Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/LWupFKa2bso4dMvZzftKuPHVsjg.roa
File: LWupFKa2bso4dMvZzftKuPHVsjg.roa (raw, json)
Hash identifier: breDY+BJ2EYUtZpG6RMRaFTwy7I1rvwRDYhXXMxSK/g=
Subject key identifier: 2D:6B:A9:14:A6:B6:6E:CA:38:74:CB:D9:CD:FB:4A:B8:F1:D5:B2:38
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01960A28D30F6584FB51BAC564FAC4FE8A9D
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/LWupFKa2bso4dMvZzftKuPHVsjg.roa
Signing time: Sun 06 Apr 2025 08:12:49 +0000
ROA not before: Sun 06 Apr 2025 08:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45691
IP address blocks: 103.31.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 11:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:28:d3:0f:65:84:fb:51:ba:c5:64:fa:c4:fe:8a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 6 08:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d6ba914a6b66eca3874cbd9cdfb4ab8f1d5b238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:e1:e8:ab:bb:52:d9:25:8b:ea:cf:c8:8f:
8c:9d:23:f8:04:80:19:77:54:0e:af:18:fa:6a:28:
3e:99:7e:58:d5:ce:84:31:91:27:7a:57:31:b9:7b:
40:cb:85:c3:f4:b4:05:03:27:04:12:31:3f:57:c1:
f3:86:3c:e3:bb:d7:4a:c8:ed:95:1e:1c:a1:c3:36:
38:fe:70:aa:b4:b8:ea:e1:74:4d:f0:18:12:96:d6:
bf:c3:08:27:34:96:c8:91:fb:a2:a2:a2:70:f7:a0:
d1:16:00:4c:b4:84:a3:f1:97:7c:2b:8d:9f:22:68:
8c:61:bf:d5:7d:35:fe:df:85:61:b2:a6:fe:0c:ec:
ec:b3:f0:d3:4e:00:05:33:1c:b8:41:7b:b4:06:78:
db:9d:e4:64:1b:45:f8:56:98:c2:05:0f:c4:64:86:
e8:15:23:03:49:43:bd:3d:58:09:8f:ec:5b:07:bc:
bb:bb:4f:a4:03:b9:47:aa:7e:c5:5c:4d:e7:31:14:
aa:4d:40:f7:ca:a9:8c:34:ce:9e:d9:fc:11:70:56:
a9:ed:80:ec:ce:c0:be:f3:5e:16:b1:91:b8:2b:3d:
a9:ec:0a:df:1d:2e:f4:bb:1b:bf:3c:95:d0:71:70:
c1:fd:ed:3d:32:78:60:af:f7:8a:94:3e:1a:2a:25:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:A9:14:A6:B6:6E:CA:38:74:CB:D9:CD:FB:4A:B8:F1:D5:B2:38
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/LWupFKa2bso4dMvZzftKuPHVsjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.77.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cb:7c:a4:59:9f:73:21:3e:25:40:80:61:ba:59:bc:5f:95:
2c:40:7b:e4:2c:1e:d1:b1:13:34:59:15:e9:22:65:25:7e:81:
59:e3:df:74:9e:2e:7c:ea:78:8d:dc:7a:fc:dd:58:1f:eb:b4:
45:6b:1a:93:d8:4f:3f:db:1f:15:fd:e5:73:86:5f:80:e7:9b:
52:72:6c:7f:ef:5e:4b:73:4d:34:96:99:6a:cc:59:c2:53:56:
5c:4f:ea:ec:22:70:22:79:ed:3f:f6:c6:60:ad:03:3f:aa:aa:
cc:80:3d:cb:3d:d3:71:f3:6b:ab:36:3c:96:ac:e4:d8:e2:4d:
46:52:39:0f:28:40:97:7f:2f:61:42:fe:f7:28:10:da:95:bb:
f4:e7:05:89:19:96:f7:57:90:c2:13:53:ca:ca:cd:87:19:f2:
46:e9:5d:e2:10:ce:90:be:cd:51:c6:2f:36:f0:4c:ec:d4:b9:
8a:21:bc:36:e4:33:56:c0:4b:ae:50:a5:e8:b2:20:b7:1d:c8:
52:c0:da:79:a4:a1:44:05:85:c3:f1:bc:c5:73:37:78:e4:72:
ea:25:23:c0:cf:89:8a:dd:41:ee:d9:41:66:72:c3:00:36:2e:
58:08:27:f0:8c:9d:22:74:2e:71:96:e7:9a:92:1e:fc:f3:c1:
2e:01:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:13 2025 by rpki-client