Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/V_4DjsuN26cRIeBJWDGZnNyGAXA.roa
File: V_4DjsuN26cRIeBJWDGZnNyGAXA.roa (raw, json)
Hash identifier: 7YlvNTWT1uCuDyD5awIBh3KrQUJxrmus0bNU6/AAdhE=
Subject key identifier: 57:FE:03:8E:CB:8D:DB:A7:11:21:E0:49:58:31:99:9C:DC:86:01:70
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0197C1396C6E0AA654E774D3E6D8D80D4765
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/V_4DjsuN26cRIeBJWDGZnNyGAXA.roa
Signing time: Mon 30 Jun 2025 14:24:15 +0000
ROA not before: Mon 30 Jun 2025 14:24:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 103.231.73.0/24 maxlen: 24
176.120.67.0/24 maxlen: 24
2a09:7c43::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 30 Jun 2025 14:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:39:6c:6e:0a:a6:54:e7:74:d3:e6:d8:d8:0d:47:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jun 30 14:24:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57fe038ecb8ddba71121e0495831999cdc860170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:fc:37:99:36:28:4e:ba:4a:3b:1c:ba:0b:
65:57:c4:f0:c9:e7:f4:48:07:ff:48:80:57:2e:b4:
06:06:92:47:ce:50:17:81:5f:65:95:d9:77:63:b0:
64:db:21:78:d3:5b:86:86:7f:35:08:bd:80:56:a2:
8a:c7:cd:81:6a:e5:58:9d:bb:fd:be:d6:88:e0:1f:
db:c3:92:f0:f4:22:41:c0:13:ad:dd:46:e1:93:de:
05:bd:c5:76:dd:05:0d:3e:72:91:7d:0b:45:19:28:
ef:63:44:b4:7a:d9:a7:14:2f:73:04:66:ec:42:e7:
df:6e:fd:fd:55:ec:b7:75:b4:b6:49:08:72:11:16:
99:4f:b5:81:4d:6a:5b:eb:eb:f5:6f:fb:52:92:77:
70:e4:91:e3:71:8b:70:4a:46:78:54:4a:7d:7d:7d:
a6:61:68:75:6a:c9:c6:53:06:01:49:fb:09:91:0d:
46:8b:66:ce:a9:96:ef:43:9b:b7:83:7e:30:cf:a6:
c8:3f:dc:42:9a:b2:4b:fe:a5:90:a9:f7:5d:04:03:
33:55:0b:c1:2a:a5:3f:d7:c6:12:d4:b1:11:4d:83:
d7:57:d6:f1:fb:a2:6e:3c:8a:c5:da:10:48:60:9c:
c7:aa:8d:87:9f:40:7f:95:35:35:ea:1f:fc:d3:70:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:03:8E:CB:8D:DB:A7:11:21:E0:49:58:31:99:9C:DC:86:01:70
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/V_4DjsuN26cRIeBJWDGZnNyGAXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.73.0/24
176.120.67.0/24
IPv6:
2a09:7c43::/32
2a11:4c04::/32
Signature Algorithm: sha256WithRSAEncryption
1e:f0:b7:59:8f:f6:4a:bf:66:0a:a2:e8:10:10:30:d1:40:64:
2e:8d:f5:cb:43:a3:e2:16:fe:07:1e:93:45:3c:1f:02:67:79:
09:50:0d:8f:bf:1b:5a:fc:db:06:2f:63:0a:f5:8d:ca:9f:52:
33:8d:dd:4f:2c:cf:6a:a9:64:5a:59:9c:dc:60:80:9a:13:45:
40:41:62:9e:b6:52:c2:e9:e4:e3:a8:a3:5b:34:ce:a0:08:ea:
03:e4:4f:92:8f:95:d0:36:58:09:5c:7d:f0:79:a4:00:39:81:
59:85:08:22:38:6d:49:8b:64:79:e0:18:a3:49:bb:e2:36:55:
25:c8:49:2b:25:66:b8:cd:b7:ed:e3:d3:ab:6b:16:ca:e1:fd:
68:f9:17:b4:45:bf:14:ce:7d:8b:73:01:2d:e7:34:c6:e2:71:
ec:17:87:05:15:e4:1a:a3:c3:36:82:35:4e:02:67:6b:f6:d2:
75:95:97:f0:00:66:75:6e:80:fb:ff:a1:ad:d8:eb:85:ad:65:
d7:02:59:0a:13:70:9b:e6:83:79:0d:dc:b1:ce:b4:be:4c:f0:
94:3c:2d:51:da:06:84:48:8c:d4:66:57:05:55:c8:24:05:07:
29:16:49:5f:eb:61:bb:cb:3a:42:ae:2b:c3:1b:be:a4:80:f7:
fd:0e:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:29:33 2025 by rpki-client