Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/InX6_QuMlZ7x1f5auzkZjBBEZro.roa
File: InX6_QuMlZ7x1f5auzkZjBBEZro.roa (raw, json)
Hash identifier: fRNJJqgbd8+b/DkbRBcgSAZ24sS6ZgVIDN8gIHiPioc=
Subject key identifier: 22:75:FA:FD:0B:8C:95:9E:F1:D5:FE:5A:BB:39:19:8C:10:44:66:BA
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 0196AF9FD7DF6D2832B151344F826A61D51F
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/InX6_QuMlZ7x1f5auzkZjBBEZro.roa
Signing time: Thu 08 May 2025 11:20:10 +0000
ROA not before: Thu 08 May 2025 11:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 09:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:9f:d7:df:6d:28:32:b1:51:34:4f:82:6a:61:d5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: May 8 11:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2275fafd0b8c959ef1d5fe5abb39198c104466ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:b4:6a:23:c9:93:fd:3e:be:9e:f3:4f:f7:
57:98:a8:ff:5f:0f:08:74:69:06:3d:40:7f:6d:97:
4f:d2:38:d3:58:77:09:d0:17:af:e8:02:6e:3b:3b:
d4:46:1e:04:b2:c7:d2:a0:fb:3a:8b:a6:1c:44:00:
95:0d:80:5c:3d:31:73:3b:2d:f5:89:5e:4b:4e:35:
9d:c7:7b:ab:14:6b:3e:b2:bb:db:ff:42:a4:fe:65:
e8:bc:d8:09:24:25:cb:02:86:3e:60:99:6f:b6:8b:
ad:d4:15:a3:6e:fe:d2:13:70:e4:f1:9d:44:c0:d3:
7a:e6:56:af:63:28:2a:7d:6d:74:d6:43:ff:4f:9f:
38:87:5a:0a:82:ea:05:3c:e5:14:6c:fe:80:32:01:
0b:8c:cd:0b:45:13:e4:8d:9d:ef:67:39:48:78:39:
55:84:84:39:95:11:5a:d1:f1:9e:92:e2:c9:ea:8c:
38:93:55:07:9b:ab:51:1c:e2:c1:d8:85:be:d0:bc:
bd:ad:d4:ce:88:e1:17:57:0a:8c:43:94:a6:e8:c5:
69:1e:15:53:94:78:1f:c7:41:af:07:bb:c3:82:e2:
d0:6f:86:3d:e8:33:7f:42:87:ba:31:3f:6e:86:c7:
3d:77:e2:7e:23:fd:dd:c9:92:f2:c3:40:88:2b:1b:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:FA:FD:0B:8C:95:9E:F1:D5:FE:5A:BB:39:19:8C:10:44:66:BA
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/InX6_QuMlZ7x1f5auzkZjBBEZro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3a:2b:d1:06:ab:08:48:4a:f2:44:e4:35:2e:9b:89:71:c1:
ae:0b:1d:6e:71:f8:ea:4b:8e:3f:2b:de:58:d2:d3:4d:73:33:
0f:27:af:84:55:40:0d:1e:42:b1:41:a0:6a:ff:2f:cd:79:5e:
66:98:c0:23:17:14:02:5c:15:52:ba:aa:e2:01:86:18:e0:fe:
d8:c6:8d:75:3b:7a:80:ec:1a:a4:22:b1:e9:56:b3:59:7e:de:
23:83:2a:06:99:91:b6:a7:9f:ad:fc:d0:64:28:b8:4c:d4:9c:
ef:5c:6f:81:c8:85:36:17:b4:67:ce:e2:cf:fc:ea:b5:dd:7b:
04:73:04:03:46:d0:27:50:38:1d:1a:69:51:b7:f0:ca:24:14:
61:1c:30:d9:3a:63:57:07:fb:1b:26:49:7e:dd:e6:e3:34:e3:
04:c2:aa:52:39:03:51:b8:83:5b:5b:80:39:3b:4c:a2:c8:89:
6f:01:7b:22:1d:74:6b:ac:50:c6:6d:73:7f:3f:5d:0e:0f:99:
f7:21:5a:22:0f:78:f4:22:f7:c1:fd:5b:af:9f:4d:dc:26:02:
00:d4:81:f0:9c:1c:e7:af:72:b0:44:f2:07:bc:a1:04:48:27:
0a:2a:42:e2:4c:76:96:34:33:b0:8e:e7:f5:15:5f:98:50:c4:
3d:0c:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:45 2025 by rpki-client