Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/uLI48UjXAccO652u7CYTDrVRkPE.roa
File: uLI48UjXAccO652u7CYTDrVRkPE.roa (raw, json)
Hash identifier: 8t4VJ+nAT0Rx6ukHQ+mqPF7PjAyuM3EAu97eEjCqX+c=
Subject key identifier: B8:B2:38:F1:48:D7:01:C7:0E:EB:9D:AE:EC:26:13:0E:B5:51:90:F1
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0197AAF96CF93C667CDA453CF99F5A6A5667
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/uLI48UjXAccO652u7CYTDrVRkPE.roa
Signing time: Thu 26 Jun 2025 06:42:42 +0000
ROA not before: Thu 26 Jun 2025 06:42:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 212.100.176.0/22 maxlen: 24
212.100.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 06:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:aa:f9:6c:f9:3c:66:7c:da:45:3c:f9:9f:5a:6a:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jun 26 06:42:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8b238f148d701c70eeb9daeec26130eb55190f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:63:9b:f2:4a:77:f6:01:74:e0:74:e1:07:
e4:44:54:02:8f:07:b6:21:6e:d3:2e:73:d0:09:55:
64:e7:c6:21:17:07:5b:13:4d:a8:bd:0e:0d:3d:1a:
5e:8a:a6:fd:b3:69:50:5f:31:5a:bd:fb:10:41:e7:
c2:1e:4e:5d:aa:79:63:1f:d1:43:2a:b2:e2:a5:39:
cb:23:02:fb:4f:42:8b:48:39:d2:e5:bf:c0:1d:bc:
26:d9:cf:fd:53:2e:1f:88:4a:0d:b5:fd:e6:e0:c8:
65:aa:78:9b:7d:14:59:6f:3a:c0:cb:a7:8d:eb:fd:
0d:0a:cb:25:ae:04:a7:cb:85:6e:75:85:4a:99:ef:
c9:f8:ad:71:a8:17:66:73:1d:d8:85:f2:ff:2c:07:
c5:fc:22:b8:84:23:90:51:d4:5b:2c:0a:23:96:0a:
32:b5:89:2b:64:e8:01:84:3c:ae:7b:ea:fb:14:be:
1d:c7:b6:3e:cd:ae:45:e3:34:16:f9:91:84:59:7a:
dd:a7:c3:16:45:8f:72:7b:e1:f0:93:93:ee:96:e3:
73:5f:0d:6f:1f:4f:8a:47:fa:90:87:67:36:7b:77:
18:a5:25:fa:97:9d:d9:00:57:aa:28:e1:75:e5:06:
62:7d:5d:d2:61:5c:ca:db:bf:a9:59:4b:5c:87:11:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B2:38:F1:48:D7:01:C7:0E:EB:9D:AE:EC:26:13:0E:B5:51:90:F1
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/uLI48UjXAccO652u7CYTDrVRkPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.176.0/22
212.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:cc:dc:f9:1b:f5:b1:b7:48:ab:3f:69:29:18:b9:ef:ab:34:
c5:02:b6:e3:b9:1d:78:c3:cf:ec:ef:99:1f:75:b0:3c:1f:75:
23:41:8f:f3:fb:26:87:e7:10:f2:7e:5d:85:c9:1f:e6:87:cc:
b6:ff:bf:97:51:09:32:fc:b8:57:6c:bf:1f:4d:07:77:34:38:
cd:a5:a0:dd:3c:e8:46:74:d9:c7:71:91:87:b4:02:d7:b8:98:
11:8e:7f:e7:90:7b:e9:f8:32:29:a6:b0:98:01:7e:6e:b6:93:
f7:50:5e:66:2d:53:fa:b6:4a:f5:a9:14:80:fc:f4:5a:58:d3:
1c:07:ee:dc:c3:d7:27:9f:c3:e7:94:d6:95:f5:b1:9d:58:ef:
29:fa:32:0e:74:5c:55:8c:40:76:eb:ae:ba:1a:e9:fd:70:61:
96:f3:ff:ae:52:ba:5a:7a:24:89:7e:65:f0:b3:6e:6d:f9:7e:
d6:96:0a:e8:ca:20:c7:18:c6:77:71:dd:0e:90:b2:f7:b5:7a:
f5:bd:66:d9:e6:6d:97:81:d7:0a:df:ac:20:cb:61:e3:ca:0d:
82:25:65:8e:d9:35:ce:c4:ec:4c:cc:0c:4d:8a:0e:49:66:a3:
16:cb:24:81:ba:a3:db:00:15:c9:95:69:06:7e:f1:ee:d7:4c:
19:3e:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:14:14 2025 by rpki-client