Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/lF-J_Kuy2P6Jq9HIZSqzHmcIGcw.roa
File: lF-J_Kuy2P6Jq9HIZSqzHmcIGcw.roa (raw, json)
Hash identifier: KVs0ZfQXpGGW9vxo2YjbqvpbPyHrGcGADjo7lESC0tk=
Subject key identifier: 94:5F:89:FC:AB:B2:D8:FE:89:AB:D1:C8:65:2A:B3:1E:67:08:19:CC
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5AF2658078D77BE505DFD41BCBBFF
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/lF-J_Kuy2P6Jq9HIZSqzHmcIGcw.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151106
IP address blocks: 103.216.172.0/24 maxlen: 24
103.216.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 12:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:af:26:58:07:8d:77:be:50:5d:fd:41:bc:bb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=945f89fcabb2d8fe89abd1c8652ab31e670819cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:21:bc:54:7d:c2:2f:46:ee:eb:05:89:a6:
b2:25:11:19:32:ff:65:7a:60:46:c7:57:7a:84:07:
1d:c1:c6:62:f9:62:3f:fe:34:d7:18:a5:c0:5b:45:
12:77:2c:02:ab:3e:76:8c:56:17:6f:0e:93:e4:3a:
88:1f:99:db:59:6f:83:a4:7b:dd:49:85:cc:1f:20:
66:7b:03:4d:51:30:71:33:b4:65:d0:10:11:8d:c4:
d5:80:d6:e5:b8:3d:df:cb:da:4a:ba:95:85:e1:e3:
b8:49:3a:be:e2:b9:02:d8:29:8e:14:ee:33:c7:bb:
f0:6f:dc:17:ab:29:e6:ee:3a:38:c3:1f:9f:f4:f8:
38:9b:a9:71:5d:52:55:e6:07:75:a2:43:eb:aa:a6:
f3:f4:6f:bb:68:be:20:a8:56:8a:c2:86:71:b1:fc:
aa:57:69:66:e6:e1:dc:90:5c:ff:4c:f7:fc:75:e8:
d5:d1:1e:2a:da:8b:ee:7c:06:be:50:26:15:02:c0:
47:a6:2e:3b:f2:2a:8b:7a:ad:77:3c:d3:fa:1d:e1:
30:91:8a:ad:17:86:7b:df:37:fe:02:86:22:bf:ea:
77:ee:2a:e0:e6:f7:a1:e0:6a:9c:fe:7d:79:f3:54:
4b:b4:06:af:05:9a:51:f3:95:7f:e4:c5:8d:c2:6e:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5F:89:FC:AB:B2:D8:FE:89:AB:D1:C8:65:2A:B3:1E:67:08:19:CC
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/lF-J_Kuy2P6Jq9HIZSqzHmcIGcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.172.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:e5:2c:8e:e4:b8:13:12:66:9f:24:2e:4a:4b:cb:00:c7:f7:
1e:5c:05:4a:7c:e8:34:cb:c6:b3:aa:28:a7:72:64:f4:69:d3:
f3:ed:6e:cd:29:aa:55:8a:d8:d8:19:b6:71:8d:a8:33:ac:6e:
57:8e:ba:25:31:be:8b:3d:aa:98:fd:2c:c1:c6:57:43:4c:9b:
1f:c9:b7:d1:65:a6:e0:36:ee:f7:df:34:7b:38:2f:70:12:cb:
34:ab:06:a6:81:4c:62:c2:54:10:b0:1a:34:5f:a7:a4:f4:39:
75:82:62:3a:6e:52:ec:e1:86:97:ed:40:c5:37:82:c8:fe:ed:
b7:90:10:17:76:da:55:1a:3f:7a:94:64:e8:26:5d:79:86:7b:
00:88:fa:4a:94:94:a2:d3:f4:35:6e:0b:cf:da:f8:bc:a7:14:
e1:ce:c4:e9:ac:29:a1:58:f5:fa:cb:4c:ab:10:02:78:eb:fe:
1f:c2:12:66:e4:e5:e3:e0:f4:60:ce:64:b2:40:68:97:bd:e8:
fb:7b:20:c2:09:70:85:ba:7c:3f:ea:10:7f:32:60:d4:5d:52:
a6:e2:ea:bc:bc:a7:2d:95:6f:de:49:d4:f0:0e:ea:ae:24:2e:
d3:06:a1:5e:f3:a1:cc:ac:b3:5d:62:de:da:f8:32:e9:f5:26:
ee:2a:ad:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnta8mWAeNd75QXf1BvLv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjUwMTAyMTU1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDVmODlmY2FiYjJkOGZlODlhYmQxYzg2NTJhYjMxZTY3MDgxOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdohvFR9wi9G7usFiaayJREZMv9l
emBGx1d6hAcdwcZi+WI//jTXGKXAW0USdywCqz52jFYXbw6T5DqIH5nbWW+DpHvd
SYXMHyBmewNNUTBxM7Rl0BARjcTVgNbluD3fy9pKupWF4eO4STq+4rkC2CmOFO4z
x7vwb9wXqynm7jo4wx+f9Pg4m6lxXVJV5gd1okPrqqbz9G+7aL4gqFaKwoZxsfyq
V2lm5uHckFz/TPf8dejV0R4q2ovufAa+UCYVAsBHpi478iqLeq13PNP6HeEwkYqt
F4Z73zf+AoYiv+p37irg5veh4Gqc/n1581RLtAavBZpR85V/5MWNwm7wpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJRfifyrstj+iavRyGUqsx5nCBnMMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvbEYtSl9LdXkyUDZKcTlISVpTcXpIbWNJR2N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9isMA0G
CSqGSIb3DQEBCwUAA4IBAQBs5SyO5LgTEmafJC5KS8sAx/ceXAVKfOg0y8azqiin
cmT0adPz7W7NKapVitjYGbZxjagzrG5XjrolMb6LPaqY/SzBxldDTJsfybfRZabg
Nu733zR7OC9wEss0qwamgUxiwlQQsBo0X6ek9Dl1gmI6blLs4YaX7UDFN4LI/u23
kBAXdtpVGj96lGToJl15hnsAiPpKlJSi0/Q1bgvP2vi8pxThzsTprCmhWPX6y0yr
EAJ46/4fwhJm5OXj4PRgzmSyQGiXvej7eyDCCXCFunw/6hB/MmDUXVKm4uq8vKct
lW/eSdTwDuquJC7TBqFe86HMrLNdYt7a+DLp9SbuKq1I
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:57 2025 by rpki-client