Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/QidpoUtnzoIDGTmAZDNuEWfFSxs.roa
File: QidpoUtnzoIDGTmAZDNuEWfFSxs.roa (raw, json)
Hash identifier: z/1PAy4s63rQRQRMJJgLAQslMRE5eNLFzQRa7gaGQJk=
Subject key identifier: 42:27:69:A1:4B:67:CE:82:03:19:39:80:64:33:6E:11:67:C5:4B:1B
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01928317DC2AE76512A6569313495335FAD7
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/QidpoUtnzoIDGTmAZDNuEWfFSxs.roa
Signing time: Sat 12 Oct 2024 23:37:11 +0000
ROA not before: Sat 12 Oct 2024 23:37:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216256
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 19:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:83:17:dc:2a:e7:65:12:a6:56:93:13:49:53:35:fa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 12 23:37:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=422769a14b67ce820319398064336e1167c54b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8d:69:48:ec:91:1f:65:23:83:ce:b4:fd:d5:
1f:f2:20:48:84:fe:9d:61:40:bd:03:e7:e3:d8:3b:
ad:92:66:dd:bd:d1:c0:32:3f:77:5f:cd:ee:03:f9:
53:ae:34:a6:b7:54:f1:26:36:4f:23:28:08:f7:d6:
7a:54:14:87:f9:fe:6f:75:b5:74:56:03:85:ca:a6:
3e:91:49:2e:85:01:c5:e5:33:07:fd:5e:17:c9:6e:
33:d8:25:eb:f6:82:aa:d8:5e:3e:f8:84:66:8b:20:
9a:6d:c4:bf:65:c8:ab:68:d9:42:93:87:55:7e:44:
6a:a5:8d:d7:dc:5d:8e:72:47:f8:88:cf:a9:80:40:
ad:c7:c3:85:72:9a:09:fb:ea:fe:dd:a8:83:f0:c4:
82:e5:e0:24:04:ae:d5:19:a8:84:a4:1e:4d:0e:6a:
47:6b:5f:2b:8d:ef:b6:35:11:0a:5b:e4:4e:06:90:
7c:16:c2:73:8d:81:ba:94:f8:55:47:81:29:eb:db:
5c:cc:c6:ab:01:cb:d6:64:54:32:6f:4d:ee:68:2a:
2c:52:e0:5a:20:bc:90:93:17:bb:11:0f:52:01:d5:
ea:7b:74:a1:50:29:ef:e7:97:7a:46:86:8b:0c:1d:
e4:a5:c2:07:3a:1b:b9:89:81:d3:47:06:15:58:0e:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:69:A1:4B:67:CE:82:03:19:39:80:64:33:6E:11:67:C5:4B:1B
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/QidpoUtnzoIDGTmAZDNuEWfFSxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e1:3a:cc:5b:1c:2a:a0:1f:43:d5:39:1a:91:e2:87:45:99:
a2:a4:bd:39:d5:24:64:57:0f:b7:25:da:27:6b:92:d4:7d:36:
25:d8:07:7a:07:d6:b1:c9:a3:e4:4e:69:fc:5f:4b:7b:14:46:
d1:b5:0c:3d:86:62:01:db:c9:50:24:ac:f4:46:d9:8d:3d:81:
f9:ef:e1:03:eb:69:46:c5:4d:42:8f:00:09:b7:d2:55:96:fc:
a0:7f:34:34:44:60:95:c4:58:c4:de:29:da:7a:63:71:cd:e5:
1a:50:f4:88:f9:6d:88:40:31:56:ac:34:a6:45:ee:3f:06:f8:
b5:f0:be:e0:80:a2:6f:a5:68:ee:91:d9:65:8e:53:81:7d:e7:
17:8b:07:18:fc:32:a6:a4:5a:56:38:47:17:1c:2f:56:50:20:
b2:62:c2:c5:af:25:9a:59:80:d0:89:0c:c1:59:f3:33:cf:c2:
90:ff:26:24:32:17:93:ed:0b:95:1a:98:11:e2:4f:c4:f1:eb:
df:61:53:e2:81:6d:18:80:58:af:8c:56:3d:9a:28:25:9e:2a:
85:de:32:88:ee:3b:26:6a:13:15:dc:ed:16:d7:f8:ad:72:06:
3e:2b:bf:bf:9f:73:b1:e6:ce:ae:7c:41:c2:3b:ac:5c:55:ef:
0a:b1:3a:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKDF9wq52USplaTE0lTNfrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh
ZjZkYzQwHhcNMjQxMDEyMjMzNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjI3NjlhMTRiNjdjZTgyMDMxOTM5ODA2NDMzNmUxMTY3YzU0YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Y1pSOyRH2Ujg860/dUf8iBIhP6d
YUC9A+fj2DutkmbdvdHAMj93X83uA/lTrjSmt1TxJjZPIygI99Z6VBSH+f5vdbV0
VgOFyqY+kUkuhQHF5TMH/V4XyW4z2CXr9oKq2F4++IRmiyCabcS/ZciraNlCk4dV
fkRqpY3X3F2Ockf4iM+pgECtx8OFcpoJ++r+3aiD8MSC5eAkBK7VGaiEpB5NDmpH
a18rje+2NREKW+ROBpB8FsJzjYG6lPhVR4Ep69tczMarAcvWZFQyb03uaCosUuBa
ILyQkxe7EQ9SAdXqe3ShUCnv55d6RoaLDB3kpcIHOhu5iYHTRwYVWA7VNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEInaaFLZ86CAxk5gGQzbhFnxUsbMB8GA1UdIwQY
MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt
ZTUyNmE5NDA5ZmI4LzEvUWlkcG9VdG56b0lER1RtQVpETnVFV2ZGU3hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4
LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2bmMA0G
CSqGSIb3DQEBCwUAA4IBAQBs4TrMWxwqoB9D1TkakeKHRZmipL051SRkVw+3Jdon
a5LUfTYl2Ad6B9axyaPkTmn8X0t7FEbRtQw9hmIB28lQJKz0RtmNPYH57+ED62lG
xU1CjwAJt9JVlvygfzQ0RGCVxFjE3inaemNxzeUaUPSI+W2IQDFWrDSmRe4/Bvi1
8L7ggKJvpWjukdlljlOBfecXiwcY/DKmpFpWOEcXHC9WUCCyYsLFryWaWYDQiQzB
WfMzz8KQ/yYkMheT7QuVGpgR4k/E8evfYVPigW0YgFivjFY9miglniqF3jKI7jsm
ahMV3O0W1/itcgY+K7+/n3Ox5s6ufEHCO6xcVe8KsTry
-----END CERTIFICATE-----
Generated at Wed Apr 16 07:47:27 2025 by rpki-client