Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kqe9EAELME3zjwYRuEm9yfN0THQ.roa
File: kqe9EAELME3zjwYRuEm9yfN0THQ.roa (raw, json)
Hash identifier: N64sMLyZfCLGpCJbdFiO9EXUqUIDijMWfodt50M4lWI=
Subject key identifier: 92:A7:BD:10:01:0B:30:4D:F3:8F:06:11:B8:49:BD:C9:F3:74:4C:74
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0196272F65C050B7906A9C7BE14DCA0D6D6E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kqe9EAELME3zjwYRuEm9yfN0THQ.roa
Signing time: Fri 11 Apr 2025 23:28:59 +0000
ROA not before: Fri 11 Apr 2025 23:28:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45014
IP address blocks: 103.84.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 19:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:27:2f:65:c0:50:b7:90:6a:9c:7b:e1:4d:ca:0d:6d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 11 23:28:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92a7bd10010b304df38f0611b849bdc9f3744c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:91:16:99:8f:e3:87:1c:1e:5f:80:c4:be:
ed:cf:51:50:05:90:80:8d:e3:09:75:cd:3b:03:44:
8b:2f:85:b9:31:88:80:b2:68:9a:a2:96:29:ab:f0:
0d:bc:81:85:b3:78:48:b7:65:8f:e2:3e:8d:f1:bf:
ec:96:a8:fe:e7:e6:a4:38:c1:e6:78:72:fa:cd:25:
26:ed:c4:74:79:8a:bf:3e:0c:9c:a8:54:99:58:24:
4e:0b:4d:33:78:ba:1f:9a:65:18:af:bc:04:cd:ca:
3d:5d:8e:5c:88:2c:14:9c:31:7f:ed:db:e3:3a:57:
c1:10:a6:c9:d4:0a:73:75:95:47:51:79:a3:47:45:
99:be:4b:fb:44:04:23:c5:56:8f:f3:be:e9:f4:80:
52:57:f2:1f:9b:81:83:b0:50:37:46:37:fb:82:3b:
5d:0b:52:36:e2:41:91:cd:09:81:35:49:cd:55:61:
b8:38:a6:2d:10:de:c6:40:f2:c2:6e:db:58:33:d6:
6f:b2:4d:bc:59:45:6f:3c:4a:47:20:ce:64:d0:b6:
36:7a:b7:10:5f:e0:f5:9e:9b:53:bf:76:8f:d6:00:
f0:f9:bc:a2:38:a8:83:0e:5b:39:30:3f:7c:f4:a2:
c5:1d:5f:a6:71:a3:88:56:d1:9e:c4:07:ad:1c:06:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:BD:10:01:0B:30:4D:F3:8F:06:11:B8:49:BD:C9:F3:74:4C:74
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kqe9EAELME3zjwYRuEm9yfN0THQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.214.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f6:8a:32:d7:cc:50:02:a2:7d:3d:03:73:da:d4:62:18:2a:
48:29:08:25:1f:a9:a6:93:6c:e6:ac:b6:a1:a3:36:40:cd:7f:
58:20:ca:73:85:c9:c0:3e:76:a9:3f:11:31:cc:4e:fc:0c:98:
f3:33:91:76:1e:97:d1:90:cc:84:00:5a:ed:cf:7d:c7:2f:44:
c0:a3:96:f5:c9:17:c8:de:a1:97:f4:67:1e:38:90:50:b0:ba:
d6:3f:00:dc:a0:1e:cf:9a:cc:da:22:14:26:98:e4:ea:dd:47:
09:7c:5d:5f:40:a7:b1:a9:98:cd:c3:ee:3a:06:d4:b3:39:0c:
c4:62:e4:84:c4:a9:3e:d9:cf:d3:b7:9c:df:7f:e8:fc:65:0e:
fd:e7:4f:91:25:6f:fe:a1:29:7a:eb:26:e2:d7:c4:a6:22:41:
b1:b3:74:a9:87:6d:69:51:61:40:bf:63:50:33:3e:0c:d4:11:
8a:b1:68:55:bc:c1:bc:25:8a:97:d9:0d:f5:2d:05:c5:53:8d:
fb:1e:60:0d:3e:0b:96:dd:3a:80:75:cf:c1:ba:db:f1:be:36:
f6:bd:6b:4c:07:ce:88:be:d4:f2:4c:ff:76:29:4f:58:6c:17:
73:c8:78:21:72:f4:31:a8:83:3a:c7:31:82:1b:4f:dd:be:4b:
f1:5f:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:32 2025 by rpki-client