Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tccq9PhCvWWkLP5t_ruepdQITds.roa
File: Tccq9PhCvWWkLP5t_ruepdQITds.roa (raw, json)
Hash identifier: Wm26MF/XogU4wgD/vhXur3+LDoCkvU1YuVFyo5KjR04=
Subject key identifier: 4D:C7:2A:F4:F8:42:BD:65:A4:2C:FE:6D:FE:BB:9E:A5:D4:08:4D:DB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276E6E295C248513FBDA2CBE0B5192
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tccq9PhCvWWkLP5t_ruepdQITds.roa
Signing time: Thu 02 Jan 2025 17:54:20 +0000
ROA not before: Thu 02 Jan 2025 17:54:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214128
IP address blocks: 103.245.229.0/24 maxlen: 24
103.245.230.0/24 maxlen: 24
103.245.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 08:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:6e:6e:29:5c:24:85:13:fb:da:2c:be:0b:51:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dc72af4f842bd65a42cfe6dfebb9ea5d4084ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:1a:fd:cd:e1:f1:51:7d:fc:72:50:62:00:
38:62:0f:ad:a3:ba:0f:c6:26:83:32:e4:38:4d:34:
2a:dd:f5:86:49:38:74:3d:81:58:86:79:ca:24:fb:
cb:f7:e4:65:86:fa:8d:6b:8d:20:55:40:84:2d:32:
e0:8b:47:de:9d:b1:56:c6:42:73:98:47:fd:cd:48:
85:72:c0:ea:29:1a:4d:40:d6:b9:97:33:df:64:be:
e3:b7:1e:2a:02:f7:81:19:22:b2:ba:cb:c7:c5:0f:
d5:f5:d6:e7:01:5f:71:bd:f6:33:64:91:40:8e:4f:
a3:98:7c:24:ed:de:4b:51:ba:83:24:fc:2f:fe:92:
aa:1e:38:bc:1e:a8:8f:f5:d1:3e:bb:84:9f:5d:38:
d3:9d:61:e7:e5:8e:5c:e1:d8:8c:62:f4:74:1b:0d:
b3:9b:31:bb:7a:1d:8a:77:c3:27:91:a7:9a:a7:e3:
e6:20:6b:a1:d7:92:ca:1b:e4:0f:4b:5d:a7:a4:2c:
d0:c3:bd:d7:d9:b8:aa:85:3d:b8:a4:6c:29:bb:85:
57:07:f6:db:14:1f:81:96:08:82:57:a6:9a:53:07:
5c:08:da:ea:5d:5a:77:97:da:4e:4f:6c:22:16:22:
55:5f:a8:57:fc:c8:ca:23:e0:78:db:d2:89:71:b0:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:2A:F4:F8:42:BD:65:A4:2C:FE:6D:FE:BB:9E:A5:D4:08:4D:DB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tccq9PhCvWWkLP5t_ruepdQITds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.229.0-103.245.231.255
Signature Algorithm: sha256WithRSAEncryption
01:4d:db:62:92:f8:12:94:de:f2:ae:95:01:d5:21:ca:fe:43:
44:82:39:1c:1c:1c:53:f8:02:44:5f:70:44:2f:5d:ce:86:11:
c7:cc:3c:5f:87:3e:b5:3f:30:cb:3f:4a:3b:81:34:a4:89:bf:
f8:8f:c8:8f:83:24:8e:b0:ab:eb:be:45:34:43:05:d3:3e:52:
af:f8:ec:2f:08:99:dd:52:32:ca:29:4a:1e:51:22:79:01:48:
a9:6b:a8:73:ef:12:63:ad:a2:b4:af:fa:4b:b1:62:7b:01:8d:
3b:57:29:2e:bb:6a:6d:0d:da:85:d8:74:03:e1:2b:21:b3:e1:
fe:21:3f:6e:7e:53:b2:18:07:5b:7a:74:e8:5f:89:c7:e8:71:
ee:9e:b1:56:f7:f4:58:e5:66:95:18:13:60:4b:83:7a:59:d4:
9a:b8:92:7d:83:ba:15:5c:d7:eb:3e:eb:8d:3d:f7:93:05:fd:
30:73:65:38:40:96:77:1f:b2:35:ab:46:5f:11:2c:fa:63:0c:
ba:6b:b2:fd:fe:a8:f1:b8:2c:49:15:7b:dd:1b:4c:e2:49:c5:
0b:54:5d:69:38:27:92:bc:0c:da:9e:33:8a:b6:d2:2a:56:ad:
3c:d8:0a:a6:be:88:87:4e:60:99:e0:5f:e4:08:49:e8:03:57:
33:17:db:23
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQoJ25uKVwkhRP72iy+C1GSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGM3MmFmNGY4NDJiZDY1YTQyY2ZlNmRmZWJiOWVhNWQ0MDg0ZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UAa/c3h8VF9/HJQYgA4Yg+to7oP
xiaDMuQ4TTQq3fWGSTh0PYFYhnnKJPvL9+RlhvqNa40gVUCELTLgi0fenbFWxkJz
mEf9zUiFcsDqKRpNQNa5lzPfZL7jtx4qAveBGSKyusvHxQ/V9dbnAV9xvfYzZJFA
jk+jmHwk7d5LUbqDJPwv/pKqHji8HqiP9dE+u4SfXTjTnWHn5Y5c4diMYvR0Gw2z
mzG7eh2Kd8Mnkaeap+PmIGuh15LKG+QPS12npCzQw73X2biqhT24pGwpu4VXB/bb
FB+BlgiCV6aaUwdcCNrqXVp3l9pOT2wiFiJVX6hX/MjKI+B429KJcbAxhQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE3HKvT4Qr1lpCz+bf67nqXUCE3bMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVGNjcTlQaEN2V1drTFA1dF9ydWVwZFFJVGRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABn9eUD
BANn9eAwDQYJKoZIhvcNAQELBQADggEBAAFN22KS+BKU3vKulQHVIcr+Q0SCORwc
HFP4AkRfcEQvXc6GEcfMPF+HPrU/MMs/SjuBNKSJv/iPyI+DJI6wq+u+RTRDBdM+
Uq/47C8Imd1SMsopSh5RInkBSKlrqHPvEmOtorSv+kuxYnsBjTtXKS67am0N2oXY
dAPhKyGz4f4hP25+U7IYB1t6dOhficfoce6esVb39FjlZpUYE2BLg3pZ1Jq4kn2D
uhVc1+s+640995MF/TBzZThAlncfsjWrRl8RLPpjDLprsv3+qPG4LEkVe90bTOJJ
xQtUXWk4J5K8DNqeM4q20ipWrTzYCqa+iIdOYJngX+QISegDVzMX2yM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:44 2025 by rpki-client