Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4zoR0LLP_bkvH_t4wtTkDQIepYQ.roa
File: 4zoR0LLP_bkvH_t4wtTkDQIepYQ.roa (raw, json)
Hash identifier: wBevKlB1yvGLgMlY15cfRDv4FEdxmkyoEBlFNC1k+oY=
Subject key identifier: E3:3A:11:D0:B2:CF:FD:B9:2F:1F:FB:78:C2:D4:E4:0D:02:1E:A5:84
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0195647713F12940749401366183E6140EFC
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4zoR0LLP_bkvH_t4wtTkDQIepYQ.roa
Signing time: Wed 05 Mar 2025 04:01:20 +0000
ROA not before: Wed 05 Mar 2025 04:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139817
IP address blocks: 103.148.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 13:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:77:13:f1:29:40:74:94:01:36:61:83:e6:14:0e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 5 04:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e33a11d0b2cffdb92f1ffb78c2d4e40d021ea584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:4c:d7:fb:ea:62:28:11:dc:fc:eb:dd:af:
fe:57:ec:01:ff:d7:39:68:b9:52:9d:28:c6:d1:85:
5e:a6:b0:75:72:47:1a:57:62:53:ef:5c:f5:a4:1a:
8f:8c:09:65:d0:9a:0e:1f:10:75:5d:5c:7d:2b:b6:
44:b2:9f:94:79:e7:84:f4:70:2c:cb:83:3e:22:1d:
f9:d1:c2:6a:69:d5:98:36:9d:a0:94:f2:aa:80:d5:
65:ba:a4:6c:cd:0d:c1:a8:77:9c:07:ed:9c:88:0e:
f2:c4:64:48:d8:94:70:85:57:cf:5a:7b:47:0c:dd:
dc:e1:d2:93:12:1e:60:a3:e5:c0:12:0f:18:01:c7:
79:e4:83:84:73:cc:31:97:f8:fc:82:2d:66:3a:7c:
56:1e:90:e4:63:8f:97:7b:6e:00:b8:a3:ce:17:38:
d2:ee:68:9a:b6:22:aa:e1:64:0e:2d:06:6b:86:66:
97:65:82:5e:37:72:3c:3b:18:73:d4:3a:1e:6d:43:
b5:ad:99:01:d8:55:0f:36:98:f4:f7:12:ed:1a:df:
77:b7:3d:2f:56:16:2f:2c:8d:d4:a6:82:de:ff:ec:
82:bc:99:92:71:1e:ac:0f:c3:2d:55:c3:86:1b:5c:
05:ba:0d:0c:1b:3c:d3:70:d0:52:b8:af:50:b8:92:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:11:D0:B2:CF:FD:B9:2F:1F:FB:78:C2:D4:E4:0D:02:1E:A5:84
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4zoR0LLP_bkvH_t4wtTkDQIepYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:61:27:12:c1:ee:9d:72:ab:a7:c6:90:3c:eb:a1:00:6e:55:
22:cb:43:70:35:b0:fa:e8:25:4a:27:d5:c5:1a:b8:b9:1c:19:
ae:41:e7:58:ec:61:09:c0:d8:e2:49:89:af:35:bc:42:76:23:
1c:60:7e:31:88:0d:bb:49:b4:0f:af:b7:87:67:5d:03:ae:56:
a1:96:5c:30:0b:eb:79:53:2a:fb:65:0e:34:f0:53:07:9a:9d:
7c:79:72:99:82:65:d4:dc:fc:5c:06:af:d4:2b:27:dd:9e:9a:
05:a3:a3:89:55:46:0a:23:65:ce:c2:66:4f:f4:95:be:e6:f1:
ad:f8:52:d2:3c:c7:1c:b6:20:01:19:40:d8:6d:08:dd:38:c7:
c1:ac:5c:69:84:03:e9:d9:62:75:f7:06:23:d7:31:d3:26:14:
f1:06:eb:bf:dc:67:bd:5d:4d:81:32:e8:e6:c0:cd:18:9c:c1:
de:bd:4f:9b:8d:98:a1:9a:b7:f4:c5:f2:fd:1d:c7:85:27:d1:
f6:4c:d7:cc:e0:f1:42:5f:84:5b:52:74:6b:48:07:42:21:7b:
05:a6:a2:6e:ef:94:d7:cb:11:fb:65:13:fc:f5:29:9a:7a:ae:
ba:54:f2:34:a7:59:2b:d2:46:11:c9:77:b7:99:8c:db:5d:8b:
28:c2:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:26:25 2025 by rpki-client