Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/b4XJPtmeZD6JmhNSPy8dRHtHQNU.roa
File: b4XJPtmeZD6JmhNSPy8dRHtHQNU.roa (raw, json)
Hash identifier: /VuYwtp9vJs5rkI9u6WiVNwsMg3CRwoxTCsgPD/o0Vo=
Subject key identifier: 6F:85:C9:3E:D9:9E:64:3E:89:9A:13:52:3F:2F:1D:44:7B:47:40:D5
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 01972CAEAEC07E0F4307EBDEFAC06C2188F6
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/b4XJPtmeZD6JmhNSPy8dRHtHQNU.roa
Signing time: Sun 01 Jun 2025 18:08:54 +0000
ROA not before: Sun 01 Jun 2025 18:08:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.69.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 18:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:ae:ae:c0:7e:0f:43:07:eb:de:fa:c0:6c:21:88:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jun 1 18:08:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f85c93ed99e643e899a13523f2f1d447b4740d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:73:78:41:bc:ce:43:d6:e2:ed:74:4e:80:
2f:d4:71:16:cd:37:a7:e5:5a:fb:52:88:1e:23:95:
c0:44:67:e7:89:e4:22:de:c4:01:46:83:ee:11:1c:
01:14:95:a0:e0:a7:6d:2f:7f:51:16:aa:bf:a3:fa:
5d:1b:11:b7:f6:aa:ee:96:e5:11:9f:be:5c:8d:4a:
1f:ac:32:48:5c:6f:48:8f:cf:70:d8:69:49:bb:b7:
3f:d4:90:34:1f:a1:38:78:bc:8c:ae:9c:89:22:1c:
66:3d:05:b7:a4:bb:c4:8a:6a:62:a8:ef:25:a8:d9:
6b:25:b0:73:c3:c5:9b:60:a2:1b:1a:ac:22:15:16:
ef:67:fe:8e:68:cd:06:03:c6:a8:ba:75:a3:da:1b:
ad:66:89:dd:8e:c6:2c:7f:b8:24:bd:d6:8e:07:23:
a7:13:77:21:2e:d9:ac:ee:9f:f6:dc:9c:18:45:a8:
b1:d4:29:17:32:39:ee:fb:4e:1e:a9:cc:99:a6:60:
95:de:11:86:eb:0b:ca:23:70:e8:31:03:35:36:d0:
65:91:8b:77:f2:5a:e9:04:d5:f0:d9:55:ca:31:5b:
0f:d3:dc:26:af:5a:49:96:70:9c:05:75:cb:2a:92:
82:f0:c0:dc:c6:67:34:a1:14:0c:71:58:3f:0f:de:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:C9:3E:D9:9E:64:3E:89:9A:13:52:3F:2F:1D:44:7B:47:40:D5
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/b4XJPtmeZD6JmhNSPy8dRHtHQNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.226.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e2:f9:f0:58:57:f7:96:cd:70:28:7b:a1:24:01:54:a0:85:
b7:07:02:fc:9b:36:61:57:ab:f9:ac:d0:bf:84:52:ad:d5:bc:
93:b2:a1:20:47:c8:bf:23:db:68:3e:ae:49:36:cc:ae:24:dc:
60:de:96:e6:02:fb:e4:6c:c1:f7:f7:7a:31:80:ff:b4:d7:34:
8b:35:3a:ac:ec:c5:f7:6f:e2:3d:99:ae:1f:6c:c5:50:24:c3:
19:b6:87:b0:cc:fe:c8:f9:f6:11:c2:f1:f9:fc:56:28:96:24:
32:43:1c:b8:b5:7b:3e:02:0c:3f:72:41:d4:7d:67:4a:6a:4e:
fa:8d:c4:c8:e9:a4:23:48:04:51:4e:2f:3f:4a:c6:55:64:c2:
a3:b8:26:62:ee:97:91:cf:2a:dd:45:12:4b:cb:43:aa:ff:5e:
ac:86:f3:f8:37:30:77:f5:e2:12:bf:50:43:58:ac:43:f1:b7:
f1:c1:0f:c1:63:de:11:83:6e:10:e1:4f:5a:5e:6f:b1:8a:67:
86:b4:0b:dc:d8:7a:5b:d6:4c:da:d5:07:b0:4b:70:4c:eb:7e:
fd:05:53:67:db:28:ad:24:bf:d1:0c:b7:2d:3a:0e:7a:5f:5f:
00:43:18:a7:64:9d:e2:46:18:df:c4:33:39:69:75:88:7b:1a:
dc:23:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:53:17 2025 by rpki-client