Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-iAv2fIEojcB5MtdHRsRlWzUqyY.roa
File: 1-iAv2fIEojcB5MtdHRsRlWzUqyY.roa (raw, json)
Hash identifier: 2rbh4X96NFMELiV+BzmPLBxRs3uXLrIUPxNHBuyQZnc=
Subject key identifier: FA:20:2F:D9:F2:04:A2:37:01:E4:CB:5D:1D:1B:11:95:6C:D4:AB:26
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01948CDAA3F996BB2EB0BECB54BB9B700B7A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-iAv2fIEojcB5MtdHRsRlWzUqyY.roa
Signing time: Wed 22 Jan 2025 07:12:06 +0000
ROA not before: Wed 22 Jan 2025 07:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 103.245.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 18:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:da:a3:f9:96:bb:2e:b0:be:cb:54:bb:9b:70:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 22 07:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa202fd9f204a23701e4cb5d1d1b11956cd4ab26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:f4:0f:9d:8a:f5:95:85:ab:8e:ec:25:68:
e2:8c:5c:56:cd:f6:3f:ef:38:da:7d:6a:eb:73:ba:
35:10:17:39:82:03:23:50:ef:c2:7e:f1:af:fa:ea:
df:82:a9:a5:5e:e1:72:d8:1a:98:62:3f:78:11:fe:
d2:a3:fa:f3:a1:66:ea:d4:01:ea:a9:3a:87:57:b3:
a1:8a:3f:ff:72:90:91:4a:ce:aa:28:39:e2:ea:56:
0f:54:5f:a7:b2:e8:1d:6f:52:c1:a0:16:8e:47:1d:
bc:ba:96:34:e6:91:c8:77:93:d7:50:90:81:34:72:
77:85:0f:4a:4c:b0:61:f0:fb:93:91:37:c2:29:f1:
cd:8e:f1:af:1b:bb:d7:77:63:96:4d:57:83:cb:26:
67:a0:90:d3:f8:ee:83:84:3f:e9:2d:15:3f:01:62:
3c:74:45:33:aa:dc:a1:8b:4b:9c:29:cc:38:38:2d:
3f:32:73:dc:a8:3d:75:47:58:23:c4:76:3b:2e:5a:
51:a2:4a:68:51:fa:07:a3:eb:28:de:d5:a3:05:72:
6f:31:fc:b7:e8:5d:0b:3a:86:17:4a:eb:2b:75:e9:
05:5e:12:9b:42:c0:11:9a:3b:0b:07:c0:54:5f:93:
ce:c7:99:c9:6d:e2:b0:ca:3a:36:ed:3a:e7:69:ad:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:2F:D9:F2:04:A2:37:01:E4:CB:5D:1D:1B:11:95:6C:D4:AB:26
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-iAv2fIEojcB5MtdHRsRlWzUqyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.230.0/24
Signature Algorithm: sha256WithRSAEncryption
73:92:d3:d4:49:74:54:1a:01:61:00:49:78:d9:5c:57:62:93:
d6:56:48:1a:9a:4d:e5:3d:ac:a3:b6:f9:cd:d5:05:ea:49:7f:
70:b0:06:7c:0a:b6:db:25:5b:fe:6e:d6:41:04:5e:3f:3b:9c:
a5:94:84:96:1a:80:22:56:db:93:ca:d7:8e:aa:bb:9a:59:fd:
e4:69:c2:34:74:02:9a:14:64:5d:6b:54:ef:cd:61:39:13:ed:
ac:d3:82:49:6f:cf:f1:89:de:8a:1d:cf:86:45:0c:bc:bc:d4:
4f:69:5c:01:6a:3b:5d:ba:75:b4:d6:60:db:71:3f:ea:95:d0:
c2:a8:52:7d:79:21:d7:03:7a:23:a5:1b:69:78:f3:33:81:2c:
7c:9f:a4:85:16:b5:89:9f:ca:a1:4b:d8:bd:77:a0:db:9c:42:
8b:83:9e:aa:6a:73:70:b2:85:82:b3:81:0e:d4:88:a3:03:a0:
49:68:3c:fe:e3:f2:15:0d:bd:b4:1b:c1:9b:52:ab:f5:6e:93:
35:5d:02:e0:85:4b:71:b6:0e:e5:ee:5c:76:d6:d4:bb:fe:34:
81:83:e9:96:34:de:33:7b:6a:8f:e8:c5:52:06:e1:18:72:e1:
8e:43:d1:22:5f:c0:7e:07:cb:c7:d7:f6:11:0b:6f:ea:8c:f0:
6f:41:54:0b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZSM2qP5lrsusL7LVLubcAt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTIyMDcxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTIwMmZkOWYyMDRhMjM3MDFlNGNiNWQxZDFiMTE5NTZjZDRhYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCP0D52K9ZWFq47sJWjijFxWzfY/
7zjafWrrc7o1EBc5ggMjUO/CfvGv+urfgqmlXuFy2BqYYj94Ef7So/rzoWbq1AHq
qTqHV7Ohij//cpCRSs6qKDni6lYPVF+nsugdb1LBoBaORx28upY05pHId5PXUJCB
NHJ3hQ9KTLBh8PuTkTfCKfHNjvGvG7vXd2OWTVeDyyZnoJDT+O6DhD/pLRU/AWI8
dEUzqtyhi0ucKcw4OC0/MnPcqD11R1gjxHY7LlpRokpoUfoHo+so3tWjBXJvMfy3
6F0LOoYXSusrdekFXhKbQsARmjsLB8BUX5POx5nJbeKwyjo27Trnaa1pvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPogL9nyBKI3AeTLXR0bEZVs1KsmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvMS1pQXYyZklFb2pjQjVNdGRIUnNSbFd6VXF5WS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjYvNGIxOGZiLWQzZWQtNGIyNy05YmQwLWU1ODM5ZjQzZTU4
My8xL2ZhWFRMVnNKeVR3YlhqX0ZvcW9nMTBiOF90RS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf15jAN
BgkqhkiG9w0BAQsFAAOCAQEAc5LT1El0VBoBYQBJeNlcV2KT1lZIGppN5T2so7b5
zdUF6kl/cLAGfAq22yVb/m7WQQRePzucpZSElhqAIlbbk8rXjqq7mln95GnCNHQC
mhRkXWtU781hORPtrNOCSW/P8Yneih3PhkUMvLzUT2lcAWo7Xbp1tNZg23E/6pXQ
wqhSfXkh1wN6I6UbaXjzM4EsfJ+khRa1iZ/KoUvYvXeg25xCi4OeqmpzcLKFgrOB
DtSIowOgSWg8/uPyFQ29tBvBm1Kr9W6TNV0C4IVLcbYO5e5cdtbUu/40gYPpljTe
M3tqj+jFUgbhGHLhjkPRIl/AfgfLx9f2EQtv6ozwb0FUCw==
-----END CERTIFICATE-----
Generated at Thu Mar 27 17:17:16 2025 by rpki-client