Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2iFWwsXxCbrlJcgEdEZ8sPq61RU.roa
File: 2iFWwsXxCbrlJcgEdEZ8sPq61RU.roa (raw, json)
Hash identifier: x/4ISTg7srAJrgkkcj6e+VAgiexc8up8u+T1gkc0Zm4=
Subject key identifier: DA:21:56:C2:C5:F1:09:BA:E5:25:C8:04:74:46:7C:B0:FA:BA:D5:15
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01957ECFC365ECFE5731E146BFCB52F93E70
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2iFWwsXxCbrlJcgEdEZ8sPq61RU.roa
Signing time: Mon 10 Mar 2025 06:48:20 +0000
ROA not before: Mon 10 Mar 2025 06:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 103.227.87.0/24 maxlen: 24
2a10:67c2:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Mar 2025 07:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:cf:c3:65:ec:fe:57:31:e1:46:bf:cb:52:f9:3e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 10 06:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da2156c2c5f109bae525c80474467cb0fabad515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:9e:9e:5d:2b:e5:c1:fb:99:6c:09:90:4c:
87:b0:35:97:cd:0b:8e:4c:71:81:68:af:81:a1:a2:
68:13:5f:36:86:7b:16:3f:67:2d:20:12:a1:d2:e6:
5f:70:51:ae:dd:6f:8f:42:8c:d5:57:d1:7c:fe:b4:
42:cd:59:bd:79:cb:4c:da:82:78:4e:37:a9:b7:36:
3c:e1:29:ed:f7:b7:4d:f7:c5:ce:17:39:b6:7f:19:
0c:40:f6:a4:e4:92:76:51:5e:47:4d:5f:8a:2f:4e:
19:5c:bb:0d:7b:df:7a:6b:04:f6:54:01:01:6a:0e:
fe:d0:94:66:2d:35:94:1e:0c:a5:0a:48:60:b8:51:
56:46:d9:31:96:da:78:1d:26:03:e6:62:94:16:2f:
4c:f3:79:d0:cc:f1:e9:67:2c:31:3f:4a:5c:df:72:
78:89:44:0d:d8:b7:64:97:28:f5:41:3f:f7:36:c1:
62:bb:2e:1b:48:3c:09:39:31:fd:39:91:8d:ec:b9:
93:b9:8c:a3:b5:5a:1f:a3:f5:bf:c5:8b:04:fc:14:
7d:06:ff:e7:e2:4d:92:a2:52:78:77:55:6c:47:d1:
aa:ee:b8:0a:79:04:fd:b3:bf:74:57:9f:9e:ef:41:
a1:0c:a5:cb:92:c2:e1:cb:bd:ec:22:5a:2c:98:e1:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:56:C2:C5:F1:09:BA:E5:25:C8:04:74:46:7C:B0:FA:BA:D5:15
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2iFWwsXxCbrlJcgEdEZ8sPq61RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.87.0/24
IPv6:
2a10:67c2:2::/48
Signature Algorithm: sha256WithRSAEncryption
61:64:1c:ca:75:d8:4c:bf:7e:ce:44:55:6b:0e:ec:7a:b0:7c:
6e:3f:c8:32:28:fc:92:2c:b3:7f:ff:f5:fa:6b:3c:e0:9e:a2:
6e:89:b4:88:c8:97:7c:31:aa:bf:f2:26:b9:57:52:8e:65:20:
fa:ac:a1:60:d5:f3:1d:b1:2b:2b:b6:0a:8a:23:ad:e1:3a:46:
fc:29:62:f8:5d:3c:1f:f0:77:47:1c:9c:cb:91:99:d4:26:d2:
0e:5c:7a:fd:7a:29:1d:ae:97:54:1c:84:d3:73:cb:d9:0a:51:
19:a1:dc:22:d3:a7:c9:68:0f:e8:cb:bc:fb:61:2a:03:48:53:
3d:fd:33:d0:0c:e7:6b:c1:00:23:54:fb:45:f6:c8:af:cb:0f:
69:ba:e6:74:f2:e8:1c:80:69:3a:32:07:d9:55:bb:b2:b5:b4:
23:eb:d8:82:e6:d7:3b:5f:7a:56:d0:6f:97:7f:4c:3f:9e:da:
ba:ae:0b:15:25:6a:46:b8:f7:69:35:bb:10:ab:de:cd:74:c0:
c6:e5:c2:0b:ff:05:3a:f5:ce:36:56:67:a3:f3:c3:57:54:c3:
d4:42:3b:61:93:ba:34:62:9e:0e:19:71:12:cc:6a:ec:cd:cd:
f5:35:4d:1f:ee:c0:43:9f:b3:5f:5e:72:bd:27:3f:cf:b4:84:
cb:fe:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:47 2025 by rpki-client