Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Pueef9gWHP-U8ejAWgT-H1UtHZk.roa
File: Pueef9gWHP-U8ejAWgT-H1UtHZk.roa (raw, json)
Hash identifier: 4IyQBdW7W9wb+R+k7AIvsYvkCvmRHpuDGiKA2h4brEw=
Subject key identifier: 3E:E7:9E:7F:D8:16:1C:FF:94:F1:E8:C0:5A:04:FE:1F:55:2D:1D:99
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DC39B2046FC7135BF097CA632B2DB
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Pueef9gWHP-U8ejAWgT-H1UtHZk.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 103.71.22.0/24 maxlen: 24
103.71.23.0/24 maxlen: 24
103.249.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Feb 2025 17:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c3:9b:20:46:fc:71:35:bf:09:7c:a6:32:b2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ee79e7fd8161cff94f1e8c05a04fe1f552d1d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:84:c7:0e:3d:09:92:85:6b:df:c0:8b:88:64:
d3:cb:bb:ec:7e:b3:f6:52:7b:a2:d6:59:22:1c:34:
6e:f4:7c:f9:91:a2:3b:71:46:2c:db:50:ed:b7:cd:
8c:26:37:25:3c:22:49:13:f7:28:1c:ef:6d:0c:7f:
89:2c:4d:d1:ba:1f:9c:de:b0:47:54:bc:7d:0c:d5:
a3:fe:5c:d0:4f:67:16:36:40:09:36:4a:ba:89:a3:
aa:4c:fe:49:fc:82:44:ff:28:39:ab:64:1e:9e:95:
89:b8:f2:17:c0:63:7f:0a:ad:8b:cb:72:7f:d8:9a:
e9:49:6d:8f:67:db:e7:e9:6c:d6:c5:06:7f:23:3b:
98:b6:7f:9d:7e:18:c7:ba:78:00:ee:d2:9e:31:2b:
45:66:d4:78:da:72:60:a5:b9:5b:20:15:0a:fe:89:
b6:f1:76:cc:86:e7:32:9e:78:ab:23:3d:12:13:a0:
6a:45:b0:f1:ab:21:f6:0a:95:57:d1:88:50:96:e3:
46:8a:86:02:c6:b4:d4:1d:ee:70:d8:d4:e7:4b:c2:
e6:f3:ac:13:af:50:e1:50:f8:03:e0:f6:19:58:c5:
a7:69:e1:c7:24:91:b8:23:26:b0:93:c2:10:60:e2:
95:53:f2:5d:52:17:3d:b2:ed:df:b6:0e:04:50:68:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:9E:7F:D8:16:1C:FF:94:F1:E8:C0:5A:04:FE:1F:55:2D:1D:99
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Pueef9gWHP-U8ejAWgT-H1UtHZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.22.0/23
103.249.132.0/22
Signature Algorithm: sha256WithRSAEncryption
05:9d:89:07:4a:91:d8:ca:b5:41:c2:97:88:91:ef:39:ea:36:
97:a5:fa:d7:eb:5f:3d:b0:62:89:ad:2b:fa:7a:f1:38:89:38:
d9:06:da:6a:ba:12:c5:f8:2a:06:4f:13:78:8d:a2:46:ce:6b:
da:f4:f7:a0:1c:36:0e:b8:e3:23:70:fa:2b:51:5d:9f:f4:43:
5a:1d:ff:c0:e7:23:02:67:6d:8c:f1:8f:6d:ec:fe:82:82:fa:
51:38:c0:b2:3d:e1:e2:f0:74:15:09:f9:18:1a:e0:cb:c2:94:
84:60:d2:2a:90:6a:51:d8:5f:69:19:36:72:e5:de:c8:0f:43:
05:79:51:c8:c6:86:d6:b3:4b:60:e6:e7:c2:52:5f:5f:f5:48:
e1:60:42:81:8a:dd:41:42:9c:73:a1:ac:5d:0e:2f:7f:1f:26:
d3:25:e0:9c:96:f1:9f:28:59:ff:b0:59:59:bc:3d:7c:21:c4:
c3:a8:28:4c:07:49:5f:d3:de:bf:1d:ae:eb:70:0c:a4:f9:dc:
85:c5:4e:8a:d0:df:db:e4:79:e3:2c:47:9d:16:b6:bc:d2:4e:
df:90:99:b3:a6:81:b9:f0:27:dc:af:92:57:33:7e:72:2e:5d:
f2:35:e9:43:30:bb:6e:ca:4f:07:55:e5:13:e2:3d:e0:09:62:
b9:cd:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:41:34 2025 by rpki-client