Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wMr-dR8u_sqG2mIlhqDddl9fLfg.roa
File: wMr-dR8u_sqG2mIlhqDddl9fLfg.roa (raw, json)
Hash identifier: QN84mOSoNOm6HQDyPwpqTM8uKv2F2DNRGGgfBbdKzCw=
Subject key identifier: C0:CA:FE:75:1F:2E:FE:CA:86:DA:62:25:86:A0:DD:76:5F:5F:2D:F8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01922858EAB4F4C1FAFCFA74990891E16CD1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wMr-dR8u_sqG2mIlhqDddl9fLfg.roa
Signing time: Wed 25 Sep 2024 08:42:48 +0000
ROA not before: Wed 25 Sep 2024 08:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
103.114.42.0/24 maxlen: 24
2a13:1480::/29 maxlen: 29
2a13:18c2::/32 maxlen: 32
2a13:8c87::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 27 Sep 2024 11:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:58:ea:b4:f4:c1:fa:fc:fa:74:99:08:91:e1:6c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 25 08:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0cafe751f2efeca86da622586a0dd765f5f2df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:75:d4:77:f1:bb:0a:fa:48:b6:43:9b:f5:
c8:97:ce:f0:da:8c:8f:bd:e5:ec:71:5d:fe:e9:c2:
30:d3:f1:74:c7:d1:5b:19:78:e6:7a:49:ac:cd:41:
a5:83:01:23:60:c9:df:59:5e:27:bf:10:f4:1a:7e:
cb:72:3a:41:04:cb:6c:10:f2:cb:77:86:33:06:5f:
2c:d5:b5:52:b9:14:d4:11:af:af:2b:4b:0e:3e:0b:
c8:37:c3:ea:b9:05:2e:8d:88:fc:0f:82:ba:35:e9:
ca:f7:71:c1:6d:38:29:96:c3:f7:84:f2:ac:5d:ce:
eb:3a:5d:83:a3:a2:10:85:40:00:0f:3a:b9:9e:c4:
3c:19:e7:aa:e5:cd:66:37:b3:6d:ae:7c:26:8e:dc:
e7:40:c9:3a:42:b5:49:cc:fe:7b:cc:69:97:a7:06:
87:b4:77:4d:b5:c6:cc:d5:b9:ce:0f:77:bc:17:74:
6b:fa:2d:75:a5:2c:4b:fa:b1:c7:b0:36:fb:02:fd:
e1:6b:09:6f:b8:c0:59:45:1b:0c:ce:96:ca:f1:85:
2e:97:86:e1:42:05:f8:38:86:42:7a:18:8d:49:65:
59:7f:32:22:db:7c:52:59:7d:d7:ac:23:e8:03:29:
b4:6c:3a:46:fa:10:b1:98:28:ac:8e:d2:e5:ad:9c:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CA:FE:75:1F:2E:FE:CA:86:DA:62:25:86:A0:DD:76:5F:5F:2D:F8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wMr-dR8u_sqG2mIlhqDddl9fLfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0-103.114.42.255
IPv6:
2a13:1480::/29
2a13:18c2::/32
2a13:8c87::/32
Signature Algorithm: sha256WithRSAEncryption
9d:4b:82:b3:60:de:3a:01:95:5e:ff:3f:78:29:08:fc:b6:a9:
00:e9:b0:b4:33:b2:34:04:7c:51:43:0e:c0:db:7d:a9:1c:f3:
ee:cd:d1:17:10:01:12:f6:16:32:e7:1d:6a:76:46:75:6c:12:
fa:99:6f:06:bb:8a:97:c0:fe:34:62:20:3a:29:fd:ca:d6:ca:
f3:d8:82:ce:db:f5:e2:a4:da:d1:91:a1:1b:9b:35:07:76:87:
0d:08:c5:92:17:62:93:e8:4e:b2:44:34:72:bf:d1:75:58:8c:
bf:69:86:15:1a:61:af:08:62:37:19:54:05:16:1a:86:91:16:
35:cb:2f:56:7c:09:db:58:f9:bb:63:a0:2f:42:88:69:ff:d6:
2b:31:c2:45:6b:e2:80:a2:7c:62:fe:52:cd:c2:08:ea:1f:6c:
b0:05:a1:7d:d7:b3:08:fd:dd:41:83:38:8d:92:26:25:a7:f6:
94:f8:e8:d8:dc:03:7d:26:ff:61:c5:08:1d:12:a7:de:db:46:
22:77:bd:0b:76:e2:09:5c:65:cb:a6:02:cd:6a:65:b4:74:d2:
c6:cb:1e:be:49:ae:74:f6:5f:a5:96:9b:fd:8d:20:29:2b:88:
73:f4:22:37:c2:dd:3b:31:a5:4f:43:fb:97:c8:e8:3d:6f:ad:
64:f8:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:32 2025 by rpki-client