Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uktCaJ4VuY-E6Yk-WuAd1_vchBU.roa
File: uktCaJ4VuY-E6Yk-WuAd1_vchBU.roa (raw, json)
Hash identifier: sbszUokqi+XlegyQgjoHLN9hx/HWJqvm5c+cF4XKjko=
Subject key identifier: BA:4B:42:68:9E:15:B9:8F:84:E9:89:3E:5A:E0:1D:D7:FB:DC:84:15
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0196DABAB19CBEB250B77E48741699A38478
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uktCaJ4VuY-E6Yk-WuAd1_vchBU.roa
Signing time: Fri 16 May 2025 20:13:10 +0000
ROA not before: Fri 16 May 2025 20:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151734
IP address blocks: 103.47.59.0/24 maxlen: 24
103.63.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 19:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:ba:b1:9c:be:b2:50:b7:7e:48:74:16:99:a3:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 16 20:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba4b42689e15b98f84e9893e5ae01dd7fbdc8415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:fa:b8:be:66:f3:c0:eb:96:21:04:1b:fe:
dc:8d:53:a9:d9:3c:80:ce:54:34:b1:26:8b:ea:01:
c0:9a:34:0a:4d:76:4b:c4:0b:06:c3:f4:8a:81:3e:
e4:54:d0:db:cc:91:e9:2a:53:50:84:e4:93:bc:aa:
01:7e:cc:c8:28:f7:67:c7:01:9b:a4:4c:fd:ec:71:
42:41:3b:d5:53:a6:f4:4d:e6:90:c7:be:21:e0:20:
12:a7:57:dd:c7:9a:5c:f5:f1:c1:b0:f7:c0:b0:03:
55:f8:84:dd:de:58:2d:66:f6:da:47:27:18:41:9e:
de:22:2b:a6:54:c6:43:43:50:21:cf:8b:d2:a4:7b:
1c:b1:0b:e6:b3:8d:db:51:95:5a:63:f2:db:1b:80:
32:e1:e1:e6:a2:89:c2:44:bd:ef:bc:2e:06:e9:ba:
52:80:2d:7e:36:2b:5a:34:d8:0d:83:0e:d0:6a:70:
8a:5a:38:9f:0d:cc:81:03:fe:d3:87:7a:57:74:16:
e7:cc:f8:c2:08:79:93:af:04:89:38:ca:c6:af:60:
0a:ad:34:01:a2:52:61:84:13:86:9a:f0:88:1e:41:
88:93:d5:5a:88:e3:c9:f1:3c:e4:d4:e1:67:02:05:
28:b0:7b:fe:d9:c6:67:ad:a0:e6:6b:f2:e9:1d:f6:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:42:68:9E:15:B9:8F:84:E9:89:3E:5A:E0:1D:D7:FB:DC:84:15
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uktCaJ4VuY-E6Yk-WuAd1_vchBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.59.0/24
103.63.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8f:ea:63:00:5c:22:6f:2b:b1:04:bb:9c:fa:b7:ad:a4:22:
b9:aa:72:ce:1e:ac:d7:d2:f5:02:10:e8:78:e7:77:a6:9c:1c:
0a:3f:05:d0:ac:07:0a:2f:9e:9c:d9:c3:eb:dd:c5:fe:d7:96:
e2:f4:23:df:2f:65:ad:f0:de:e2:f7:b0:cc:8f:48:14:14:70:
72:c9:30:ef:59:fb:c5:32:84:88:6a:8d:02:e8:94:d4:a0:ce:
31:5c:c4:71:02:72:c4:2b:14:5e:cc:77:68:28:a7:92:98:21:
5e:1b:67:dd:39:b7:67:4f:d9:b3:79:46:f1:1c:39:ef:12:90:
83:2c:c2:88:13:9f:35:4b:b4:ab:2f:fa:07:62:4a:22:e1:72:
6b:05:56:45:9b:cc:9f:94:74:49:dc:9c:36:7e:c3:c9:ef:9b:
f6:82:3a:5a:94:cb:06:22:a0:bc:e5:d9:43:47:5b:fe:54:d1:
ff:d7:77:08:fe:24:68:51:53:ab:d6:af:30:c3:5e:74:3e:1f:
76:86:d8:fb:8d:26:f4:98:83:98:d3:d2:8e:79:93:9a:08:03:
5a:79:10:a7:ba:5c:db:e8:06:47:bc:b4:42:d3:36:36:cc:0b:
f3:99:2e:88:90:1a:57:9a:2a:78:de:d4:9b:d0:67:3f:d6:62:
3a:db:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:32:53 2025 by rpki-client