Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FiPhQQPsM03z_XS-Hc7GRzdVme0.roa
File: FiPhQQPsM03z_XS-Hc7GRzdVme0.roa (raw, json)
Hash identifier: L+gldPyzhJmOWJXEcIiLeK6e3k/uHJp0Ix+AMsk4A04=
Subject key identifier: 16:23:E1:41:03:EC:33:4D:F3:FD:74:BE:1D:CE:C6:47:37:55:99:ED
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192332E0E7F01CBF1742C01525F45CD7680
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FiPhQQPsM03z_XS-Hc7GRzdVme0.roa
Signing time: Fri 27 Sep 2024 11:11:49 +0000
ROA not before: Fri 27 Sep 2024 11:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
103.114.42.0/24 maxlen: 24
2a0f:1e80:100::/48 maxlen: 48
2a13:1480::/29 maxlen: 29
2a13:18c2::/32 maxlen: 32
2a13:8c87::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 29 Oct 2024 07:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:2e:0e:7f:01:cb:f1:74:2c:01:52:5f:45:cd:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 27 11:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1623e14103ec334df3fd74be1dcec647375599ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:32:13:6b:56:0e:4c:70:04:78:f1:8d:bd:
61:46:7a:b0:14:59:19:c5:59:61:86:d6:38:0a:37:
2b:8c:a2:16:21:5f:d4:3e:0c:98:a3:ac:c9:84:cd:
25:bc:97:f8:3b:2f:58:69:d2:2e:b0:ce:a6:c9:b4:
22:e4:27:06:74:46:46:e6:24:7b:a4:bc:f7:81:e0:
5e:8a:d2:a9:a5:52:1e:6f:61:b8:3d:63:2f:2b:03:
ac:c2:6d:f1:28:22:19:76:67:3c:b1:cc:3d:6b:2b:
d2:4b:be:0d:5b:04:d1:1f:ad:a2:6a:50:4e:43:b8:
ae:83:63:a5:a3:e3:6f:5f:a2:f9:27:fe:ff:c4:f9:
79:f2:68:92:36:41:75:22:f8:f7:67:ab:f6:78:32:
0e:50:08:24:24:6d:25:29:1b:9c:71:9a:d5:21:ad:
80:0f:dc:2a:59:97:5f:8e:12:51:4b:46:8d:6b:32:
21:ed:3d:25:24:13:93:80:9c:b7:b6:bb:25:61:4e:
63:7b:fa:e0:39:b6:48:e4:1f:31:31:5c:b0:4d:a6:
6a:5f:f6:b5:b1:93:43:f9:b6:ec:45:95:39:ea:2f:
b9:23:21:a5:f5:d8:ae:b8:0c:64:6e:89:5f:f9:ac:
0f:b1:71:89:76:6d:d9:df:05:4e:67:dc:48:09:de:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:E1:41:03:EC:33:4D:F3:FD:74:BE:1D:CE:C6:47:37:55:99:ED
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FiPhQQPsM03z_XS-Hc7GRzdVme0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0-103.114.42.255
IPv6:
2a0f:1e80:100::/48
2a13:1480::/29
2a13:18c2::/32
2a13:8c87::/32
Signature Algorithm: sha256WithRSAEncryption
19:15:45:9d:70:97:d4:41:22:d6:ac:73:61:18:2e:b3:40:e8:
99:af:53:0f:d2:80:13:f2:bd:94:88:72:94:5b:cd:cb:c0:a7:
e8:5b:26:01:68:8d:7b:5a:b9:53:03:9b:26:c9:60:2f:5e:d6:
63:4a:6e:58:92:b8:c3:12:9b:76:e4:14:11:b9:f7:84:1f:6c:
02:22:f3:4b:0e:a0:71:74:fb:4c:6f:75:37:a9:9b:fd:16:e6:
61:58:58:c1:6e:81:eb:06:f9:25:3f:19:2e:40:32:1e:2a:a0:
97:7a:54:b8:bc:1c:43:99:28:d1:19:46:4a:25:66:8e:1b:6f:
c9:7d:78:cd:dc:5b:49:24:c3:3c:a8:74:55:05:53:c1:67:f6:
a4:46:1a:8f:0d:da:42:62:66:2c:05:71:67:d6:f2:69:ff:81:
e3:34:3b:95:4d:03:6d:c9:ee:2b:df:2e:9e:7e:27:89:2b:7f:
da:3d:db:aa:ad:d0:69:66:56:f3:48:5d:45:05:b4:7c:3e:1c:
2c:52:d8:20:b8:83:fd:c8:dd:a9:19:d1:28:08:a3:6f:bd:55:
80:72:91:99:76:91:ec:98:0c:c2:f3:b5:77:7b:9d:a0:e9:66:
31:20:fb:a8:5a:eb:d4:75:0f:65:40:9d:1c:99:6d:92:22:d5:
ac:9f:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:22 2025 by rpki-client