Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1tcQfTGK6yhucfLF-71Lorec-MY.roa
File: 1tcQfTGK6yhucfLF-71Lorec-MY.roa (raw, json)
Hash identifier: A9SN6SumWA7f6HL6RPKFHMsqHwNlN8FJAxA1getuTOs=
Subject key identifier: D6:D7:10:7D:31:8A:EB:28:6E:71:F2:C5:FB:BD:4B:A2:B7:9C:F8:C6
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0197EDDCF08134F71BE54FF2C5139FA9B7EE
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1tcQfTGK6yhucfLF-71Lorec-MY.roa
Signing time: Wed 09 Jul 2025 06:26:08 +0000
ROA not before: Wed 09 Jul 2025 06:26:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.8.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Jul 2025 14:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ed:dc:f0:81:34:f7:1b:e5:4f:f2:c5:13:9f:a9:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jul 9 06:26:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d7107d318aeb286e71f2c5fbbd4ba2b79cf8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:29:ae:2b:a0:f8:6f:a9:86:85:a0:7d:f7:
2a:7b:1b:68:c0:ea:68:0a:0f:4a:28:7a:73:47:2a:
77:93:da:de:e6:19:2a:83:a4:72:07:19:11:90:70:
ba:ca:1c:54:3f:c2:71:7c:43:b7:05:f6:7f:d3:4d:
71:eb:78:ed:3c:c4:5b:35:fe:81:af:bb:06:1c:7f:
48:8d:0b:c7:40:00:16:ca:e4:f8:85:5a:ce:9d:63:
d4:d5:ce:7a:07:ba:2f:50:65:c4:ee:8f:64:ec:ed:
59:89:69:cc:3f:27:39:d7:cd:be:e6:c8:09:7e:2c:
54:65:96:cf:d7:f4:bd:ce:a7:e6:c0:df:09:be:90:
fb:d6:0d:62:73:ad:39:c1:0a:41:b7:14:df:84:87:
61:76:7e:34:6f:7e:9f:d7:a0:b8:73:fc:02:71:74:
9c:8e:9f:95:47:21:0b:39:5e:ae:73:52:6f:ea:58:
88:e9:da:83:e5:d0:69:e3:8d:59:77:41:74:da:a2:
f5:9a:ff:ad:7d:fe:49:dd:40:5d:7e:15:a8:8b:98:
23:82:11:ee:67:b3:43:81:ca:87:83:ee:07:24:39:
ad:8b:c0:52:83:2e:4c:2a:fc:70:16:10:62:d6:af:
f0:f1:fd:43:02:8f:31:53:bc:c1:55:44:f3:0a:c6:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:10:7D:31:8A:EB:28:6E:71:F2:C5:FB:BD:4B:A2:B7:9C:F8:C6
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1tcQfTGK6yhucfLF-71Lorec-MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:14:5a:98:7c:6c:75:27:22:db:91:16:5c:fd:61:40:94:ac:
3f:23:d1:03:43:61:35:db:ce:35:8d:c7:ca:d6:6e:7c:7f:57:
90:21:fc:76:ad:39:0b:2d:1d:1d:1e:19:b9:0a:74:0d:86:66:
43:04:26:8a:00:3b:f4:25:f4:89:e4:4e:dd:a5:3a:76:fe:52:
2d:a1:55:bf:c4:ff:8d:6f:b4:14:bf:fb:6e:da:9a:59:cc:a4:
a1:3b:c6:4c:71:8c:d5:9b:8d:2e:51:6a:c3:54:00:be:6c:4f:
60:30:fa:26:19:d0:37:94:ea:5c:9f:0b:c7:7f:16:1b:22:52:
a8:85:50:58:c5:9f:2d:9f:60:e5:97:ac:d8:60:5a:21:5f:36:
74:4b:47:9e:15:af:0e:42:fa:4e:3c:d5:8e:45:96:e3:15:7e:
a6:ea:21:6f:fe:4c:f4:93:7a:28:02:e6:10:1b:9f:c4:bc:44:
90:38:21:30:47:5c:24:a4:73:d9:10:c6:86:cf:38:df:e2:c6:
56:9d:b5:82:41:7f:ed:1e:7f:5a:14:2b:32:4e:e8:39:53:3e:
9e:04:50:d3:91:d7:e0:1f:bd:f8:a0:77:08:d8:5d:41:05:f6:
42:ea:05:07:ac:f9:9a:17:44:8c:f4:2d:bf:9b:be:87:15:b4:
5c:a7:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:58 2025 by rpki-client