Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HXzHKMkNOpycZjXt7IfnLyiNC5o.roa
File: HXzHKMkNOpycZjXt7IfnLyiNC5o.roa (raw, json)
Hash identifier: PRUvdEi0rMg5F3nvthwNbEi6Jmh0l0Kf5zeG23JjVis=
Subject key identifier: 1D:7C:C7:28:C9:0D:3A:9C:9C:66:35:ED:EC:87:E7:2F:28:8D:0B:9A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194ACDF5BFFE2D6030F33FE8464933D6477
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HXzHKMkNOpycZjXt7IfnLyiNC5o.roa
Signing time: Tue 28 Jan 2025 12:25:06 +0000
ROA not before: Tue 28 Jan 2025 12:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 103.245.228.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 16:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:df:5b:ff:e2:d6:03:0f:33:fe:84:64:93:3d:64:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 28 12:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d7cc728c90d3a9c9c6635edec87e72f288d0b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:5f:af:9c:ac:2f:4f:7b:72:d1:31:78:1f:
c3:21:66:f2:d2:70:07:b8:12:e3:8e:4f:e7:10:f6:
3b:89:21:79:a8:c5:9a:69:ea:ad:f3:96:56:a1:99:
e6:99:e1:63:dd:86:4a:7c:38:43:0a:6c:2b:7b:3c:
5e:48:5d:f4:02:bd:37:d1:20:e7:e0:fe:a8:0e:9d:
8c:8e:00:f8:20:1e:25:84:0d:33:6c:52:71:18:1e:
c8:da:7f:df:14:a9:a3:6f:df:d0:a4:d7:5c:2f:5f:
a4:46:a4:bc:26:4f:ba:ff:94:7f:41:55:29:57:1b:
19:79:2b:ac:f8:ef:57:ca:41:37:70:49:70:b8:54:
06:3b:5e:68:e6:5e:61:2a:d0:57:13:a9:72:47:d7:
99:85:14:a3:6d:78:8e:1e:63:1c:4b:af:4a:99:76:
18:7b:7c:ac:b7:f3:c7:1e:0b:87:02:20:a5:72:b7:
53:27:79:7d:b3:27:42:e2:e2:ac:8a:6b:b1:a4:87:
f5:9f:d6:21:55:ef:b2:5b:38:4a:9b:48:33:a4:5e:
82:49:97:f2:b3:79:3c:55:9b:e6:d4:01:5c:7b:97:
32:b3:09:7e:d1:f2:23:3e:51:8c:e6:42:a5:f5:97:
0f:e0:c7:6a:f0:9d:42:2d:96:ce:e7:36:59:11:bd:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:C7:28:C9:0D:3A:9C:9C:66:35:ED:EC:87:E7:2F:28:8D:0B:9A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HXzHKMkNOpycZjXt7IfnLyiNC5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.228.0/23
193.124.36.0/24
193.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ff:ea:7b:11:5a:41:68:51:bd:d5:d0:58:38:e2:2a:2a:70:
a2:ee:25:de:6f:fc:59:01:77:a2:a2:cf:06:a1:76:e4:be:81:
b3:d5:66:17:96:58:29:53:8c:cd:a9:5e:65:19:50:08:c7:db:
df:16:de:bd:97:66:23:a1:89:17:07:08:27:c4:ed:d9:f5:5b:
bf:29:07:3f:73:3a:6e:30:d9:4e:2b:99:69:dc:b8:fe:2c:17:
3a:62:47:4a:cc:c9:54:d4:10:b1:68:d0:c1:c3:53:a8:8f:28:
b0:d4:07:51:55:0d:81:f0:e7:ba:3f:4a:9a:b5:de:78:79:47:
41:ce:12:35:e4:96:ba:6e:d8:68:af:22:f3:e3:2c:08:f8:ea:
fb:cc:ef:be:f3:7f:34:cb:db:94:8b:b3:31:2d:b5:17:ce:91:
ff:62:47:6c:7b:94:4d:54:c2:41:75:c9:53:3f:ac:c3:e7:3d:
f3:a9:1a:77:e8:94:8d:b2:81:ae:a8:44:25:a1:f2:39:d5:73:
51:ed:4f:da:a3:00:0b:d9:28:63:8b:6d:18:98:03:e8:29:89:
1a:45:75:d7:ef:6d:16:00:de:4e:9c:e6:e7:62:92:6d:53:5c:
24:cb:90:40:2a:eb:1e:7d:3a:1f:f7:97:5c:1d:53:e3:84:a4:
60:3d:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:23 2025 by rpki-client