Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/6SmEC6qsh2MnFyHDehlrIMN_6yU.roa
File: 6SmEC6qsh2MnFyHDehlrIMN_6yU.roa (raw, json)
Hash identifier: 6yDfqYlHGdaq+gAr7LCqeTgqmCXPsC8RUQZUxEPljio=
Subject key identifier: E9:29:84:0B:AA:AC:87:63:27:17:21:C3:7A:19:6B:20:C3:7F:EB:25
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0186C1E5E25FD4ECAE71CBAC6DA2CE17FF66
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/6SmEC6qsh2MnFyHDehlrIMN_6yU.roa
Signing time: Wed 08 Mar 2023 15:45:13 +0000
ROA not before: Wed 08 Mar 2023 15:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:e5:e2:5f:d4:ec:ae:71:cb:ac:6d:a2:ce:17:ff:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Mar 8 15:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e929840baaac8763271721c37a196b20c37feb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:10:c4:1b:27:df:5a:bf:c7:7d:28:d7:da:
7e:f3:3b:4a:75:a8:1d:5c:40:74:d6:f2:f4:f2:d9:
66:00:0d:54:80:5a:0f:6a:1f:f2:d1:59:f9:c7:dc:
b9:85:81:7e:51:ed:78:c9:64:ed:2f:72:ec:78:fa:
21:99:6a:5a:9c:4d:41:d5:44:c5:d6:d0:5a:12:1f:
b2:03:de:b8:05:c3:70:56:23:1f:74:37:36:4e:3d:
93:15:15:c3:57:57:82:33:94:5f:6f:36:1b:a4:61:
c1:58:14:8d:5b:54:04:6f:79:57:b2:0f:04:c2:28:
70:b8:57:bd:f2:53:40:ad:ec:1f:60:b3:89:83:21:
b6:11:7b:17:42:db:95:a2:db:68:39:5b:fb:b7:8f:
47:56:60:8d:ab:d9:12:1a:2b:50:e6:3a:62:a9:12:
70:5a:e0:c1:ab:61:71:f0:a1:ef:a8:a0:f1:9f:7b:
4c:73:55:b6:a1:c3:2e:86:39:9e:42:e7:36:8e:6c:
9d:a1:ba:1d:7a:bc:57:18:0a:dd:0d:bd:d7:39:91:
dc:e6:47:19:6a:f5:66:61:42:f1:74:8d:62:2d:98:
63:ac:5d:f5:ca:42:04:7c:09:9f:d4:0b:70:58:84:
a0:fb:a6:08:33:74:0b:ae:be:6c:78:e9:8e:ec:d1:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:84:0B:AA:AC:87:63:27:17:21:C3:7A:19:6B:20:C3:7F:EB:25
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/6SmEC6qsh2MnFyHDehlrIMN_6yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a8:8c:dd:b9:df:13:eb:bd:b4:e5:69:74:0f:88:f7:cd:94:
48:62:b1:d1:84:24:9a:c0:ed:e7:66:9f:23:4e:12:34:c4:2e:
09:3a:28:32:82:3d:5f:f8:32:f9:8d:b4:72:6a:6a:b2:37:c3:
80:a5:eb:a8:53:37:68:b9:02:1a:d6:3d:0b:71:12:14:a4:1f:
4a:07:55:88:ab:6c:9f:e8:70:48:bb:ee:0e:9b:b4:59:b3:c9:
43:9a:d3:24:f7:7c:01:af:1b:f9:41:4d:7b:8e:76:ce:37:19:
1e:1f:b3:64:c4:d5:8c:d6:10:43:79:02:22:f6:11:39:70:ea:
dc:86:c6:7b:9e:82:5f:a2:49:6e:91:08:f1:15:6b:08:15:bc:
ff:4d:1c:d1:14:1e:8d:53:37:00:8e:c2:2f:af:87:1b:b5:3d:
a5:37:06:d6:51:c7:f2:cd:07:13:4d:9c:6b:4a:89:b5:ef:e1:
51:d2:24:8c:11:fc:97:f4:df:23:98:1c:34:ca:4c:9a:7d:04:
56:53:b7:77:85:d5:3f:d1:ab:0f:64:d0:ee:b3:99:da:7a:0c:
9b:f6:31:fa:98:a8:8e:d1:a7:ef:a8:3a:fc:c0:2b:65:4d:18:
8a:7c:da:b9:66:88:28:b0:af:04:78:18:4e:11:07:7b:56:34:
88:a2:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org