Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/wCF27yfAn7fJkyUnkmC6T799Oq8.roa
File: wCF27yfAn7fJkyUnkmC6T799Oq8.roa (raw, json)
Hash identifier: Tb8YOysFnEaem7NlNFeig3sa8WPRpbw+rLmpkbZsVuo=
Subject key identifier: C0:21:76:EF:27:C0:9F:B7:C9:93:25:27:92:60:BA:4F:BF:7D:3A:AF
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01942748219C9DD326A549DF6F484D50A697
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/wCF27yfAn7fJkyUnkmC6T799Oq8.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19740
IP address blocks: 103.130.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 09:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:21:9c:9d:d3:26:a5:49:df:6f:48:4d:50:a6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c02176ef27c09fb7c99325279260ba4fbf7d3aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:b5:1d:5e:f9:3e:33:f7:e2:74:11:cb:8d:
bf:1b:7a:38:e3:1b:c2:ab:82:95:09:7c:aa:32:06:
98:d6:a8:1c:d7:37:05:8f:c8:3d:cf:2e:65:ed:66:
34:9f:bf:61:7a:2c:42:4a:c9:5f:06:82:67:cb:c6:
5d:20:8b:44:ea:2f:48:53:ab:f7:96:18:24:a8:3c:
09:b1:86:5a:44:46:33:62:a5:fa:bc:7d:98:4e:f1:
9f:a0:fc:be:be:19:10:80:26:a7:3d:97:4b:b9:3b:
0d:a5:e1:1d:d0:59:79:55:f9:9a:3a:37:d6:cd:c7:
70:14:31:92:39:0e:63:80:8f:06:20:79:2a:0e:2b:
9f:b4:a3:46:eb:f1:a1:72:51:cb:38:6c:07:9c:2d:
cc:e0:e7:66:20:f4:09:24:07:55:55:16:b3:f3:33:
bd:ea:08:6c:18:c7:bf:63:91:29:ed:2c:e4:0b:94:
85:dd:f6:02:14:50:83:1d:25:04:bb:08:cc:35:9f:
5b:f0:eb:cb:29:44:f2:96:84:a4:d8:80:f8:08:ef:
ac:ab:5d:5a:c1:bd:7c:13:23:fb:4f:f2:66:b1:26:
69:93:f5:a6:3d:ed:16:58:e8:f3:b1:f8:57:02:60:
2f:6b:4c:2f:97:23:82:09:ec:58:b5:17:a0:81:32:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:21:76:EF:27:C0:9F:B7:C9:93:25:27:92:60:BA:4F:BF:7D:3A:AF
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/wCF27yfAn7fJkyUnkmC6T799Oq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:96:4c:ff:3f:48:97:9f:f6:80:96:18:ee:3e:0e:07:21:5c:
4b:b7:ee:ba:9a:f1:45:64:e3:80:b1:d9:da:9e:96:c8:fc:69:
17:db:b4:26:5d:bd:00:28:40:59:39:61:10:70:f5:73:5d:c6:
6a:75:51:40:94:bf:da:43:1e:24:11:cf:18:ba:79:30:06:f3:
d2:6a:a7:1e:57:be:38:fa:ac:c0:9e:7e:66:25:94:50:00:88:
df:fb:29:e7:ff:c7:97:b5:85:2f:3c:ed:4a:9c:45:af:5f:4f:
18:27:6a:34:c9:f2:ce:23:9a:e6:13:fd:0d:f9:76:f7:b1:69:
57:3d:fe:13:d9:49:be:7c:48:7e:96:c7:a7:69:34:78:88:68:
17:f6:03:ff:4d:9b:94:dd:6f:84:7e:e0:58:95:46:87:15:b0:
5e:9d:1c:21:08:49:c7:8c:16:6f:01:2e:f1:c3:84:b9:cd:4c:
ed:02:22:97:b6:70:aa:eb:26:3a:76:15:de:70:4b:ba:4e:ba:
bb:72:4d:b9:0c:f6:24:1f:08:55:5b:0b:e4:8b:26:09:00:cb:
c6:ba:8c:64:a2:5d:23:de:73:4b:6d:50:95:18:2a:f6:2a:51:
c0:c1:d9:c8:89:6d:be:c6:09:8f:2b:a6:e5:97:c6:7b:3e:80:
e0:84:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:40 2025 by rpki-client