Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/6dZ-KOZDeQRsnB1KB174lbT-F_c.roa
File: 6dZ-KOZDeQRsnB1KB174lbT-F_c.roa (raw, json)
Hash identifier: Lm0K28UgSVLI50WtJq7oK8AyHCsYjerCj6sq8yXvmzg=
Subject key identifier: E9:D6:7E:28:E6:43:79:04:6C:9C:1D:4A:07:5E:F8:95:B4:FE:17:F7
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019427B3DD9182225C10C81BC8BE97F99DDA
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/6dZ-KOZDeQRsnB1KB174lbT-F_c.roa
Signing time: Thu 02 Jan 2025 15:48:06 +0000
ROA not before: Thu 02 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9215
IP address blocks: 103.132.128.0/24 maxlen: 24
103.132.129.0/24 maxlen: 24
103.132.130.0/24 maxlen: 24
185.57.64.0/24 maxlen: 24
185.57.65.0/24 maxlen: 24
185.57.66.0/24 maxlen: 24
185.57.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 13:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:dd:91:82:22:5c:10:c8:1b:c8:be:97:f9:9d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jan 2 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9d67e28e64379046c9c1d4a075ef895b4fe17f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:70:7d:ee:83:81:34:6f:73:4a:36:1e:61:
eb:07:c3:d0:d9:a2:cd:bb:61:bd:1f:0d:90:cc:43:
4c:0f:16:eb:dd:19:d2:29:a9:8f:b2:8c:7f:ec:a6:
8c:b0:e0:a5:a2:7f:49:39:11:dd:c0:e7:3f:0b:65:
a7:5d:98:a1:54:ff:b2:04:6a:ab:61:49:b7:87:8c:
56:05:17:ad:74:9f:ec:a5:e8:fc:42:2f:fa:0e:3f:
52:17:79:5b:36:a2:f8:17:0c:06:62:a2:1b:59:3b:
b8:4a:a1:86:10:b3:25:2b:0e:b7:57:c6:00:07:f5:
a6:b8:f6:59:c3:e5:02:15:2b:eb:71:3c:36:33:51:
80:de:5e:97:13:86:5b:40:e4:52:c0:56:f3:60:47:
a2:6a:68:ce:91:f1:18:25:ff:4f:b4:34:91:8c:22:
eb:ff:a4:f5:a7:c0:e5:4c:fc:c1:3c:b4:f0:fc:e1:
1b:99:10:39:e5:37:a4:df:88:7b:ae:69:96:76:24:
55:97:9b:b8:e1:fe:ae:45:13:9c:ef:ac:b5:7b:1f:
1b:81:13:40:a6:88:57:76:b5:a8:40:cc:5d:8e:b0:
77:88:c3:3b:11:44:77:de:dc:e2:9c:dc:57:af:39:
ac:c0:8e:61:4b:04:93:59:f2:3b:39:c8:4c:00:b3:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D6:7E:28:E6:43:79:04:6C:9C:1D:4A:07:5E:F8:95:B4:FE:17:F7
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/6dZ-KOZDeQRsnB1KB174lbT-F_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.128.0-103.132.130.255
185.57.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:2b:62:51:89:e3:eb:08:71:95:23:96:fa:08:34:fe:f4:47:
f0:40:dc:71:ac:d9:e0:72:45:61:fe:bc:50:2a:a1:30:3e:c5:
e2:d2:7b:d3:2f:8f:24:1c:66:f0:f4:10:0a:56:97:1a:03:84:
5b:f5:7e:d4:d2:d2:b6:88:35:be:5d:96:46:69:9e:77:a8:f0:
27:a4:04:d9:9b:de:09:c7:f0:e1:de:a7:50:5c:ce:8c:78:6d:
98:b7:44:17:36:16:85:7a:05:ae:41:17:c4:79:99:f5:13:44:
c0:1f:6b:e6:d3:9d:66:2d:ca:51:6c:c5:ef:05:bc:a6:43:aa:
a5:53:09:83:c9:d1:f0:91:5e:91:b2:3c:14:f8:39:da:ed:7a:
b5:5f:a4:63:2f:f0:53:f0:dd:be:4d:a8:26:50:9b:ca:a1:95:
ce:e3:bf:b2:d3:2c:8c:a1:52:43:c1:73:50:8e:50:8e:de:fd:
2d:1e:00:0a:d4:5f:d5:11:f2:59:97:6a:72:7d:65:8e:b2:a0:
0f:d4:bd:b6:50:a9:12:ad:de:d2:15:7a:43:a8:97:38:b9:dd:
2f:a2:92:be:ba:b8:de:2c:6b:e2:48:49:5d:2c:8f:da:87:62:
e6:09:87:bc:56:69:e1:06:c2:75:89:77:4a:96:67:42:fc:3c:
7f:52:a9:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:38 2025 by rpki-client