Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/YRvrUp5J4ua0IK8ZNv24AzrZX-c.roa
File: YRvrUp5J4ua0IK8ZNv24AzrZX-c.roa (raw, json)
Hash identifier: lOhdN26dsqckfHpd5Lfu9S3ks1fgPOksc/6bwz9Bp0I=
Subject key identifier: 61:1B:EB:52:9E:49:E2:E6:B4:20:AF:19:36:FD:B8:03:3A:D9:5F:E7
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 0196A0332C40F0CF17FE8856CFE9A46A784C
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/YRvrUp5J4ua0IK8ZNv24AzrZX-c.roa
Signing time: Mon 05 May 2025 11:27:10 +0000
ROA not before: Mon 05 May 2025 11:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 11:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:33:2c:40:f0:cf:17:fe:88:56:cf:e9:a4:6a:78:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: May 5 11:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=611beb529e49e2e6b420af1936fdb8033ad95fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:5c:98:f6:17:4f:de:c1:95:b3:b5:b4:3f:
f5:5d:cb:d2:82:f0:ca:f7:cc:c3:d5:bd:b5:04:09:
ea:7e:ad:aa:de:07:e1:95:9c:b1:b5:c6:ba:b5:7f:
70:ff:6d:d4:44:9d:b1:18:65:c7:46:27:13:98:80:
54:04:81:a0:10:37:0e:36:5b:8b:8a:79:e0:dc:d7:
b0:f4:c4:ae:e5:37:d9:85:9a:ae:e7:15:0b:6b:0d:
3a:a4:9d:9d:b2:0b:ae:d7:b3:59:a2:44:be:40:c0:
46:49:6b:4f:e0:27:45:78:d0:b7:e3:0a:06:2a:eb:
33:aa:a3:fe:e9:03:e6:a8:e1:db:3e:3b:a3:73:7c:
b3:60:39:b4:86:c6:cf:1f:f5:58:bf:3e:b9:ca:83:
9b:a2:82:99:e1:08:2b:cf:75:1f:18:c9:93:a3:a3:
fe:fb:1b:a7:5b:80:7f:8e:f4:30:46:fb:28:a0:fd:
2b:64:46:81:7f:b8:4c:18:a7:02:08:ea:d2:da:4e:
9b:51:cb:be:b9:4d:67:68:7a:da:ee:b4:ea:45:df:
7a:7d:ef:e7:ad:e7:1c:eb:e5:51:89:a0:30:a8:78:
31:10:fa:b2:de:5a:f9:ff:1c:7b:48:6c:0a:25:02:
74:8c:0c:c0:15:c6:73:9c:3e:c6:cf:6e:02:20:86:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:EB:52:9E:49:E2:E6:B4:20:AF:19:36:FD:B8:03:3A:D9:5F:E7
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/YRvrUp5J4ua0IK8ZNv24AzrZX-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fa:f2:67:2f:af:c2:90:3b:e9:fd:4d:a8:39:f4:97:1e:5a:
b2:8e:16:c7:57:eb:77:e3:b3:68:c3:89:a4:3e:ce:11:c9:e4:
d9:be:55:a0:51:d6:52:1c:3c:24:0a:0b:73:ef:8e:0e:1a:e0:
41:82:76:cb:5f:1d:83:41:2b:ef:49:6c:4f:90:e5:cf:a9:01:
0e:7c:40:18:9a:93:46:33:7f:7f:b2:99:ab:eb:c3:0f:cb:ed:
ea:63:3a:c1:59:c7:a4:2f:c6:82:dc:94:c0:c7:62:8e:ec:84:
b4:fd:c9:53:0b:72:ba:ee:4b:a7:6d:1a:7c:9e:e3:99:0a:be:
b8:d1:3d:e6:9d:b9:48:cf:87:42:d6:f8:93:fe:d0:be:ca:6d:
24:a0:8d:b6:71:37:e7:29:ef:b9:35:c2:78:b7:a7:f1:25:b8:
40:da:a4:86:8c:6f:79:6b:e8:7b:38:dc:86:44:bf:ea:81:bc:
64:f8:4c:ab:4d:f6:63:70:77:e8:f4:ec:1f:e4:c2:6b:36:76:
84:fc:8c:56:8e:17:6b:53:00:d2:df:45:cb:de:f0:8e:7f:94:
4e:98:b2:da:b7:27:f6:ac:f0:3a:88:3f:7c:f9:80:27:fb:8a:
a0:8d:60:47:a9:e7:70:4a:c9:39:42:d1:40:c1:8e:2c:02:be:
db:ce:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:25:45 2025 by rpki-client