Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/IaxTbW8AdIMaAE3WBjCx-istB14.roa
File: IaxTbW8AdIMaAE3WBjCx-istB14.roa (raw, json)
Hash identifier: o/jDOrzoi39wc9+XSJEfQgTg/MJDWfp5p2YDkEAJIz0=
Subject key identifier: 21:AC:53:6D:6F:00:74:83:1A:00:4D:D6:06:30:B1:FA:2B:2D:07:5E
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018EF204366EB57A6B42289630280E2BDF5C
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/IaxTbW8AdIMaAE3WBjCx-istB14.roa
Signing time: Thu 18 Apr 2024 16:22:26 +0000
ROA not before: Thu 18 Apr 2024 16:22:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 15:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:04:36:6e:b5:7a:6b:42:28:96:30:28:0e:2b:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Apr 18 16:22:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21ac536d6f0074831a004dd60630b1fa2b2d075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:e6:ec:37:94:7a:09:9d:31:2c:c2:0c:d8:
12:46:17:a4:75:70:22:01:f1:3e:27:29:07:36:f6:
79:53:c9:99:5f:65:1c:a8:69:b2:de:42:42:4b:77:
9f:4b:8a:a5:ec:58:0c:db:d9:87:81:90:c1:29:46:
39:bc:85:27:a3:eb:04:7d:15:5d:94:94:c9:ed:f3:
b1:d8:1d:bf:9e:57:86:4f:8f:6a:a6:47:1b:15:5d:
15:b2:8b:a2:86:d7:6e:04:c6:e7:fc:94:af:91:38:
7d:9b:d7:fe:82:8a:6b:8f:71:b0:72:56:7d:46:52:
e1:b4:95:41:d0:d7:82:b9:39:23:40:9f:3e:c5:79:
4f:19:06:01:ee:34:9e:f4:4b:95:45:09:6e:09:b6:
75:09:f8:f2:7f:2e:b2:01:8c:67:31:3e:73:cb:d2:
c1:44:04:9b:ca:af:b4:c0:87:e2:42:bf:c1:8c:7c:
13:55:8a:66:8c:cb:e9:8e:f0:6e:61:ac:75:e2:6e:
ff:53:09:21:70:50:65:f3:0e:f8:cd:f8:37:78:18:
26:9e:f7:ca:a7:eb:69:e1:6c:e8:a4:70:58:ba:f2:
55:c9:32:94:5e:60:06:2d:56:68:39:0f:9a:44:41:
cd:24:17:eb:a8:ec:fb:66:8d:d1:e3:86:ca:62:86:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AC:53:6D:6F:00:74:83:1A:00:4D:D6:06:30:B1:FA:2B:2D:07:5E
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/IaxTbW8AdIMaAE3WBjCx-istB14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:eb:b8:cb:dd:09:06:8e:69:86:af:6d:0d:91:c7:8d:21:db:
4c:9e:64:a8:d6:a7:cd:9e:e0:d0:9c:b6:9f:0c:e7:84:74:13:
d3:21:46:f8:a8:ae:c7:dd:93:f9:39:ec:41:c7:ea:2f:40:a4:
44:44:11:2a:37:fe:8a:41:fb:bd:7a:42:da:65:7b:43:82:23:
90:87:72:9f:e5:8c:bb:cd:3c:dd:92:df:bc:2e:02:f3:27:f4:
a7:29:0f:d3:91:99:6c:45:00:f8:35:8b:33:e1:30:32:38:33:
97:ac:68:49:26:ea:58:07:af:f0:80:d9:37:24:23:d2:23:53:
29:ec:b2:c8:ae:03:07:af:61:e7:5d:d6:53:5c:d2:3b:87:af:
fe:53:9d:a9:91:15:7c:b1:9b:b5:4d:82:43:2a:ed:62:33:30:
5d:3e:c5:27:22:98:2e:bd:3f:37:ad:78:07:8b:90:d6:5e:2c:
50:48:d8:89:51:c4:a0:a1:19:83:a4:6d:ae:3d:fd:08:41:83:
d8:44:96:60:ff:ae:22:78:bf:94:5b:03:4c:1f:57:d1:f3:fc:
19:6d:1b:8a:54:d9:2a:50:c2:c2:45:da:d1:1a:64:4c:c7:fc:
90:b1:40:52:01:27:18:b9:72:6b:81:57:d6:08:45:ef:a6:d1:
8d:e9:60:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7yBDZutXprQiiWMCgOK99cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh
ZjZkYzQwHhcNMjQwNDE4MTYyMjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWFjNTM2ZDZmMDA3NDgzMWEwMDRkZDYwNjMwYjFmYTJiMmQwNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtHm7DeUegmdMSzCDNgSRhekdXAi
AfE+JykHNvZ5U8mZX2UcqGmy3kJCS3efS4ql7FgM29mHgZDBKUY5vIUno+sEfRVd
lJTJ7fOx2B2/nleGT49qpkcbFV0VsouihtduBMbn/JSvkTh9m9f+goprj3GwclZ9
RlLhtJVB0NeCuTkjQJ8+xXlPGQYB7jSe9EuVRQluCbZ1Cfjyfy6yAYxnMT5zy9LB
RASbyq+0wIfiQr/BjHwTVYpmjMvpjvBuYax14m7/UwkhcFBl8w74zfg3eBgmnvfK
p+tp4WzopHBYuvJVyTKUXmAGLVZoOQ+aREHNJBfrqOz7Zo3R44bKYoYKIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGsU21vAHSDGgBN1gYwsforLQdeMB8GA1UdIwQY
MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt
ZTUyNmE5NDA5ZmI4LzEvSWF4VGJXOEFkSU1hQUUzV0JqQ3gtaXN0QjE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4
LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2bmMA0G
CSqGSIb3DQEBCwUAA4IBAQCN67jL3QkGjmmGr20NkceNIdtMnmSo1qfNnuDQnLaf
DOeEdBPTIUb4qK7H3ZP5OexBx+ovQKRERBEqN/6KQfu9ekLaZXtDgiOQh3Kf5Yy7
zTzdkt+8LgLzJ/SnKQ/TkZlsRQD4NYsz4TAyODOXrGhJJupYB6/wgNk3JCPSI1Mp
7LLIrgMHr2HnXdZTXNI7h6/+U52pkRV8sZu1TYJDKu1iMzBdPsUnIpguvT83rXgH
i5DWXixQSNiJUcSgoRmDpG2uPf0IQYPYRJZg/64ieL+UWwNMH1fR8/wZbRuKVNkq
UMLCRdrRGmRMx/yQsUBSAScYuXJrgVfWCEXvptGN6WAn
-----END CERTIFICATE-----
Generated at Wed Apr 16 07:20:44 2025 by rpki-client