Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/S_LSY-6JBGz5HLFhjg6XI7yGWw0.roa
File: S_LSY-6JBGz5HLFhjg6XI7yGWw0.roa (raw, json)
Hash identifier: GTDTXUZH/UYq7XdYifS0fSLYS2g8uFzlxI3C0DTCfyg=
Subject key identifier: 4B:F2:D2:63:EE:89:04:6C:F9:1C:B1:61:8E:0E:97:23:BC:86:5B:0D
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 0197A8A1C16A28B805FF685323E346BB3598
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/S_LSY-6JBGz5HLFhjg6XI7yGWw0.roa
Signing time: Wed 25 Jun 2025 19:47:42 +0000
ROA not before: Wed 25 Jun 2025 19:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153993
IP address blocks: 103.216.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 16:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:a1:c1:6a:28:b8:05:ff:68:53:23:e3:46:bb:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jun 25 19:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bf2d263ee89046cf91cb1618e0e9723bc865b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:b8:c5:f8:ff:9f:ec:13:bc:7d:67:22:ca:
f1:73:53:70:6d:e3:7b:ab:d6:e2:22:ca:f3:aa:ee:
f6:89:5a:62:12:ea:fc:54:ed:e7:42:df:ec:20:d0:
69:26:a9:17:64:fa:b7:39:a8:c1:87:d4:80:0a:ea:
19:11:56:82:c3:f4:cc:7b:42:d8:18:0e:1b:9b:38:
3e:e3:37:c9:fc:94:98:56:70:5b:e1:61:92:2f:47:
a8:c9:38:95:9c:c1:75:c8:01:cc:33:06:97:13:2f:
8e:a9:f4:e0:59:ac:5c:d2:fa:7a:57:46:ee:c8:8d:
ff:b1:ce:e0:56:98:fc:3d:ca:01:26:18:85:81:c3:
7d:68:58:34:4f:ae:bc:44:fd:9f:cf:c6:ce:3d:60:
d7:7e:35:eb:7a:32:35:b2:bd:a9:db:40:d6:ad:91:
8c:ed:f2:2d:b7:ef:21:9e:4c:79:58:cf:d6:b6:39:
ee:33:8b:f8:6c:e8:7f:27:61:b8:af:f4:80:ef:07:
b5:8c:53:8b:97:6e:3c:22:ce:50:f0:7f:3b:f7:14:
0e:6d:5f:9e:54:9f:da:97:75:0b:d0:d1:20:65:87:
27:93:59:db:e3:f5:9a:9f:72:5c:ba:f5:82:70:b6:
8c:11:37:55:eb:0d:43:ff:be:08:a5:16:32:7e:ff:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F2:D2:63:EE:89:04:6C:F9:1C:B1:61:8E:0E:97:23:BC:86:5B:0D
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/S_LSY-6JBGz5HLFhjg6XI7yGWw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ff:2d:e9:3d:d4:5b:e1:e9:7b:6b:7f:93:6a:2c:22:9f:dd:
dd:7e:a1:a0:bd:fe:4c:7b:12:38:99:9f:79:34:fb:9a:31:21:
bb:97:cf:0f:6d:b6:62:22:1d:b0:c7:0e:98:e5:2e:ba:46:c4:
0c:b7:3a:e3:09:99:8a:9e:6d:de:23:dd:17:3b:d9:03:a2:d0:
03:fe:62:1c:e2:f5:69:fb:61:2a:b1:04:16:c6:e5:ee:0a:3a:
ae:fd:9f:ed:38:7f:4e:fb:f3:a3:51:e4:db:90:79:70:48:cf:
37:cb:45:18:39:46:bf:e6:b4:2f:28:9a:3e:c7:7d:5a:e0:4a:
03:8d:f0:bd:a4:0d:7c:68:83:1b:f0:3d:c9:e5:9e:ef:49:b5:
3b:76:0e:78:58:2a:c1:85:c9:8a:fb:79:6d:59:c2:af:8b:d8:
c5:d3:2a:4a:e9:94:eb:c7:60:8c:e9:f5:51:ae:38:c5:31:97:
70:1c:2f:dd:8c:b3:b2:76:b3:02:c9:42:f8:b2:ad:c0:06:6f:
9e:39:7b:0d:26:87:4f:e8:46:06:f4:04:4a:d0:d8:24:0b:e2:
54:11:a6:90:a9:6e:f8:f5:3d:a5:a8:3e:f3:d1:df:65:8b:93:
ac:88:af:3a:b7:e7:48:c7:a7:43:e0:94:1f:f5:a0:71:37:38:
0c:23:e6:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeoocFqKLgF/2hTI+NGuzWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjUwNjI1MTk0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmYyZDI2M2VlODkwNDZjZjkxY2IxNjE4ZTBlOTcyM2JjODY1YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIC4xfj/n+wTvH1nIsrxc1NwbeN7
q9biIsrzqu72iVpiEur8VO3nQt/sINBpJqkXZPq3OajBh9SACuoZEVaCw/TMe0LY
GA4bmzg+4zfJ/JSYVnBb4WGSL0eoyTiVnMF1yAHMMwaXEy+OqfTgWaxc0vp6V0bu
yI3/sc7gVpj8PcoBJhiFgcN9aFg0T668RP2fz8bOPWDXfjXrejI1sr2p20DWrZGM
7fItt+8hnkx5WM/WtjnuM4v4bOh/J2G4r/SA7we1jFOLl248Is5Q8H879xQObV+e
VJ/al3UL0NEgZYcnk1nb4/Wan3JcuvWCcLaMETdV6w1D/74IpRYyfv9lfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEvy0mPuiQRs+RyxYY4OlyO8hlsNMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvU19MU1ktNkpCR3o1SExGaGpnNlhJN3lHV3cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9itMA0G
CSqGSIb3DQEBCwUAA4IBAQBt/y3pPdRb4el7a3+Taiwin93dfqGgvf5MexI4mZ95
NPuaMSG7l88PbbZiIh2wxw6Y5S66RsQMtzrjCZmKnm3eI90XO9kDotAD/mIc4vVp
+2EqsQQWxuXuCjqu/Z/tOH9O+/OjUeTbkHlwSM83y0UYOUa/5rQvKJo+x31a4EoD
jfC9pA18aIMb8D3J5Z7vSbU7dg54WCrBhcmK+3ltWcKvi9jF0ypK6ZTrx2CM6fVR
rjjFMZdwHC/djLOydrMCyUL4sq3ABm+eOXsNJodP6EYG9ARK0NgkC+JUEaaQqW74
9T2lqD7z0d9li5OsiK86t+dIx6dD4JQf9aBxNzgMI+Zn
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:53 2025 by rpki-client