Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/RF8bisoOiU5FCUTkHtKeRZzSoAk.roa
File: RF8bisoOiU5FCUTkHtKeRZzSoAk.roa (raw, json)
Hash identifier: UnJtsP6a2AxQ6dUdrxZGn25NffGN6+v7skcvoMUVJzE=
Subject key identifier: 44:5F:1B:8A:CA:0E:89:4E:45:09:44:E4:1E:D2:9E:45:9C:D2:A0:09
Certificate issuer: /CN=91bd5883c82aed25fef1b18d70d0215b07f727d8
Certificate serial: 01961293FA5860FEEF3FAC9B21AA40D02D36
Authority key identifier: 91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/RF8bisoOiU5FCUTkHtKeRZzSoAk.roa
Signing time: Mon 07 Apr 2025 23:26:49 +0000
ROA not before: Mon 07 Apr 2025 23:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134844
IP address blocks: 103.214.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 22:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:93:fa:58:60:fe:ef:3f:ac:9b:21:aa:40:d0:2d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bd5883c82aed25fef1b18d70d0215b07f727d8
Validity
Not Before: Apr 7 23:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=445f1b8aca0e894e450944e41ed29e459cd2a009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:55:d8:10:d9:84:eb:f2:00:d6:68:9b:9b:
c7:c9:26:c3:9f:b5:78:80:2b:3b:6c:2a:75:ca:57:
94:af:ae:85:5c:09:29:6f:eb:03:32:43:4d:ef:0f:
b3:5d:8d:68:75:ae:08:58:7d:8f:49:af:28:2c:8d:
b4:1c:86:4d:5d:aa:c3:d8:ee:7b:99:a7:a7:96:19:
01:1f:58:a4:2d:a2:2b:a3:6b:08:6f:11:20:41:3b:
12:86:4a:33:0c:98:88:29:b5:9b:14:9e:73:bf:07:
86:42:1d:ce:2b:7a:5d:62:68:63:f1:7a:6f:36:5e:
69:2d:0c:7b:09:10:5f:23:9f:00:a4:c9:96:23:04:
7b:f4:39:2b:5c:18:4c:77:71:ee:21:6f:4f:50:49:
6b:de:4f:01:c6:9c:13:0f:ce:7d:f7:8b:42:6e:0e:
87:29:56:ad:50:56:e5:ef:9d:b7:38:fc:7b:6b:74:
09:de:b5:46:4f:77:4b:d9:4a:f3:7e:ee:fd:7d:47:
b4:7d:5c:b1:ea:ef:64:43:dd:70:3d:89:11:30:66:
5f:40:42:fa:77:4b:31:e6:f2:2c:bb:f8:d5:c4:98:
95:9e:66:b0:ce:c0:2f:5b:35:e7:1b:c6:5d:52:6b:
11:9f:a8:9a:51:e7:7d:32:83:69:f1:d3:7b:6b:64:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:1B:8A:CA:0E:89:4E:45:09:44:E4:1E:D2:9E:45:9C:D2:A0:09
X509v3 Authority Key Identifier:
keyid:91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/RF8bisoOiU5FCUTkHtKeRZzSoAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.206.0/24
Signature Algorithm: sha256WithRSAEncryption
56:aa:2e:5b:fc:b0:df:e2:15:a5:0b:1f:be:5d:a2:76:5e:5f:
76:69:7e:f0:05:62:c8:fc:6d:e9:5a:4b:80:53:5a:ad:7f:d6:
cb:25:b8:3c:45:24:54:08:8e:f9:78:29:23:98:85:7f:79:97:
0d:fc:71:d8:8c:17:e3:6d:61:69:b4:47:83:a5:5d:0a:eb:20:
26:50:18:41:87:cc:a1:fd:5e:e5:5b:29:70:39:24:a5:6b:08:
df:1f:79:a1:d4:5b:c3:39:58:f5:0d:a7:79:c6:fc:fd:21:c2:
41:98:17:0e:1d:5f:11:53:73:59:21:fa:1a:e5:4b:82:9f:24:
76:17:96:8f:ab:d7:6b:60:2f:e4:f8:7f:47:67:d4:e8:74:09:
43:f7:a9:c8:02:e1:25:4e:f2:48:46:55:8d:d8:26:9e:d8:7d:
7f:7a:eb:ea:fe:b6:36:41:2b:ea:a7:de:d8:db:8e:89:5a:14:
6b:83:7e:1c:a6:4b:b6:b4:be:ca:4c:2c:70:4b:1c:47:e0:cf:
9c:ef:cc:9b:f0:79:72:84:ff:2e:fa:1f:e6:4b:3d:90:8a:e5:
8f:6a:e5:c7:3f:25:de:e2:9f:46:06:88:fb:c2:89:26:2e:93:
fa:57:c7:22:a1:3e:e4:bb:24:8d:5a:32:fd:1f:c3:4c:d9:c9:
71:ec:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:11:59 2025 by rpki-client