Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yqMBiiSdqjGo9Vax9mHsVUj-X14.roa
File: yqMBiiSdqjGo9Vax9mHsVUj-X14.roa (raw, json)
Hash identifier: JH3aILet5ANTVS9MrbwPMGesePz8pwAiMEKibh6HEhs=
Subject key identifier: CA:A3:01:8A:24:9D:AA:31:A8:F5:56:B1:F6:61:EC:55:48:FE:5F:5E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427481950F00F6A127E976CFBE49C5337
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yqMBiiSdqjGo9Vax9mHsVUj-X14.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 103.114.40.0/24 maxlen: 24
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e80:100::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
2a13:e102:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Jan 2025 08:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:19:50:f0:0f:6a:12:7e:97:6c:fb:e4:9c:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa3018a249daa31a8f556b1f661ec5548fe5f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:2b:ae:3e:c7:3c:94:31:cc:19:a5:92:99:
e0:9a:69:66:cf:28:b6:7d:91:52:ac:e5:54:e9:06:
97:83:8c:12:1b:13:cc:02:aa:d8:24:25:46:19:52:
f4:e4:3a:ce:02:f4:c7:55:13:71:ec:cd:10:fb:63:
6f:96:c3:07:23:af:c8:4d:50:60:f4:0e:6a:c8:22:
2b:73:76:48:eb:98:25:44:c5:7f:a3:1c:56:30:09:
95:8a:c4:41:6d:cb:c9:a2:92:a6:e7:07:fb:b1:77:
3e:b2:17:39:e8:41:29:aa:81:46:6d:00:8b:5a:78:
4a:0c:b0:ef:a7:a4:7c:42:2f:de:b6:8f:1b:b3:10:
cf:5b:04:a6:e8:59:4e:90:75:e6:a4:d7:b0:1c:27:
c1:b9:fb:03:1f:57:35:d1:1a:3d:3d:50:fe:af:f1:
60:1f:12:97:c0:00:cc:a0:f1:6d:8a:38:35:4c:fb:
b0:7f:eb:24:c0:b4:7b:80:04:98:b9:83:70:20:3a:
7c:ce:3b:ad:e5:a0:11:08:1a:4e:33:e1:33:43:4f:
c9:51:67:7f:93:f7:c2:65:74:2c:27:3a:62:e2:85:
94:9d:d2:5e:eb:25:31:cb:a6:05:74:6b:7a:b1:46:
73:66:e2:0e:0d:19:7d:d3:8d:0d:47:85:4f:69:b9:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A3:01:8A:24:9D:AA:31:A8:F5:56:B1:F6:61:EC:55:48:FE:5F:5E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yqMBiiSdqjGo9Vax9mHsVUj-X14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.40.0/24
IPv6:
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e80:100::/48
2a0f:1e80:1986::/48
2a0f:1e84:20::/48
2a0f:3d80:bac::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e6c6:5532::/48
2a13:2b40::/29
2a13:e102:10::/48
Signature Algorithm: sha256WithRSAEncryption
b2:5b:51:37:f5:82:36:f6:8a:a1:69:5a:bb:87:32:54:fc:75:
55:f2:17:ef:86:e4:36:f0:f7:7d:a0:13:0c:fc:94:73:38:a6:
58:87:26:8b:85:85:f5:5f:15:0f:e0:75:a6:7c:16:59:03:25:
f8:11:39:ff:8b:63:f8:0f:e9:6b:fa:cc:21:a8:72:45:fa:f1:
a1:73:b2:e8:54:a9:1c:77:05:94:b1:e0:db:46:60:6b:25:f4:
24:b3:37:c2:5f:d1:16:d7:6a:35:59:a0:6d:54:e4:5d:27:4a:
fb:21:91:ca:0a:83:62:9c:5c:ae:68:3b:cc:00:e0:a2:b5:ec:
33:17:98:bf:9e:0b:c1:e6:3e:bc:ad:01:77:ea:fc:b4:64:be:
1c:29:c4:91:d0:ad:7a:c7:f5:53:b7:87:79:d2:0e:7c:cf:43:
af:be:e5:ec:1f:35:7a:ae:95:8f:af:0e:24:97:b7:3a:e7:55:
d3:e5:52:77:11:42:52:65:b4:d4:c4:2a:e6:50:ed:7f:2b:c8:
71:17:87:37:36:2b:69:2a:ea:91:a4:a3:fc:18:ea:86:39:0d:
e4:78:d9:50:c8:b5:9a:9a:50:70:2b:c2:6b:67:d0:22:97:7c:
37:18:27:6a:52:a5:8d:d5:2c:97:2e:85:6c:a7:b3:14:48:a3:
3a:79:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:36:39 2025 by rpki-client