Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/5EbLTNC_sUsfmPXts_8FbdoBUh4.roa
File: 5EbLTNC_sUsfmPXts_8FbdoBUh4.roa (raw, json)
Hash identifier: OXflkU/89b5siAke1z/wOcvlYBnR/ZFZXm8/Vtes6PY=
Subject key identifier: E4:46:CB:4C:D0:BF:B1:4B:1F:98:F5:ED:B3:FF:05:6D:DA:01:52:1E
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0188DCF32DA2046749D0D47B4C2D5D7000DE
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/5EbLTNC_sUsfmPXts_8FbdoBUh4.roa
Signing time: Wed 21 Jun 2023 07:55:04 +0000
ROA not before: Wed 21 Jun 2023 07:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
103.75.71.0/24 maxlen: 24
103.75.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:f3:2d:a2:04:67:49:d0:d4:7b:4c:2d:5d:70:00:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jun 21 07:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e446cb4cd0bfb14b1f98f5edb3ff056dda01521e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3e:64:fe:78:da:a8:a2:0c:99:7d:7d:e9:68:
32:1c:0e:89:8a:31:87:03:73:67:90:15:26:d1:6f:
12:1c:57:44:c7:15:fd:f1:9d:dd:b8:24:e7:e8:fb:
3d:ac:2e:d6:70:77:c6:f8:50:9a:ba:3a:85:f8:10:
0e:5e:33:1a:48:dd:49:fb:9f:ed:4e:8e:fb:fa:48:
55:0a:12:c1:ae:ca:ed:f7:21:c3:0d:78:32:d3:27:
0c:9b:89:67:81:0c:75:8d:2a:4b:60:4c:dd:56:3b:
fc:51:84:ae:f8:bc:8e:b1:6a:22:06:d5:60:ba:70:
c2:40:c2:8f:58:03:d9:8a:b8:b9:2f:d3:5e:0e:70:
35:85:1b:9a:8d:88:79:dd:0b:84:5e:e1:98:20:fb:
7c:7a:0c:2b:c7:71:8e:2f:10:db:2b:ec:d0:f9:e5:
b6:fa:c3:49:9b:34:a0:8f:31:74:b1:a3:2c:fc:d9:
d2:db:fa:25:67:57:9f:c3:c4:55:6b:89:cb:1f:27:
d5:c8:85:2b:b4:9f:4e:d4:9e:c8:e5:49:24:c2:0f:
0d:39:df:13:41:75:2d:08:ed:e9:0c:fa:27:99:03:
51:d8:2e:bd:8b:37:72:e4:7d:be:d4:0e:29:17:67:
66:8d:0c:76:ed:9f:69:73:60:0d:9b:31:1c:e4:d7:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:CB:4C:D0:BF:B1:4B:1F:98:F5:ED:B3:FF:05:6D:DA:01:52:1E
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/5EbLTNC_sUsfmPXts_8FbdoBUh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.68.0/24
103.75.71.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:85:49:54:7b:f1:7b:08:c9:a1:81:ef:8c:aa:40:3c:9b:ec:
f9:a0:82:d9:f8:48:14:71:08:72:24:d2:bf:48:8a:e7:0b:18:
a2:2e:86:79:9b:ba:fb:32:24:0f:0b:1f:d6:a7:db:75:48:09:
4e:9e:39:7f:87:78:fe:6b:4d:9e:b9:f5:84:13:22:2c:77:13:
bf:f6:8d:38:ca:2c:8f:32:d5:ff:ae:5f:ea:92:85:eb:7b:0b:
3a:b8:eb:fa:b2:a1:0e:c0:00:b6:ba:af:28:f6:46:19:26:c7:
71:f4:66:3d:f4:37:d7:6a:3d:3c:9c:68:6c:04:0c:d4:06:0c:
0d:9a:76:a1:00:a0:57:e8:e4:69:fd:f6:aa:b9:87:f8:5d:8f:
7c:29:23:48:be:a0:61:37:d3:06:30:de:96:5c:2f:de:61:ed:
cc:01:c3:45:4d:72:6a:23:fa:3d:f6:d4:01:72:87:b8:93:01:
f6:9d:68:87:e8:5d:cb:63:e3:1a:9e:90:26:41:04:71:d9:2a:
be:bd:ef:ac:f2:ae:91:f1:b6:93:58:2f:07:a6:53:db:b9:a2:
62:a6:48:4e:a5:84:ba:c2:b1:cb:58:e1:91:a9:b7:55:60:6f:
1c:e0:25:41:a2:72:cf:b3:1d:01:43:ef:fd:8e:a7:e7:00:55:
4e:81:ac:9e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYjc8y2iBGdJ0NR7TC1dcADeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwNjIxMDc1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDQ2Y2I0Y2QwYmZiMTRiMWY5OGY1ZWRiM2ZmMDU2ZGRhMDE1MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj5k/njaqKIMmX196WgyHA6JijGH
A3NnkBUm0W8SHFdExxX98Z3duCTn6Ps9rC7WcHfG+FCaujqF+BAOXjMaSN1J+5/t
To77+khVChLBrsrt9yHDDXgy0ycMm4lngQx1jSpLYEzdVjv8UYSu+LyOsWoiBtVg
unDCQMKPWAPZiri5L9NeDnA1hRuajYh53QuEXuGYIPt8egwrx3GOLxDbK+zQ+eW2
+sNJmzSgjzF0saMs/NnS2/olZ1efw8RVa4nLHyfVyIUrtJ9O1J7I5Ukkwg8NOd8T
QXUtCO3pDPonmQNR2C69izdy5H2+1A4pF2dmjQx27Z9pc2ANmzEc5NdPWQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFORGy0zQv7FLH5j17bP/BW3aAVIeMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvNUViTFROQ19zVXNmbVBYdHNfOEZiZG9CVWg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZ0tEAwQA
Z0tHAwQAZ0yDMA0GCSqGSIb3DQEBCwUAA4IBAQDdhUlUe/F7CMmhge+MqkA8m+z5
oILZ+EgUcQhyJNK/SIrnCxiiLoZ5m7r7MiQPCx/Wp9t1SAlOnjl/h3j+a02eufWE
EyIsdxO/9o04yiyPMtX/rl/qkoXrews6uOv6sqEOwAC2uq8o9kYZJsdx9GY99DfX
aj08nGhsBAzUBgwNmnahAKBX6ORp/faquYf4XY98KSNIvqBhN9MGMN6WXC/eYe3M
AcNFTXJqI/o99tQBcoe4kwH2nWiH6F3LY+ManpAmQQRx2Sq+ve+s8q6R8baTWC8H
plPbuaJipkhOpYS6wrHLWOGRqbdVYG8c4CVBonLPsx0BQ+/9jqfnAFVOgaye
-----END CERTIFICATE-----
Generated at Thu Sep 21 21:22:08 2023 by rpki-client on console-ams.rpki-client.org