Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WlbcW4JKMyPRYSpYKY_rcW_V5G8.roa
File: WlbcW4JKMyPRYSpYKY_rcW_V5G8.roa (raw, json)
Hash identifier: 2D7YazHai3j8CbnfG9DloG3A1Y6Ra6CfJivU5+/Vhpc=
Subject key identifier: 5A:56:DC:5B:82:4A:33:23:D1:61:2A:58:29:8F:EB:71:6F:D5:E4:6F
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01955CD1AC98AFEEFF0F72B3E8E26D5DC051
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WlbcW4JKMyPRYSpYKY_rcW_V5G8.roa
Signing time: Mon 03 Mar 2025 16:23:19 +0000
ROA not before: Mon 03 Mar 2025 16:23:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 18:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:d1:ac:98:af:ee:ff:0f:72:b3:e8:e2:6d:5d:c0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 3 16:23:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a56dc5b824a3323d1612a58298feb716fd5e46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:aa:c8:b5:c2:67:66:0d:29:e2:0c:ed:e3:
b5:13:bc:4a:42:11:7c:2f:a2:99:01:37:e5:20:d4:
78:d1:66:d5:90:6a:c9:2f:b1:08:1d:6e:34:42:c3:
8a:ab:91:59:04:92:ec:dd:21:64:0b:02:46:72:fb:
3e:98:6a:87:57:8f:a9:be:0c:23:7d:79:48:ac:63:
da:3b:fd:1a:b5:ed:4b:34:c3:5a:29:11:3e:b5:49:
1d:1b:f4:82:a3:56:02:23:13:c1:70:70:5f:c6:81:
68:81:49:36:17:00:9e:55:38:cc:2c:a1:b0:3a:a7:
47:fe:dd:2f:b8:e0:8b:f7:54:09:9c:3a:50:0c:e5:
e7:30:c7:8c:af:2b:b9:24:16:92:a2:cc:60:2e:c3:
7b:bd:be:2f:99:56:e4:a7:e1:c7:3b:a2:6e:6b:00:
c1:41:78:ab:d0:49:52:5b:5e:c8:bc:00:55:44:f8:
61:7a:2d:04:31:6a:b9:de:25:4a:cd:d7:54:fb:92:
74:37:80:3b:ba:b6:3e:fd:c5:01:e1:65:94:85:70:
86:18:73:56:21:fa:5f:0f:1a:51:c0:b5:78:94:31:
ac:7a:79:10:bb:4a:d1:8c:5b:a0:09:9b:3a:59:23:
4c:0f:75:41:e0:e4:6a:b2:c6:56:b8:4c:be:d9:1f:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:DC:5B:82:4A:33:23:D1:61:2A:58:29:8F:EB:71:6F:D5:E4:6F
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WlbcW4JKMyPRYSpYKY_rcW_V5G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4f:4d:6a:1f:76:a3:d6:16:c2:54:ad:a8:b1:8a:9d:4a:d0:
95:0d:e0:7a:05:55:32:4f:76:3c:c0:60:56:03:19:31:b2:db:
3b:30:5a:6f:00:9a:c7:c1:e7:02:61:42:77:cb:47:e9:ec:e3:
b7:78:1d:10:ea:8c:c7:44:3e:00:a1:3e:32:e1:a4:23:22:f6:
95:bd:d8:a3:44:78:80:f5:81:3c:35:11:0c:37:94:b8:0b:f7:
03:72:43:73:88:ab:c1:0d:fb:9a:2d:fd:5e:3e:84:10:e6:d4:
ad:b6:24:66:af:3b:45:db:b4:7e:92:6c:ed:22:40:ba:e7:5c:
40:d9:bb:7c:1c:8e:2f:dc:3c:77:58:17:1d:9c:8e:0b:d9:00:
a2:58:90:be:ec:f0:6a:59:e0:b8:52:f7:8f:46:76:9d:95:8a:
80:87:20:09:03:da:b5:d3:ca:9c:94:47:4d:7e:42:90:f4:6f:
00:a6:d8:1a:09:57:99:74:c8:23:05:8f:06:cc:af:05:06:ee:
22:a0:35:d8:20:63:25:0c:3f:5d:b5:fd:78:d3:46:67:17:43:
2d:65:9f:f9:18:64:98:ef:f5:b3:47:48:a8:af:21:e8:de:54:
34:3c:fe:03:07:36:48:2c:b2:60:55:82:e5:d2:14:51:e6:68:
4c:b7:d1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:51 2025 by rpki-client