Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qA5m80JHliyCVeOUAW0JJS-NRhY.roa
File: qA5m80JHliyCVeOUAW0JJS-NRhY.roa (raw, json)
Hash identifier: 4nyahEOi72oMZUlmPSeb3WW+sXQ0Uv+HRRNb85BbiGA=
Subject key identifier: A8:0E:66:F3:42:47:96:2C:82:55:E3:94:01:6D:09:25:2F:8D:46:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195939CED85E79AF4C317C2486EB4E42378
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qA5m80JHliyCVeOUAW0JJS-NRhY.roa
Signing time: Fri 14 Mar 2025 07:44:49 +0000
ROA not before: Fri 14 Mar 2025 07:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 103.227.87.0/24 maxlen: 24
2a0f:31c1::/32 maxlen: 32
2a10:67c2:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Mar 2025 08:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:9c:ed:85:e7:9a:f4:c3:17:c2:48:6e:b4:e4:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 14 07:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a80e66f34247962c8255e394016d09252f8d4616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:cb:70:f6:20:c5:ef:2c:16:7b:8f:bf:dc:
f2:ef:7f:fd:0e:d9:1b:bb:87:a4:4d:93:ab:f1:b3:
ea:e5:a6:b6:67:95:3d:f6:16:ae:9f:f9:0e:e2:c6:
a5:99:92:19:de:33:08:50:64:2b:ae:8c:4d:15:fb:
6a:c8:3e:82:ee:d7:b2:6b:87:7d:c7:ab:89:6d:5e:
15:45:62:6b:28:6a:55:11:90:21:a8:fb:c8:14:70:
d8:da:f5:8b:2f:41:46:a3:b3:d6:b7:d7:e7:5a:24:
63:70:2f:9a:27:a6:a1:43:fd:08:36:b9:b7:74:50:
0b:e4:74:71:23:82:c9:a3:db:27:4e:77:c7:ea:1c:
f7:57:06:6c:39:f1:da:ee:74:5e:ee:99:e0:20:20:
6a:5b:62:92:68:69:70:ef:d5:ef:42:89:76:54:98:
b8:71:c1:0e:ae:db:68:1c:08:c5:1d:72:ba:ca:fe:
0b:2e:7d:39:07:9f:4d:81:d1:d1:64:0c:be:1a:60:
fc:5d:5a:4b:9c:ad:fa:dd:d6:5f:d4:ca:2b:45:cb:
6b:16:da:91:bc:43:ec:33:10:47:5d:93:01:1e:e4:
00:0a:17:ca:ef:45:75:53:55:61:42:fd:0c:e6:ff:
5f:b2:15:30:b2:ed:49:48:fd:a9:eb:d6:4d:ca:71:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:66:F3:42:47:96:2C:82:55:E3:94:01:6D:09:25:2F:8D:46:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qA5m80JHliyCVeOUAW0JJS-NRhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.87.0/24
IPv6:
2a0f:31c1::/32
2a10:67c2:2::/48
Signature Algorithm: sha256WithRSAEncryption
0a:b7:7c:a4:94:af:19:e3:a7:9e:5c:cc:44:3a:93:a2:4c:af:
fc:d9:2e:0e:03:24:08:17:dd:ba:60:d0:27:4c:e4:f9:1d:b2:
d3:a1:40:4b:a5:cb:4e:b8:60:4d:f4:fa:f5:9e:75:2f:37:98:
3c:80:93:af:fd:f1:f1:36:6c:ef:ec:e2:40:f2:96:a3:1a:75:
b2:c8:26:ea:d8:f8:ec:0d:8e:76:23:29:66:76:39:ac:cc:9b:
4c:d8:71:50:5e:aa:24:fb:57:cb:ce:e4:29:b6:7b:7e:02:66:
49:8b:36:0e:bf:9b:2f:09:42:97:6f:74:49:d6:61:86:d4:6e:
07:7a:b0:ad:65:23:a7:e6:6f:88:88:48:b5:e4:97:7e:2a:aa:
71:24:a1:79:e8:13:c3:98:6b:a3:21:2f:6a:4a:06:36:ab:e3:
88:25:ef:19:ae:22:5f:8e:10:01:ad:8c:be:65:3e:b6:18:ab:
af:5f:0e:6f:6f:5e:30:19:a8:e3:0b:d2:65:75:ab:59:73:82:
68:fa:7c:d7:d3:f2:26:29:76:e4:69:6c:57:1b:83:cc:41:c8:
30:b4:2d:75:db:58:36:11:3c:cb:9a:4d:4c:da:3a:0e:02:8f:
fd:87:23:6d:e4:33:9a:32:d3:03:da:45:bf:55:01:4b:7d:22:
f9:09:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:52:49 2025 by rpki-client