Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aE2BJ82QGZtZWZXeJHp-hWlIioM.roa
File: aE2BJ82QGZtZWZXeJHp-hWlIioM.roa (raw, json)
Hash identifier: ieal3HpkJmLOtYWNq55vHqAQfHGjRaNOb/A86yf/sRI=
Subject key identifier: 68:4D:81:27:CD:90:19:9B:59:59:95:DE:24:7A:7E:85:69:48:8A:83
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01922842F1ECAB3926769B9AA697C6ABC0E7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aE2BJ82QGZtZWZXeJHp-hWlIioM.roa
Signing time: Wed 25 Sep 2024 08:18:48 +0000
ROA not before: Wed 25 Sep 2024 08:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
2a13:1480::/29 maxlen: 29
2a13:18c2::/32 maxlen: 32
2a13:8c87::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 25 Sep 2024 08:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:42:f1:ec:ab:39:26:76:9b:9a:a6:97:c6:ab:c0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 25 08:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=684d8127cd90199b595995de247a7e8569488a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:87:5b:80:d7:f7:9e:8a:81:24:be:69:58:
c2:1f:30:af:34:cf:b7:1c:f9:1e:d9:6d:39:6d:2c:
63:9a:cf:f5:58:8e:de:fb:45:65:6b:f5:50:fd:da:
0b:08:65:2e:63:7b:a6:df:66:27:27:7e:51:d4:01:
a8:af:1d:2a:9d:94:65:54:0c:68:c6:8f:97:ca:10:
76:30:58:65:b3:37:b2:b9:c4:a3:2c:2c:72:55:6d:
39:9e:ef:de:49:2a:a5:83:f2:fb:72:fb:55:0b:65:
6d:72:f7:2b:c4:78:a4:a7:ec:69:4b:3e:c8:10:35:
59:42:11:e1:63:e9:5f:c8:73:4e:da:50:75:e5:bb:
84:21:bc:77:b8:42:3a:0d:6b:26:4b:41:db:17:9e:
46:a2:de:e9:78:ff:c2:9c:d5:3d:d7:39:60:e5:d2:
f1:57:e0:a4:68:c3:d1:7f:25:83:2b:b6:07:1d:37:
68:cb:49:22:a7:1a:ca:b0:ff:4c:ab:a2:92:58:8b:
4b:b8:fe:26:b1:fd:8f:d9:c8:e8:57:e8:4e:69:40:
74:6f:83:42:4b:78:63:1d:ce:f4:f1:a7:41:f5:03:
8b:73:46:91:57:81:cf:53:70:f3:74:4f:3d:7a:03:
b2:f6:6f:da:dc:1f:f7:97:21:1c:46:a9:e5:f5:c5:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:81:27:CD:90:19:9B:59:59:95:DE:24:7A:7E:85:69:48:8A:83
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aE2BJ82QGZtZWZXeJHp-hWlIioM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0/24
IPv6:
2a13:1480::/29
2a13:18c2::/32
2a13:8c87::/32
Signature Algorithm: sha256WithRSAEncryption
29:34:e3:9d:85:9b:8c:5b:a3:82:1b:b2:73:4d:5b:2e:39:81:
db:03:c9:e7:84:0b:0c:4c:76:c1:19:39:6a:cf:7a:6e:01:55:
b0:f8:72:3a:76:b3:be:81:57:b3:10:09:2c:31:8c:b4:27:90:
77:9b:ce:b8:43:45:d5:fb:49:85:5a:c2:be:e0:0b:ac:a3:43:
fa:6d:d8:7f:d2:5a:57:c9:43:36:07:3d:ad:44:a2:ef:6d:96:
64:7b:57:ab:22:9d:b5:b8:a5:e5:bc:10:78:36:ed:cc:de:d9:
ec:f5:ac:6b:a3:5a:7b:e1:ce:3b:a7:45:ac:26:f9:2c:6f:12:
82:26:57:02:e2:47:7b:f1:25:8f:bf:cb:92:f6:14:94:40:ef:
ea:40:e2:f5:9e:62:51:89:87:46:a8:ec:5b:17:1d:79:76:00:
34:59:dc:18:7c:26:f7:fa:85:04:60:41:a6:9e:a9:fc:f3:a8:
9d:fe:cc:66:57:b5:44:cc:ae:5a:ff:fd:e3:ec:45:6b:28:bc:
a9:21:f3:e1:52:6a:ba:d6:9e:ca:4a:92:82:ad:c5:d8:4a:ff:
3f:80:c4:47:03:fe:21:7c:c0:e2:df:cf:df:11:fd:01:c8:dc:
3b:9c:28:55:a4:a3:34:63:67:a6:10:e3:16:96:d8:89:b4:50:
c6:23:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:47:03 2025 by rpki-client