Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/eik62_Ia5oS9pKYvLAWKZ-XNBkY.roa
File: eik62_Ia5oS9pKYvLAWKZ-XNBkY.roa (raw, json)
Hash identifier: bR9aFLB1k1vy29U4s1NoOP2yfwwWO6q5KJ6YU99U2z4=
Subject key identifier: 7A:29:3A:DB:F2:1A:E6:84:BD:A4:A6:2F:2C:05:8A:67:E5:CD:06:46
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01928C83F8309287D7E5501ACFE42E7559AC
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/eik62_Ia5oS9pKYvLAWKZ-XNBkY.roa
Signing time: Mon 14 Oct 2024 19:31:51 +0000
ROA not before: Mon 14 Oct 2024 19:31:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216167
IP address blocks: 103.102.230.0/24 maxlen: 24
203.55.81.0/24 maxlen: 24
2a13:c7c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 26 Oct 2024 13:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8c:83:f8:30:92:87:d7:e5:50:1a:cf:e4:2e:75:59:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 14 19:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a293adbf21ae684bda4a62f2c058a67e5cd0646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:bb:45:84:8d:d8:85:a7:b0:7f:05:ad:43:
9c:78:49:88:b5:a5:ca:75:49:29:89:6e:8c:fd:62:
0a:13:be:d4:47:73:39:c2:e4:fe:f4:75:a4:4a:92:
9c:f9:a7:c2:b7:36:8a:65:b4:03:6e:ab:d2:20:e9:
23:a8:50:5f:db:a5:1f:2c:48:39:e4:73:cb:4a:3f:
a4:c6:52:53:21:83:ac:d8:54:f4:d5:b4:60:fb:fc:
ed:ab:17:f3:4a:6b:a9:32:c6:14:4d:26:21:db:e0:
65:66:98:fa:2f:b1:ab:f1:d1:59:d1:b2:c0:13:29:
0b:71:dd:c5:ac:67:79:c9:a0:dc:be:52:25:3d:5b:
63:7d:e8:17:f9:7e:7e:da:d0:41:22:d9:50:5e:fd:
d3:69:90:76:4f:1a:d9:1c:e5:60:17:b9:a9:70:73:
1c:96:7a:2a:7c:8d:2e:c5:94:87:19:e1:1c:25:a0:
17:a6:11:ee:4e:59:3f:65:4d:83:d1:b6:05:36:a8:
97:d9:ef:55:74:fb:fa:1d:f9:34:f0:6d:42:1c:ee:
3d:ac:b3:cc:77:33:96:a2:a9:57:e5:c0:5e:d3:89:
62:9c:ed:e7:6f:00:54:c4:fc:3d:db:75:c6:3a:86:
92:a8:22:6f:ce:64:a0:80:62:9d:fa:2a:25:52:d2:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:3A:DB:F2:1A:E6:84:BD:A4:A6:2F:2C:05:8A:67:E5:CD:06:46
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/eik62_Ia5oS9pKYvLAWKZ-XNBkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
203.55.81.0/24
IPv6:
2a13:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
06:8a:a1:23:07:33:f1:93:fa:e5:16:47:1c:8f:92:67:ba:6c:
04:3d:f8:f5:ad:93:a5:3b:a4:06:2c:48:cf:8f:3e:21:77:de:
82:2c:de:10:93:c0:e9:06:b6:1e:5b:1d:8b:1f:df:3e:1f:71:
9d:81:52:b7:b3:19:4c:6e:bd:61:25:3d:bb:14:a7:dc:01:14:
d1:db:11:71:de:86:f9:d7:31:bc:db:b0:88:7c:4d:42:e9:49:
87:20:33:42:f5:92:3f:12:7a:66:25:17:74:a1:4d:1a:c7:0a:
93:9d:09:00:ba:e1:dd:54:8d:eb:08:a6:70:c8:43:8c:3f:c3:
5d:e8:0a:fb:45:bd:fc:ac:41:5f:db:45:60:fa:af:a8:7f:ac:
64:85:86:04:77:ca:ee:23:46:57:7e:0c:53:5e:33:59:fd:8e:
17:a9:64:53:31:8c:74:f6:63:25:80:83:2a:5e:93:1d:96:a1:
66:6f:fe:64:8e:62:aa:8a:87:57:42:5c:a2:5e:7b:90:38:5f:
59:f1:96:5d:75:ae:ca:d5:aa:4f:81:a7:45:70:2f:26:0b:76:
fd:7c:44:9e:dc:5c:e1:4c:52:fa:fd:6f:2d:ca:d0:60:d4:89:
fc:df:42:92:53:71:d2:c7:bf:69:15:61:4e:8d:37:87:b8:c7:
25:5f:fd:98
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZKMg/gwkofX5VAaz+QudVmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh
ZjZkYzQwHhcNMjQxMDE0MTkzMTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTI5M2FkYmYyMWFlNjg0YmRhNGE2MmYyYzA1OGE2N2U1Y2QwNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBi7RYSN2IWnsH8FrUOceEmItaXK
dUkpiW6M/WIKE77UR3M5wuT+9HWkSpKc+afCtzaKZbQDbqvSIOkjqFBf26UfLEg5
5HPLSj+kxlJTIYOs2FT01bRg+/ztqxfzSmupMsYUTSYh2+BlZpj6L7Gr8dFZ0bLA
EykLcd3FrGd5yaDcvlIlPVtjfegX+X5+2tBBItlQXv3TaZB2TxrZHOVgF7mpcHMc
lnoqfI0uxZSHGeEcJaAXphHuTlk/ZU2D0bYFNqiX2e9VdPv6Hfk08G1CHO49rLPM
dzOWoqlX5cBe04linO3nbwBUxPw923XGOoaSqCJvzmSggGKd+iolUtJiLQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHopOtvyGuaEvaSmLywFimflzQZGMB8GA1UdIwQY
MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt
ZTUyNmE5NDA5ZmI4LzEvZWlrNjJfSWE1b1M5cEtZdkxBV0taLVhOQmtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4
LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAZ2bmAwQA
yzdRMA0EAgACMAcDBQAqE8fAMA0GCSqGSIb3DQEBCwUAA4IBAQAGiqEjBzPxk/rl
Fkccj5JnumwEPfj1rZOlO6QGLEjPjz4hd96CLN4Qk8DpBrYeWx2LH98+H3GdgVK3
sxlMbr1hJT27FKfcARTR2xFx3ob51zG827CIfE1C6UmHIDNC9ZI/EnpmJRd0oU0a
xwqTnQkAuuHdVI3rCKZwyEOMP8Nd6Ar7Rb38rEFf20Vg+q+of6xkhYYEd8ruI0ZX
fgxTXjNZ/Y4XqWRTMYx09mMlgIMqXpMdlqFmb/5kjmKqiodXQlyiXnuQOF9Z8ZZd
da7K1apPgadFcC8mC3b9fESe3FzhTFL6/W8tytBg1In830KSU3HSx79pFWFOjTeH
uMclX/2Y
-----END CERTIFICATE-----
Generated at Wed Apr 16 07:29:57 2025 by rpki-client