Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IEzHngPVcIonj2Nqf-ejw5WDU_0.roa
File: IEzHngPVcIonj2Nqf-ejw5WDU_0.roa (raw, json)
Hash identifier: eY9vYG/g33gc/Y9QRdrbQlg/xOZyQbqExkdH0YF3g+w=
Subject key identifier: 20:4C:C7:9E:03:D5:70:8A:27:8F:63:6A:7F:E7:A3:C3:95:83:53:FD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01944504A24CEAD2C4641568A29252E1E07A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IEzHngPVcIonj2Nqf-ejw5WDU_0.roa
Signing time: Wed 08 Jan 2025 08:25:19 +0000
ROA not before: Wed 08 Jan 2025 08:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 103.114.40.0/24 maxlen: 24
2a06:a600::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e80:100::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
2a13:e102:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 08:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:04:a2:4c:ea:d2:c4:64:15:68:a2:92:52:e1:e0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 8 08:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=204cc79e03d5708a278f636a7fe7a3c3958353fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:f8:04:13:5c:21:bf:63:86:c8:ba:e0:d7:
40:5c:77:1a:fc:35:10:cb:bf:dc:de:2a:9a:d6:a7:
32:23:38:be:1e:7b:4f:76:ea:34:da:47:14:7f:8d:
00:ae:21:64:ca:fa:91:21:ab:9e:a8:92:0d:61:76:
bb:be:d1:d8:ce:38:2a:4b:c8:0f:b6:27:82:af:f2:
7b:8f:62:15:8e:e3:69:c1:c8:1a:ab:c3:57:7e:3c:
fb:e4:4e:fc:fb:39:28:69:c4:12:35:ac:72:0f:18:
77:04:a4:3e:17:ad:8a:02:ed:91:60:81:fa:59:cd:
77:8d:ae:e2:9a:64:83:c4:38:f1:d0:fa:0c:ce:11:
c4:35:47:bf:bc:9d:34:f1:8e:fd:75:f1:0c:88:14:
a4:f7:91:36:64:b8:2f:c3:1a:6d:53:58:ad:49:9e:
10:3c:d5:bb:e7:9f:ed:bc:fb:9c:e3:88:a9:62:9d:
02:4b:2e:ad:48:57:db:f0:51:4a:54:31:04:03:c3:
60:d1:22:0e:5a:1b:b0:49:03:51:d4:6e:48:c9:82:
73:dd:f2:64:6a:f3:54:0d:ce:e2:9a:19:67:89:b8:
49:0f:db:9f:71:56:f3:ea:86:18:02:b1:95:41:e0:
f4:9f:82:49:23:e0:68:a5:71:94:66:78:05:d7:f9:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:C7:9E:03:D5:70:8A:27:8F:63:6A:7F:E7:A3:C3:95:83:53:FD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IEzHngPVcIonj2Nqf-ejw5WDU_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.40.0/24
IPv6:
2a06:a600::/29
2a06:b5c0::/29
2a06:bf40::/29
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e80:100::/48
2a0f:1e80:1986::/48
2a0f:1e84:20::/48
2a0f:3d80:bac::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e6c6:5532::/48
2a13:2b40::/29
2a13:e102:10::/48
Signature Algorithm: sha256WithRSAEncryption
68:bb:5c:e8:e4:bf:88:96:ed:db:0a:5d:2a:3f:82:02:b6:a3:
1d:56:62:93:04:e8:c7:41:bd:f7:a6:0b:13:5c:bb:96:ce:de:
7c:43:ad:c1:50:4d:a5:95:08:b4:41:5b:7a:ff:b7:3b:55:29:
e1:e1:39:3f:8d:34:cf:49:f4:f6:8d:4f:d6:a9:80:a9:43:80:
21:13:d5:47:ad:a2:00:e8:83:63:a1:b0:82:bf:28:a3:94:a5:
6f:e7:c6:ae:38:57:29:9d:c7:6e:d0:cb:07:34:ef:ab:a0:18:
b4:ac:3e:3c:ba:ce:a3:aa:67:63:78:34:b9:60:58:f6:75:b0:
24:1c:6b:cb:97:f3:0a:ad:27:79:cc:7a:5c:fd:42:28:35:e9:
dc:92:d2:56:88:fd:37:26:87:d0:33:98:30:fb:fc:3b:b8:cc:
15:ba:64:85:0c:61:26:17:40:ec:b6:1d:63:77:05:47:c6:8c:
53:e5:f9:5f:e7:e1:29:3d:0a:29:55:fa:80:dc:de:a4:f7:b7:
70:36:65:27:3a:f2:e2:5d:47:36:15:6a:16:ed:b8:7d:ab:29:
90:64:8a:a1:41:86:23:a9:40:70:e3:41:70:de:5b:0c:2c:37:
00:a5:5c:c5:6e:7e:22:18:db:14:7b:57:61:fd:4a:ac:aa:fc:
26:bc:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:18 2025 by rpki-client