Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/9IzZIocKmt13VD2U3qDHliQ767s.roa
File: 9IzZIocKmt13VD2U3qDHliQ767s.roa (raw, json)
Hash identifier: 1WR0wKwq3Y3pnxyaHugXswEfhniTRTPfmwqU5GoQ8Zo=
Subject key identifier: F4:8C:D9:22:87:0A:9A:DD:77:54:3D:94:DE:A0:C7:96:24:3B:EB:BB
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018B097A7C64D681337896EEB522C21E99CB
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/9IzZIocKmt13VD2U3qDHliQ767s.roa
Signing time: Sat 07 Oct 2023 09:31:44 +0000
ROA not before: Sat 07 Oct 2023 09:31:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19762
IP address blocks: 103.76.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:7a:7c:64:d6:81:33:78:96:ee:b5:22:c2:1e:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 7 09:31:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f48cd922870a9add77543d94dea0c796243bebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5e:16:bd:49:89:29:3a:66:9e:21:cd:95:e1:
53:63:da:5c:a3:f5:6b:3a:97:94:dd:46:db:2d:0d:
55:80:5c:77:ea:28:35:e2:68:99:7d:71:14:b6:49:
72:0f:3b:bb:a7:81:57:7c:3b:38:71:76:44:72:c2:
57:ea:8c:6a:55:ed:af:39:31:06:b7:fc:c5:4b:b1:
88:e7:2d:db:ab:61:72:48:06:a9:c1:cf:01:86:49:
8c:45:83:c1:72:a8:ab:c1:4f:f3:74:1a:10:5b:04:
08:17:99:eb:1a:32:19:45:3f:85:2d:48:02:53:2b:
4a:9d:f4:99:bb:01:7e:3e:c3:06:af:54:cd:99:4b:
c9:83:2d:fe:26:17:ca:cc:42:a6:ac:7e:f3:47:ce:
69:86:79:e2:9c:c0:f3:5d:03:a0:a1:ef:8f:5d:e8:
39:f8:70:d1:c6:e5:61:b8:dd:8c:aa:dd:fc:95:d2:
f3:0f:7a:b4:e1:cd:9d:37:de:42:63:78:03:5a:35:
dd:f5:7f:12:53:2f:65:e3:63:0b:80:93:35:6e:14:
c7:db:4b:19:fd:4f:ce:b7:f2:61:83:86:40:69:c2:
8f:a3:be:ac:6c:c2:48:56:5d:8f:e1:07:ed:f0:e2:
66:4a:6b:ed:cf:aa:f6:c1:29:cd:07:b1:7a:cc:77:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8C:D9:22:87:0A:9A:DD:77:54:3D:94:DE:A0:C7:96:24:3B:EB:BB
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/9IzZIocKmt13VD2U3qDHliQ767s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0d:e4:bd:b1:24:f1:47:71:b9:4a:fc:42:fe:ea:16:79:1c:
1e:ab:27:05:05:2c:59:9c:a7:d6:d7:a5:ca:b2:89:0c:a0:80:
7c:ac:83:5a:91:03:4c:44:eb:51:63:d8:df:58:76:e5:76:ee:
e3:78:52:d9:83:27:3f:ca:c3:56:cc:f3:16:36:78:ea:0e:ed:
24:40:54:cc:f3:10:79:9c:40:8e:42:bd:5f:57:c7:3e:90:24:
a2:20:82:a7:7b:1c:dc:20:4c:42:f9:2b:22:f4:2c:3e:fe:11:
28:dd:09:1e:0a:95:d2:24:f2:2a:a5:7e:64:5c:14:9f:d9:84:
05:ed:cd:37:f0:7b:14:93:37:b4:2c:9d:85:a1:f8:b8:23:82:
0e:a0:d2:68:60:05:48:9c:38:09:55:a1:68:34:7d:63:af:7e:
46:da:fc:3d:70:62:9e:eb:b7:53:7f:db:01:d6:20:f3:5e:0b:
89:4b:96:af:eb:c5:05:72:0b:c5:c5:59:a1:53:a5:c6:ad:22:
13:92:e3:a7:23:e5:a8:34:d9:cd:12:58:b6:12:47:1f:24:93:
91:75:95:44:71:a1:6b:ea:e8:0c:5c:82:e4:84:c2:15:11:a4:
bc:66:c2:1b:15:45:b2:9f:1f:40:a8:82:fb:d7:5a:4b:3c:41:
a3:c7:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:24 2024 by rpki-client on console-ams.rpki-client.org