Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H0eOt4Raj_hHviYOOwKRv-EKAoU.roa
File: H0eOt4Raj_hHviYOOwKRv-EKAoU.roa (raw, json)
Hash identifier: cb1+YusMgZxrF9R4P5FAo95IkKQhJWuy/jhO6p7Vkv0=
Subject key identifier: 1F:47:8E:B7:84:5A:8F:F8:47:BE:26:0E:3B:02:91:BF:E1:0A:02:85
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018D762A3EA93EECE4EF2F5718600B99F0EE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H0eOt4Raj_hHviYOOwKRv-EKAoU.roa
Signing time: Sun 04 Feb 2024 22:08:16 +0000
ROA not before: Sun 04 Feb 2024 22:08:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210164
IP address blocks: 103.47.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 22:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:76:2a:3e:a9:3e:ec:e4:ef:2f:57:18:60:0b:99:f0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 4 22:08:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f478eb7845a8ff847be260e3b0291bfe10a0285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:33:4a:f4:e0:d5:b8:30:a3:5e:6c:ee:76:
e2:16:cb:35:c8:f1:5c:2c:d5:3c:e6:95:ba:b7:78:
c0:0c:b6:4e:5c:16:91:e2:ba:07:7c:a6:92:57:12:
0f:39:4b:75:01:96:49:2a:1e:b7:0e:16:fc:0a:1f:
50:f8:7e:e0:82:51:c8:d3:0e:0f:cc:a2:39:e4:cb:
f0:ea:58:30:8d:39:e1:00:ad:65:09:f9:82:b5:91:
8d:b6:36:d2:be:dc:b8:d4:be:1b:37:fe:96:53:22:
3a:25:93:e3:b0:a0:ac:e2:af:66:4f:75:17:e8:12:
91:d9:f3:d7:4f:6a:a9:9b:87:cd:78:27:91:55:49:
5e:19:c5:bf:ab:86:16:ac:53:52:9e:10:64:ab:84:
52:2d:d0:8b:2f:f1:36:05:a7:8b:63:f5:9e:ed:2e:
dd:01:a5:64:b3:a4:d2:e6:73:43:38:65:5a:08:c2:
ea:f9:33:53:6b:db:37:5f:e7:f9:9b:58:61:4a:00:
cf:b3:76:52:8c:0c:03:67:ff:7d:fb:3c:5f:f5:c9:
4d:3d:bf:65:aa:c8:38:73:c5:89:1b:c9:b2:45:9c:
fa:92:70:98:5a:35:89:56:1d:8b:b6:c4:2b:f2:23:
70:6c:52:e1:f0:d9:af:7f:7a:2b:51:dd:f2:53:71:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:47:8E:B7:84:5A:8F:F8:47:BE:26:0E:3B:02:91:BF:E1:0A:02:85
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H0eOt4Raj_hHviYOOwKRv-EKAoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:29:ef:af:9e:30:5a:40:0e:13:3d:48:ee:a1:4e:d2:11:21:
eb:52:9d:ea:a8:c4:2c:a4:74:53:4d:ae:43:23:34:4f:16:7f:
e8:f0:c0:ee:f7:59:bf:95:19:88:c7:a0:76:39:12:a4:a2:c7:
8a:60:30:6c:80:b9:ab:e9:35:68:10:94:83:b7:86:85:da:dc:
b2:d1:3d:99:22:8b:16:7b:cf:fb:2e:65:fb:c1:df:1e:c6:1e:
b8:b7:17:e1:ad:61:41:34:f9:88:13:ba:d2:47:9c:1a:9b:18:
09:b5:44:aa:60:66:ad:97:89:46:d1:1d:58:28:de:93:3f:26:
60:00:d1:36:fc:13:57:f0:60:1f:b1:10:32:45:d3:5b:d2:be:
53:bb:e1:75:f5:e8:ab:6f:3d:b9:72:a8:89:07:f4:46:d8:0d:
4f:07:bc:2e:4c:bc:ee:df:d2:ed:fc:12:ee:03:4a:5d:ef:04:
56:76:97:9a:46:8b:03:bb:53:07:28:af:a5:41:c5:29:49:37:
07:dd:f3:eb:a7:46:24:28:a1:29:17:8e:38:0f:be:6a:fb:52:
3f:f5:13:91:da:83:ea:70:00:b1:5e:78:5d:a1:26:1c:66:b7:
1d:d6:ea:cb:e0:75:c7:4e:3f:64:fc:e5:e6:6f:9a:5e:37:40:
9d:0e:45:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY12Kj6pPuzk7y9XGGALmfDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQwMjA0MjIwODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjQ3OGViNzg0NWE4ZmY4NDdiZTI2MGUzYjAyOTFiZmUxMGEwMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/AzSvTg1bgwo15s7nbiFss1yPFc
LNU85pW6t3jADLZOXBaR4roHfKaSVxIPOUt1AZZJKh63Dhb8Ch9Q+H7gglHI0w4P
zKI55Mvw6lgwjTnhAK1lCfmCtZGNtjbSvty41L4bN/6WUyI6JZPjsKCs4q9mT3UX
6BKR2fPXT2qpm4fNeCeRVUleGcW/q4YWrFNSnhBkq4RSLdCLL/E2BaeLY/We7S7d
AaVks6TS5nNDOGVaCMLq+TNTa9s3X+f5m1hhSgDPs3ZSjAwDZ/99+zxf9clNPb9l
qsg4c8WJG8myRZz6knCYWjWJVh2LtsQr8iNwbFLh8Nmvf3orUd3yU3Gz9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9HjreEWo/4R74mDjsCkb/hCgKFMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvSDBlT3Q0UmFqX2hIdmlZT093S1J2LUVLQW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZy87MA0G
CSqGSIb3DQEBCwUAA4IBAQDgKe+vnjBaQA4TPUjuoU7SESHrUp3qqMQspHRTTa5D
IzRPFn/o8MDu91m/lRmIx6B2ORKkoseKYDBsgLmr6TVoEJSDt4aF2tyy0T2ZIosW
e8/7LmX7wd8exh64txfhrWFBNPmIE7rSR5wamxgJtUSqYGatl4lG0R1YKN6TPyZg
ANE2/BNX8GAfsRAyRdNb0r5Tu+F19eirbz25cqiJB/RG2A1PB7wuTLzu39Lt/BLu
A0pd7wRWdpeaRosDu1MHKK+lQcUpSTcH3fPrp0YkKKEpF444D75q+1I/9ROR2oPq
cACxXnhdoSYcZrcd1urL4HXHTj9k/OXmb5peN0CdDkWA
-----END CERTIFICATE-----
Generated at Mon May 12 19:04:43 2025 by rpki-client