Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZOP_8hAMKuKhU_edrzyLIOaRK0I.roa
File: ZOP_8hAMKuKhU_edrzyLIOaRK0I.roa (raw, json)
Hash identifier: 9I10knH/TzYOTqLPdM00+n+1M2bj3L3k7Ig8Is8LXvc=
Subject key identifier: 64:E3:FF:F2:10:0C:2A:E2:A1:53:F7:9D:AF:3C:8B:20:E6:91:2B:42
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9B629FAE219400107AA8309A2E16
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZOP_8hAMKuKhU_edrzyLIOaRK0I.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59253
IP address blocks: 103.145.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 17:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:62:9f:ae:21:94:00:10:7a:a8:30:9a:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64e3fff2100c2ae2a153f79daf3c8b20e6912b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:76:94:f1:f9:f5:51:79:66:1b:54:f9:d0:
07:31:69:aa:0a:a9:ea:21:79:ae:6e:bf:a1:aa:d7:
28:70:f6:bd:c9:b3:18:dc:d9:fd:73:18:06:ef:07:
7a:42:17:d9:aa:4d:e1:3f:40:6a:30:af:ca:a6:e6:
df:1a:11:db:6d:01:dc:2d:fb:a7:c4:cd:30:94:05:
8c:d3:ba:4a:d6:e3:4b:42:44:99:37:50:9b:11:a9:
90:b4:e7:a7:1f:0a:d0:2f:76:2a:3f:b6:7e:a8:5d:
71:8e:d5:23:13:0f:2b:de:e6:40:ec:bd:f9:0d:51:
70:93:59:6a:bf:dd:92:ee:ea:3c:ff:ee:32:78:27:
9c:9b:34:fc:55:25:f9:86:5b:b4:6a:a9:1f:ab:e8:
96:91:f5:f1:af:ac:f1:fb:2c:f5:98:fc:7e:3a:0c:
36:dd:7e:71:4f:d8:90:2d:75:0b:c1:6b:b3:ea:10:
27:92:cb:cc:90:3e:b7:66:0b:42:9f:ef:c3:7e:6b:
61:09:bd:37:3a:c2:59:f2:54:00:e0:ae:bc:8e:aa:
22:d6:53:0a:c4:2e:7a:4d:f4:56:02:58:40:8a:0e:
7d:3b:85:bf:5c:41:d3:59:ed:d4:7a:5e:41:df:b1:
11:7e:09:42:b9:38:4e:4d:b6:03:92:97:84:15:3d:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E3:FF:F2:10:0C:2A:E2:A1:53:F7:9D:AF:3C:8B:20:E6:91:2B:42
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZOP_8hAMKuKhU_edrzyLIOaRK0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.20.0/24
Signature Algorithm: sha256WithRSAEncryption
44:31:60:f7:59:37:44:5d:24:52:5c:28:55:05:d8:af:89:36:
13:e7:69:99:20:40:a7:db:d6:8c:de:9e:75:c4:db:64:1e:69:
63:af:ed:ec:ac:49:e5:88:3c:d6:72:3b:5e:8a:e9:9b:42:29:
53:65:03:8b:90:2d:4c:ba:21:f8:c1:34:51:ed:5a:ce:02:93:
f4:d0:78:be:23:22:d0:ee:a4:d9:75:66:22:86:14:1e:9a:6d:
55:ad:77:84:b2:ca:7a:0f:27:76:2a:39:8f:17:70:4f:be:cf:
1d:3b:e2:a4:1e:e9:87:2a:94:40:42:fd:c9:c6:e4:a3:c5:79:
ff:98:7c:26:e0:ca:a2:74:ec:75:2c:01:24:f3:d7:bf:d4:e3:
e4:c1:7a:a7:e1:0a:34:73:f8:f0:36:8e:9e:47:fe:27:80:dc:
92:6d:70:30:dc:bd:d5:dd:fd:8d:1b:03:32:e8:97:b2:b1:b1:
81:70:a0:04:be:99:00:e9:54:8b:1e:1c:07:6c:2f:a2:ae:2e:
2f:f8:0d:0f:69:34:d1:9c:51:f3:e2:03:31:49:ec:8a:fb:2c:
50:b8:b0:61:d7:73:2d:35:bd:36:c7:fb:d9:50:6f:ba:cd:93:
e1:db:a3:4f:39:b3:f3:db:b8:35:f9:31:b5:fe:ac:88:cc:77:
03:48:f8:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5tin64hlAAQeqgwmi4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGUzZmZmMjEwMGMyYWUyYTE1M2Y3OWRhZjNjOGIyMGU2OTEyYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tR2lPH59VF5ZhtU+dAHMWmqCqnq
IXmubr+hqtcocPa9ybMY3Nn9cxgG7wd6QhfZqk3hP0BqMK/KpubfGhHbbQHcLfun
xM0wlAWM07pK1uNLQkSZN1CbEamQtOenHwrQL3YqP7Z+qF1xjtUjEw8r3uZA7L35
DVFwk1lqv92S7uo8/+4yeCecmzT8VSX5hlu0aqkfq+iWkfXxr6zx+yz1mPx+Ogw2
3X5xT9iQLXULwWuz6hAnksvMkD63ZgtCn+/DfmthCb03OsJZ8lQA4K68jqoi1lMK
xC56TfRWAlhAig59O4W/XEHTWe3Uel5B37ERfglCuThOTbYDkpeEFT2BxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTj//IQDCrioVP3na88iyDmkStCMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvWk9QXzhoQU1LdUtoVV9lZHJ6eUxJT2FSSzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5EUMA0G
CSqGSIb3DQEBCwUAA4IBAQBEMWD3WTdEXSRSXChVBdiviTYT52mZIECn29aM3p51
xNtkHmljr+3srEnliDzWcjteiumbQilTZQOLkC1MuiH4wTRR7VrOApP00Hi+IyLQ
7qTZdWYihhQemm1VrXeEssp6Dyd2KjmPF3BPvs8dO+KkHumHKpRAQv3JxuSjxXn/
mHwm4MqidOx1LAEk89e/1OPkwXqn4Qo0c/jwNo6eR/4ngNySbXAw3L3V3f2NGwMy
6JeysbGBcKAEvpkA6VSLHhwHbC+iri4v+A0PaTTRnFHz4gMxSeyK+yxQuLBh13Mt
Nb02x/vZUG+6zZPh26NPObPz27g1+TG1/qyIzHcDSPh9
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:38:11 2025 by rpki-client