Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/8M_QHtedGA1Ubze6QjZNz6uJvFU.roa
File: 8M_QHtedGA1Ubze6QjZNz6uJvFU.roa (raw, json)
Hash identifier: rF6jQZXlDoCXj1OIXpswPFghfUV8zJuK0bxFzZn/3ko=
Subject key identifier: F0:CF:D0:1E:D7:9D:18:0D:54:6F:37:BA:42:36:4D:CF:AB:89:BC:55
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 0197D00BC87D28D886A86E7F2DC700D144A4
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/8M_QHtedGA1Ubze6QjZNz6uJvFU.roa
Signing time: Thu 03 Jul 2025 11:28:42 +0000
ROA not before: Thu 03 Jul 2025 11:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 43.226.224.0/22 maxlen: 24
43.226.224.0/24 maxlen: 24
43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Jul 2025 10:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:0b:c8:7d:28:d8:86:a8:6e:7f:2d:c7:00:d1:44:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Jul 3 11:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0cfd01ed79d180d546f37ba42364dcfab89bc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:8e:84:2f:48:cc:d4:6b:f1:77:da:92:31:
bf:e8:84:fe:63:0d:4f:d6:cd:47:9f:89:0f:15:e4:
30:b6:8a:b0:47:ed:d0:ab:d7:8a:6e:1f:b6:72:10:
20:4a:cd:d3:9b:5c:c6:8e:da:56:90:25:3a:dc:3d:
dd:c0:d5:ca:e0:7b:4c:71:a8:4b:86:2a:70:a5:f5:
8b:2d:f3:e0:1b:e8:4d:01:2d:e3:7b:aa:5d:46:06:
46:4e:fd:6a:58:8b:27:74:d0:e0:30:9d:a6:3f:90:
f2:88:3a:ae:d8:19:e3:43:b5:d0:fc:f0:89:91:a9:
0f:fc:b2:b3:30:25:4c:0b:27:b2:63:45:17:23:49:
d7:93:75:9c:8c:e9:c1:6f:14:99:8a:ef:bf:c3:c6:
3b:31:84:16:10:9d:3f:8a:28:e5:03:72:5d:b6:5e:
ce:5d:2f:79:ae:97:c9:17:89:30:ea:2d:da:20:f3:
7a:c6:96:8e:9d:05:18:8b:a6:75:a0:93:73:3b:55:
ed:00:98:d7:41:c1:07:89:06:2e:c9:86:7d:05:0a:
4e:f0:c5:24:b3:e4:49:cb:90:85:e9:31:25:03:76:
01:50:b5:7e:67:15:e1:d7:21:68:31:c5:08:1f:04:
e9:fa:63:ec:5d:79:d8:bd:db:28:f9:cb:c3:8b:74:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CF:D0:1E:D7:9D:18:0D:54:6F:37:BA:42:36:4D:CF:AB:89:BC:55
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/8M_QHtedGA1Ubze6QjZNz6uJvFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:53:58:43:a0:bf:36:92:13:ea:9a:8d:9d:0e:df:3e:f0:04:
e9:67:1e:2b:0f:05:99:85:25:64:8d:9b:74:38:b2:e7:d6:0d:
d8:f3:93:6b:c1:87:38:4c:93:23:88:a1:29:c4:94:34:2c:c2:
61:d6:2e:96:70:f0:e6:bc:27:b9:2b:66:cf:e2:4f:43:35:09:
34:d8:e2:a8:3e:3f:b7:b4:58:0a:37:75:b6:ac:7a:9b:f2:2b:
b4:3e:d4:c0:e1:71:0c:20:69:d9:01:7a:5a:ff:3b:55:9f:87:
b5:0e:10:88:31:21:34:46:06:53:d9:2f:71:e7:33:18:c1:ba:
2f:dd:32:c4:6d:d3:ca:3c:3a:4e:8a:9b:27:f3:6c:3c:4c:3f:
5d:4f:9e:a5:80:25:e6:e3:61:9c:82:92:d1:4b:a9:05:06:99:
fb:0c:d2:b6:cf:b4:d9:ac:a2:e0:ab:c6:68:65:27:52:74:06:
c8:db:e5:a5:ee:b8:a6:4e:ea:c9:cd:ea:df:37:06:e8:98:d0:
4d:44:df:ce:f4:00:61:42:39:ab:3b:84:82:74:fe:3b:9b:4e:
ac:12:1d:c0:a8:bf:a7:d5:5c:7f:4b:a4:52:3c:76:bb:2f:c1:
1b:7a:c2:dd:7a:73:0e:a9:f9:ad:2e:28:fe:82:d3:b2:9f:25:
17:21:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:27:04 2025 by rpki-client