Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wAFa2my7gIh_6Hb77lRPtEZ-FZ4.roa
File: wAFa2my7gIh_6Hb77lRPtEZ-FZ4.roa (raw, json)
Hash identifier: buMpO5EoSi387iByCY4xhaZ/C+9KucJ9aT8l+FDO/G0=
Subject key identifier: C0:01:5A:DA:6C:BB:80:88:7F:E8:76:FB:EE:54:4F:B4:46:7E:15:9E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0187C869ACBB599DBB98C2894AEF70901198
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wAFa2my7gIh_6Hb77lRPtEZ-FZ4.roa
Signing time: Fri 28 Apr 2023 15:09:41 +0000
ROA not before: Fri 28 Apr 2023 15:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 103.47.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:69:ac:bb:59:9d:bb:98:c2:89:4a:ef:70:90:11:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 28 15:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0015ada6cbb80887fe876fbee544fb4467e159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:83:19:fe:bc:4b:f5:35:0e:f9:1b:fe:36:
48:ce:8d:e9:b3:a2:40:29:3d:ec:6f:63:5c:79:9c:
87:67:a1:68:98:f6:d9:2b:57:19:19:0a:1c:c4:68:
62:0c:08:c5:d1:b5:34:4c:2a:63:e0:9c:23:1d:2a:
8e:c3:5b:29:46:39:d9:c4:8c:78:49:ca:3a:75:00:
18:74:4d:bd:54:19:ff:f3:f4:5c:49:a2:0d:7f:bd:
21:8a:c7:22:18:89:d4:01:b8:7b:79:85:d0:47:2a:
39:10:43:d1:e9:68:62:4f:82:15:b9:2c:15:03:f9:
35:28:24:a9:b3:b4:92:9a:24:8b:62:8a:63:2d:f1:
d3:01:47:66:f3:10:6a:36:67:9c:c3:a7:3f:a7:26:
20:14:d2:f5:cc:7f:a7:0d:4f:48:fd:67:72:cf:89:
d7:ed:88:11:d8:ac:3b:8e:46:cd:35:03:36:ff:27:
60:a7:78:7c:3a:a1:f1:8b:3f:46:1d:9e:be:4b:73:
f7:4c:f1:9a:dc:36:40:2f:d5:b0:0e:2e:7a:e8:f9:
c8:4a:7f:0c:27:a1:e4:79:14:73:d6:63:fd:d2:bd:
c0:fd:55:25:3c:b3:fa:61:f5:35:a3:26:08:20:58:
82:ad:a2:b2:e0:ac:aa:64:ee:23:07:87:40:48:99:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:01:5A:DA:6C:BB:80:88:7F:E8:76:FB:EE:54:4F:B4:46:7E:15:9E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wAFa2my7gIh_6Hb77lRPtEZ-FZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:09:91:a9:25:fb:9e:4d:37:b0:13:77:1f:c7:09:13:6c:60:
6e:39:cd:7c:2d:3b:a9:91:f7:d1:cc:9d:c0:86:79:38:12:05:
c4:f9:5f:e4:ad:9b:2c:d6:84:35:0a:4b:d0:2d:cb:be:da:fd:
1c:d1:07:94:58:82:25:d1:be:0e:5d:8d:5b:91:e5:93:0a:d2:
e7:52:f3:08:ea:5a:64:bc:99:65:39:cd:9f:ca:e6:eb:3d:9e:
b6:cf:8a:a6:9c:ca:7a:e6:a2:f7:e5:1d:62:d4:92:13:de:14:
fb:ec:88:13:3d:7b:4a:a3:40:16:71:68:21:a3:4d:97:c7:38:
98:07:30:63:48:27:a6:17:ec:ea:29:08:fb:59:ef:0d:7a:7c:
98:6f:30:8e:e8:50:a5:0c:f8:85:93:1d:4a:1d:57:a9:ef:f8:
f7:11:92:53:62:e3:e2:4c:fb:e3:4f:ae:53:2b:10:e6:f7:1c:
9a:79:f5:2a:20:7b:da:32:2d:98:b8:53:90:57:f3:d1:3a:31:
5c:51:54:35:b5:e0:a1:a4:14:a5:14:4a:d0:62:41:7d:83:ef:
d1:7c:34:8d:28:2d:21:22:b2:67:1e:e9:ce:6e:b4:d7:0d:58:
60:e8:2a:1f:01:45:8c:0e:ec:d8:e9:9f:85:94:03:a2:a0:3e:
91:29:52:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfIaay7WZ27mMKJSu9wkBGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwNDI4MTUwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDAxNWFkYTZjYmI4MDg4N2ZlODc2ZmJlZTU0NGZiNDQ2N2UxNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpqDGf68S/U1Dvkb/jZIzo3ps6JA
KT3sb2NceZyHZ6FomPbZK1cZGQocxGhiDAjF0bU0TCpj4JwjHSqOw1spRjnZxIx4
Sco6dQAYdE29VBn/8/RcSaINf70hisciGInUAbh7eYXQRyo5EEPR6WhiT4IVuSwV
A/k1KCSps7SSmiSLYopjLfHTAUdm8xBqNmecw6c/pyYgFNL1zH+nDU9I/Wdyz4nX
7YgR2Kw7jkbNNQM2/ydgp3h8OqHxiz9GHZ6+S3P3TPGa3DZAL9WwDi566PnISn8M
J6HkeRRz1mP90r3A/VUlPLP6YfU1oyYIIFiCraKy4KyqZO4jB4dASJkhzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMABWtpsu4CIf+h2++5UT7RGfhWeMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvd0FGYTJteTdnSWhfNkhiNzdsUlB0RVotRlo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZy85MA0G
CSqGSIb3DQEBCwUAA4IBAQCuCZGpJfueTTewE3cfxwkTbGBuOc18LTupkffRzJ3A
hnk4EgXE+V/krZss1oQ1CkvQLcu+2v0c0QeUWIIl0b4OXY1bkeWTCtLnUvMI6lpk
vJllOc2fyubrPZ62z4qmnMp65qL35R1i1JIT3hT77IgTPXtKo0AWcWgho02XxziY
BzBjSCemF+zqKQj7We8NenyYbzCO6FClDPiFkx1KHVep7/j3EZJTYuPiTPvjT65T
KxDm9xyaefUqIHvaMi2YuFOQV/PROjFcUVQ1teChpBSlFErQYkF9g+/RfDSNKC0h
IrJnHunObrTXDVhg6CofAUWMDuzY6Z+FlAOioD6RKVIp
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org