Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-UJtvPuqDA2fCHpm4gLfKmTTSA.roa
File: 1-UJtvPuqDA2fCHpm4gLfKmTTSA.roa (raw, json)
Hash identifier: B2YDaJvQ1wCdiR9+cr+AqAyk/2qbcyAhoksLnJ1YTU4=
Subject key identifier: D7:E5:09:B6:F3:EE:A8:30:36:7C:21:E9:9B:88:0B:7C:A9:93:4D:20
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0185E95F94E5BA576006F1628C295CD73D54
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-UJtvPuqDA2fCHpm4gLfKmTTSA.roa
Signing time: Wed 25 Jan 2023 14:40:33 +0000
ROA not before: Wed 25 Jan 2023 14:40:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.75.69.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:5f:94:e5:ba:57:60:06:f1:62:8c:29:5c:d7:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 25 14:40:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7e509b6f3eea830367c21e99b880b7ca9934d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:18:18:ec:37:c1:38:c5:f6:c9:05:51:10:
d7:69:ce:f5:98:a8:b5:8c:68:a9:ae:e8:bf:ab:77:
d9:46:1f:8d:61:14:1d:38:d7:b1:6e:75:ea:ea:32:
b5:8f:e1:90:ee:07:57:9d:09:2e:a8:58:6d:04:70:
06:f6:e6:68:7c:7e:c2:f9:11:70:f4:bd:eb:1c:4d:
d0:22:76:58:94:07:b9:68:99:a4:3e:30:65:eb:c6:
9b:be:fc:f4:83:4b:1a:9a:3a:39:d5:b3:3f:60:b8:
77:e8:22:c1:35:37:34:51:db:f4:7d:de:65:e4:d9:
5e:42:2b:f0:d5:a3:44:b0:e7:c1:ad:30:06:1e:9a:
d2:5b:7d:d0:7e:1c:28:da:7d:2a:e8:86:8f:2f:5d:
50:1b:9d:c8:95:34:7b:67:7b:2f:ad:91:e3:98:2b:
e9:73:40:3f:03:a8:83:d8:34:cb:c0:55:11:ed:2b:
ad:a1:d3:59:10:ba:e3:39:1d:5a:3c:20:1a:8c:1f:
dd:4c:40:d9:5b:17:6f:ca:25:7f:cb:e0:98:79:10:
0f:57:d6:28:e1:bf:43:fe:b0:e1:00:a6:a3:18:74:
39:4a:b6:9c:0d:51:f7:b6:a8:b1:1d:d7:ae:29:fc:
6f:8a:4b:67:38:48:fd:28:80:0b:58:1f:d1:17:5d:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:09:B6:F3:EE:A8:30:36:7C:21:E9:9B:88:0B:7C:A9:93:4D:20
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-UJtvPuqDA2fCHpm4gLfKmTTSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
77:be:b0:98:8a:f0:77:e3:86:37:ac:0d:4a:aa:6e:f9:de:31:
8e:f3:23:21:1b:c6:d5:19:89:ae:a5:44:aa:1a:c7:b2:fb:c9:
c2:d9:36:95:60:56:75:8a:d2:8a:f3:16:6d:00:5f:21:aa:f5:
2d:dd:d7:fa:cb:e9:cd:1d:92:f8:20:fd:03:2c:30:0c:04:c1:
76:10:4e:ec:f4:4e:aa:37:67:da:52:01:62:34:05:0d:8d:a5:
db:1c:a0:2f:05:c8:31:19:4e:84:36:71:42:72:07:63:4b:71:
ab:27:e7:1f:3a:1e:3f:5c:53:b8:76:59:bf:97:1b:08:c3:62:
7d:68:a0:a8:c0:08:90:51:ad:f1:0a:da:71:3b:bf:60:7c:43:
04:0f:38:73:bd:5c:d0:64:35:6b:e1:95:0f:2c:7e:58:17:6b:
a5:44:5c:61:53:53:f4:94:3b:d1:fd:09:1d:08:ca:75:72:f2:
3b:84:2b:72:8b:6a:3c:01:00:1f:06:9d:54:c5:bf:9b:0d:f4:
33:4b:ca:d7:a8:68:a7:a3:e9:a6:9b:4f:87:9c:2c:db:7e:63:
8a:0e:5a:f3:22:1e:8a:8a:53:ad:51:9f:83:16:83:e1:27:2d:
73:d0:9e:a2:9a:31:98:f4:6c:51:e0:f0:70:17:49:90:1d:62:
f2:e8:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org