Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dsTXGntY2kjBJkNUSEAUKgkrmoI.roa
File: dsTXGntY2kjBJkNUSEAUKgkrmoI.roa (raw, json)
Hash identifier: v5nDuzbmiR0/17pDf7kIEZ3hQ1mQU1SyUnIoETXbsUk=
Subject key identifier: 76:C4:D7:1A:7B:58:DA:48:C1:26:43:54:48:40:14:2A:09:2B:9A:82
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01882F92425AB2D22D86DFDD595AFB01058B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dsTXGntY2kjBJkNUSEAUKgkrmoI.roa
Signing time: Thu 18 May 2023 15:54:54 +0000
ROA not before: Thu 18 May 2023 15:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198834
IP address blocks: 103.47.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:92:42:5a:b2:d2:2d:86:df:dd:59:5a:fb:01:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 18 15:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76c4d71a7b58da48c12643544840142a092b9a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:e6:24:e6:0f:5c:c1:2e:d6:e7:63:b2:9a:
53:93:a4:1a:de:21:f4:17:60:e4:1a:c0:34:2c:46:
a4:27:e7:7d:5a:f0:3e:a0:63:01:a5:a3:9b:44:02:
6e:35:86:8b:03:ca:45:93:f2:f0:1f:da:61:13:92:
e2:02:44:6c:d5:eb:20:b5:5b:ba:ae:3a:a4:9f:d8:
b4:dd:77:a8:36:4b:e0:5a:14:4a:0a:09:58:1d:c9:
8a:12:3c:34:bc:b0:9f:14:96:3d:34:81:a3:f7:e6:
2e:ee:89:61:d9:10:70:ce:a2:69:17:b2:42:16:3a:
75:61:f9:3d:9b:79:22:1c:f2:5f:82:78:9c:af:a3:
f7:c8:4b:e4:0f:e5:e2:45:a2:9a:c8:8e:a1:52:61:
70:e7:30:86:4a:1a:13:da:a9:91:be:ff:25:88:f6:
a3:7f:7a:72:fa:fc:87:07:72:e8:e8:bb:7a:fa:20:
17:64:f6:b6:bb:79:19:ee:1b:30:78:d2:0a:b5:63:
17:7e:73:5e:5c:f7:a2:c9:ca:71:72:bf:6b:ab:a2:
95:6f:d2:8b:cf:76:c2:e4:7c:04:ed:16:88:f4:b6:
9b:85:21:8f:82:d4:4b:e7:ca:4f:2d:9a:90:58:b8:
bd:f1:d0:03:29:d8:67:dc:73:30:75:6f:49:88:3f:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C4:D7:1A:7B:58:DA:48:C1:26:43:54:48:40:14:2A:09:2B:9A:82
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dsTXGntY2kjBJkNUSEAUKgkrmoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
23:77:b9:f9:92:55:76:94:02:c8:0e:fb:e9:9e:55:01:0a:63:
4e:9b:61:45:fd:54:8a:ff:71:ef:c4:ad:3b:09:64:1d:e6:29:
bb:c4:d5:46:49:30:d2:55:56:06:37:c3:c4:79:58:f4:a7:70:
77:f3:a0:33:a5:41:61:00:55:99:59:85:3c:7a:9b:58:2b:55:
aa:73:17:4c:d9:2d:78:7b:d7:bb:f5:df:14:1d:9e:63:f7:02:
51:80:b3:be:31:84:7d:df:ec:6e:f3:fb:9c:4e:c5:61:da:48:
d9:3f:12:a2:48:15:ec:17:ac:44:86:c6:ab:99:23:86:76:47:
61:b7:a0:99:60:76:ac:82:62:eb:98:0a:ec:42:ec:25:a9:27:
0d:83:b5:5d:a5:e0:ab:b1:1a:1c:f2:a1:06:59:74:86:7e:0c:
5c:9b:73:7a:3e:d6:87:36:63:3f:de:0f:82:7d:4b:d1:99:70:
f5:70:67:97:56:93:e7:f1:0e:0a:e9:ea:d5:80:63:2c:dc:a0:
05:25:88:f5:b2:04:39:39:1b:db:ed:b5:70:dd:1c:03:64:4e:
0c:74:bb:45:b0:ca:2d:09:9f:e2:c0:4b:cd:5a:db:8a:56:ba:
93:dd:0e:a8:3c:88:a8:56:2d:59:83:7b:d1:67:6f:66:2c:e2:
df:01:cd:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgvkkJastItht/dWVr7AQWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwNTE4MTU1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmM0ZDcxYTdiNThkYTQ4YzEyNjQzNTQ0ODQwMTQyYTA5MmI5YTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo77mJOYPXMEu1udjsppTk6Qa3iH0
F2DkGsA0LEakJ+d9WvA+oGMBpaObRAJuNYaLA8pFk/LwH9phE5LiAkRs1esgtVu6
rjqkn9i03XeoNkvgWhRKCglYHcmKEjw0vLCfFJY9NIGj9+Yu7olh2RBwzqJpF7JC
Fjp1Yfk9m3kiHPJfgnicr6P3yEvkD+XiRaKayI6hUmFw5zCGShoT2qmRvv8liPaj
f3py+vyHB3Lo6Lt6+iAXZPa2u3kZ7hsweNIKtWMXfnNeXPeiycpxcr9rq6KVb9KL
z3bC5HwE7RaI9LabhSGPgtRL58pPLZqQWLi98dADKdhn3HMwdW9JiD+1IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHbE1xp7WNpIwSZDVEhAFCoJK5qCMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvZHNUWEdudFkya2pCSmtOVVNFQVVLZ2tybW9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZy84MA0G
CSqGSIb3DQEBCwUAA4IBAQAjd7n5klV2lALIDvvpnlUBCmNOm2FF/VSK/3HvxK07
CWQd5im7xNVGSTDSVVYGN8PEeVj0p3B386AzpUFhAFWZWYU8eptYK1WqcxdM2S14
e9e79d8UHZ5j9wJRgLO+MYR93+xu8/ucTsVh2kjZPxKiSBXsF6xEhsarmSOGdkdh
t6CZYHasgmLrmArsQuwlqScNg7VdpeCrsRoc8qEGWXSGfgxcm3N6PtaHNmM/3g+C
fUvRmXD1cGeXVpPn8Q4K6erVgGMs3KAFJYj1sgQ5ORvb7bVw3RwDZE4MdLtFsMot
CZ/iwEvNWtuKVrqT3Q6oPIioVi1Zg3vRZ29mLOLfAc3q
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net