Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_dDEYO4qtqAMwsTHFPnXlvibJ30.roa
File: _dDEYO4qtqAMwsTHFPnXlvibJ30.roa (raw, json)
Hash identifier: JVsHyMHij+5wlicVPiNv3tUbaij4e19DG6800AghyZI=
Subject key identifier: FD:D0:C4:60:EE:2A:B6:A0:0C:C2:C4:C7:14:F9:D7:96:F8:9B:27:7D
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01954B3DDB97B56D67ECE1385D9653AE9EAB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_dDEYO4qtqAMwsTHFPnXlvibJ30.roa
Signing time: Fri 28 Feb 2025 06:28:19 +0000
ROA not before: Fri 28 Feb 2025 06:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139880
IP address blocks: 45.135.237.0/24 maxlen: 24
103.100.170.0/24 maxlen: 24
185.235.167.0/24 maxlen: 24
202.71.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 07:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:3d:db:97:b5:6d:67:ec:e1:38:5d:96:53:ae:9e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 28 06:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdd0c460ee2ab6a00cc2c4c714f9d796f89b277d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:99:d8:89:3f:43:2c:2d:69:05:70:5a:73:
bc:5b:d4:7e:f8:b8:68:c8:41:a0:40:b0:17:2a:a0:
a2:9e:3b:59:ac:70:da:f0:ee:fd:35:00:9f:4d:09:
76:3b:a6:9d:4b:f7:b1:13:88:7d:46:9f:14:c7:b9:
67:0d:7c:7c:58:22:5e:39:1d:ca:38:ef:f9:c1:66:
4f:c7:7e:80:17:d6:a1:ce:23:73:8b:ed:19:0f:40:
df:a5:7d:7b:29:62:82:30:e6:dc:94:6c:de:d1:d1:
35:0f:f1:31:d7:90:a2:a4:f3:b3:cb:a7:c3:f3:07:
73:1b:33:da:96:b9:db:b5:3c:91:05:7d:ef:e4:f3:
24:bf:94:fd:09:95:66:b6:85:ee:c3:5c:19:b7:a4:
ab:67:03:42:c6:1b:cf:17:04:da:21:85:8f:db:12:
50:58:92:ac:00:1c:3f:02:ef:43:0b:1e:f3:c1:bf:
93:7f:f0:c0:fd:02:8e:19:dc:ae:2f:ee:9d:bd:54:
4d:38:c2:7d:d2:ce:6e:72:6e:60:37:c8:ea:e0:0e:
70:8d:9d:53:88:66:be:e7:72:6d:ed:b6:13:a3:96:
12:88:4d:25:74:6a:a6:64:76:d4:6b:0d:29:63:7f:
0b:ed:be:0b:46:da:35:f5:ab:96:c1:5d:31:09:cd:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D0:C4:60:EE:2A:B6:A0:0C:C2:C4:C7:14:F9:D7:96:F8:9B:27:7D
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_dDEYO4qtqAMwsTHFPnXlvibJ30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.237.0/24
103.100.170.0/24
185.235.167.0/24
202.71.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e2:a6:8b:5e:db:85:1c:3e:2f:f7:20:f0:d4:a6:06:68:a2:
62:55:d1:72:ad:e0:ac:96:c1:d9:44:72:fd:ef:4e:ba:5c:24:
75:f4:72:0a:14:7b:25:95:b2:45:b1:a1:49:d7:ed:1c:f4:3a:
6c:be:6d:18:3b:08:66:c2:70:73:f4:0d:d7:51:4f:fb:ea:5b:
9d:73:22:0b:8e:02:19:df:e4:6a:eb:63:5d:07:7f:be:d3:a4:
0b:77:dc:2f:26:00:38:ec:83:05:e8:94:79:6d:a2:8d:25:88:
a3:e3:af:b7:f7:93:3e:24:08:a1:9b:bf:50:f4:d0:0f:eb:d0:
7e:50:2d:2e:51:f8:99:b5:86:4b:2d:ca:b4:db:6c:62:85:58:
71:06:d3:3c:8d:02:e0:35:ab:29:34:8c:db:75:f2:c4:34:55:
23:2e:04:60:11:bf:9e:c8:81:d3:74:5f:26:e6:83:70:9a:8a:
06:8c:c9:99:3e:09:dc:89:50:89:a4:99:25:9e:ff:67:94:ea:
82:46:ea:68:14:f5:1c:af:5d:62:b8:f2:b5:27:1e:31:d6:0f:
cf:10:8d:ba:2d:70:bb:1d:1b:18:74:23:5b:ae:5f:ef:3b:64:
71:bb:41:13:ca:f3:dc:97:4d:6f:84:ba:f0:88:7c:6f:08:5e:
59:76:53:8c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZVLPduXtW1n7OE4XZZTrp6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMjI4MDYyODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGQwYzQ2MGVlMmFiNmEwMGNjMmM0YzcxNGY5ZDc5NmY4OWIyNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qCZ2Ik/QywtaQVwWnO8W9R++Lho
yEGgQLAXKqCinjtZrHDa8O79NQCfTQl2O6adS/exE4h9Rp8Ux7lnDXx8WCJeOR3K
OO/5wWZPx36AF9ahziNzi+0ZD0DfpX17KWKCMObclGze0dE1D/Ex15CipPOzy6fD
8wdzGzPalrnbtTyRBX3v5PMkv5T9CZVmtoXuw1wZt6SrZwNCxhvPFwTaIYWP2xJQ
WJKsABw/Au9DCx7zwb+Tf/DA/QKOGdyuL+6dvVRNOMJ90s5ucm5gN8jq4A5wjZ1T
iGa+53Jt7bYTo5YSiE0ldGqmZHbUaw0pY38L7b4LRto19auWwV0xCc0kgwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFP3QxGDuKragDMLExxT515b4myd9MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvX2RERVlPNHF0cUFNd3NUSEZQblhsdmliSjMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYftAwQA
Z2SqAwQAueunAwQAykcEMA0GCSqGSIb3DQEBCwUAA4IBAQBq4qaLXtuFHD4v9yDw
1KYGaKJiVdFyreCslsHZRHL97066XCR19HIKFHsllbJFsaFJ1+0c9Dpsvm0YOwhm
wnBz9A3XUU/76ludcyILjgIZ3+Rq62NdB3++06QLd9wvJgA47IMF6JR5baKNJYij
46+395M+JAihm79Q9NAP69B+UC0uUfiZtYZLLcq022xihVhxBtM8jQLgNaspNIzb
dfLENFUjLgRgEb+eyIHTdF8m5oNwmooGjMmZPgnciVCJpJklnv9nlOqCRupoFPUc
r11iuPK1Jx4x1g/PEI26LXC7HRsYdCNbrl/vO2Rxu0ETyvPcl01vhLrwiHxvCF5Z
dlOM
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:39:48 2025 by rpki-client