thu 29 Feb 2024 03:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210164
IP address blocks: 14.102.236.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 16:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:e1:ea:5d:c9:c1:50:0c:59:85:ad:da:85:ce:ce:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 29 03:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f65b942381766645361f5d2a49fda19bfd14f3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:e6:19:ba:94:ac:6a:d2:8e:17:dd:9c:2c:
0e:41:2c:65:ff:b6:9f:76:e9:53:3f:77:96:61:5d:
a5:22:bb:6a:73:b4:a4:bb:3b:b8:de:76:09:a9:68:
26:d3:ad:2c:fd:b8:e1:00:3b:23:af:c4:d9:be:ff:
b3:2c:52:94:1c:1d:13:e0:df:6e:d3:68:4a:4a:a3:
6a:71:4f:43:af:3c:dc:32:03:35:ae:43:12:01:ad:
e1:de:9d:38:79:4d:32:13:17:04:69:ab:41:3c:1e:
9b:d8:9c:91:4a:51:2b:df:c2:f8:88:90:f3:69:f9:
d6:d4:d7:fb:ca:24:ef:3e:ce:91:70:4b:31:72:ce:
e5:72:d4:96:b6:d7:c1:0f:2a:41:02:1e:72:d5:a5:
86:25:1c:b5:aa:10:78:d2:9f:0a:c2:89:7c:ae:1f:
7f:c8:cf:82:b0:c0:cb:b3:75:8b:22:dc:91:cb:f9:
01:aa:91:86:5e:26:ec:47:5c:e2:ec:d9:c0:db:17:
c5:2c:cc:16:5f:a2:d5:b3:19:aa:53:33:f5:6f:89:
51:76:8e:b2:40:64:f8:28:23:1c:d7:f7:bb:53:91:
b6:32:18:f3:30:48:3e:2d:77:b6:21:89:87:96:a8:
60:ea:01:de:d0:b6:42:2c:bb:d0:e2:b8:87:ae:04:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:94:23:81:76:66:45:36:1F:5D:2A:49:FD:A1:9B:FD:14:F3:E0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9luUI4F2ZkU2H10qSf2hm_0U8-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.236.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:20:89:ec:70:9c:6a:e6:56:db:9c:13:ea:ec:06:29:c4:04:
74:ab:7d:c6:8d:20:ae:40:e2:4e:e7:18:8c:be:87:01:4f:a6:
da:a9:88:f8:80:91:ed:e5:4d:da:18:63:fd:52:58:8f:7b:62:
89:ae:b0:71:c0:fc:06:d0:2f:11:fc:f9:4d:cb:30:00:57:c6:
d9:09:9c:76:a1:1f:2f:87:34:d0:62:70:f9:5e:62:b5:5f:4e:
1e:05:7c:bc:25:af:74:63:e4:e4:ca:fe:81:d4:45:41:a3:d3:
d8:02:f5:2f:27:5b:45:a5:cb:34:ee:8f:41:06:39:6d:c5:74:
0a:9f:44:71:46:94:21:f7:0d:5b:4c:92:2d:53:89:18:54:cc:
b6:2b:c5:fa:13:df:a3:6b:b2:2b:a9:ab:fa:d0:75:8b:27:ab:
93:06:7f:b4:e0:7b:e5:cb:67:f4:8d:0e:0c:51:fe:1e:57:a1:
5f:b4:2b:c9:fb:5d:52:62:89:3c:1e:e6:a3:a4:ac:3d:1b:d7:
cc:f5:57:8f:c3:ce:c1:4f:44:53:a2:c7:ef:af:3e:e6:63:d5:
7f:6c:0f:e1:c9:07:88:36:7f:e6:1c:8d:5a:63:7d:51:c1:d7:
7f:53:ad:c7:36:f7:c7:72:29:4a:ac:6e:c5:4f:85:c4:ce:3a:
85:c1:f9:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY3y4epdycFQDFmFrdqFzs4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQwMjI5MDMyMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjViOTQyMzgxNzY2NjQ1MzYxZjVkMmE0OWZkYTE5YmZkMTRmM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFfmGbqUrGrSjhfdnCwOQSxl/7af
dulTP3eWYV2lIrtqc7Skuzu43nYJqWgm060s/bjhADsjr8TZvv+zLFKUHB0T4N9u
02hKSqNqcU9DrzzcMgM1rkMSAa3h3p04eU0yExcEaatBPB6b2JyRSlEr38L4iJDz
afnW1Nf7yiTvPs6RcEsxcs7lctSWttfBDypBAh5y1aWGJRy1qhB40p8Kwol8rh9/
yM+CsMDLs3WLItyRy/kBqpGGXibsR1zi7NnA2xfFLMwWX6LVsxmqUzP1b4lRdo6y
QGT4KCMc1/e7U5G2MhjzMEg+LXe2IYmHlqhg6gHe0LZCLLvQ4riHrgQYhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPZblCOBdmZFNh9dKkn9oZv9FPPgMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvOWx1VUk0RjJaa1UySDEwcVNmMmhtXzBVOC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADmbsAwQA
Zy87MA0GCSqGSIb3DQEBCwUAA4IBAQB8IInscJxq5lbbnBPq7AYpxAR0q33GjSCu
QOJO5xiMvocBT6baqYj4gJHt5U3aGGP9UliPe2KJrrBxwPwG0C8R/PlNyzAAV8bZ
CZx2oR8vhzTQYnD5XmK1X04eBXy8Ja90Y+Tkyv6B1EVBo9PYAvUvJ1tFpcs07o9B
BjltxXQKn0RxRpQh9w1bTJItU4kYVMy2K8X6E9+ja7Irqav60HWLJ6uTBn+04Hvl
y2f0jQ4MUf4eV6FftCvJ+11SYok8HuajpKw9G9fM9VePw87BT0RTosfvrz7mY9V/
bA/hyQeINn/mHI1aY31Rwdd/U63HNvfHcilKrG7FT4XEzjqFwfn0
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:42 2025 by rpki-client