Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/AWAseUB9ECK5ncLPx0e0RLGrXlg.roa
File: AWAseUB9ECK5ncLPx0e0RLGrXlg.roa (raw, json)
Hash identifier: wihEwcmmsBIWQAIIKbIQwYD4arddEoEULMySckFK2Nk=
Subject key identifier: 01:60:2C:79:40:7D:10:22:B9:9D:C2:CF:C7:47:B4:44:B1:AB:5E:58
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0187FA8BE7C107047EAFE665C881EEE3962B
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/AWAseUB9ECK5ncLPx0e0RLGrXlg.roa
Signing time: Mon 08 May 2023 08:48:05 +0000
ROA not before: Mon 08 May 2023 08:48:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
103.75.71.0/24 maxlen: 24
103.75.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:8b:e7:c1:07:04:7e:af:e6:65:c8:81:ee:e3:96:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: May 8 08:48:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01602c79407d1022b99dc2cfc747b444b1ab5e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:81:79:61:cd:ba:0b:64:6d:b3:68:78:53:
c4:f8:7a:df:8b:7c:15:78:49:53:51:b7:dc:9e:3c:
b2:e7:21:08:fa:03:d8:98:59:0f:09:57:82:b8:11:
9f:2a:a7:a7:c4:4b:33:34:d5:fe:78:13:2e:fd:83:
4f:c8:48:b7:e7:94:35:bc:53:60:8a:e6:4b:93:68:
2e:d9:5c:2c:ac:a0:2d:54:b5:70:e7:48:54:20:96:
17:e4:2d:1e:7b:ac:ae:b0:1a:14:3d:05:0c:87:7a:
34:90:f4:2b:1f:e0:59:ec:53:14:d5:4c:4a:95:33:
54:ad:09:c2:34:c2:28:3a:36:d6:fb:66:8a:c6:fd:
b8:8f:2a:8f:f3:bd:18:e2:6a:86:42:be:41:0d:4e:
45:0c:8a:bf:35:66:c7:1a:7f:90:43:34:06:4d:60:
47:91:00:53:b4:75:57:73:1f:fc:5c:38:55:95:39:
0a:a0:14:f4:8f:87:3c:7f:a3:d7:bd:08:e2:e5:d1:
64:bd:b7:3e:ea:5e:c1:7f:ed:4f:cb:aa:85:e3:ce:
db:ff:f7:e8:b2:2e:21:cb:04:c8:e3:24:74:5b:ae:
a2:5e:bc:20:62:94:d9:ef:9b:81:94:bb:7c:0d:f0:
0c:56:bd:b3:c6:3e:f2:be:5e:f5:4e:6f:4c:c2:84:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:60:2C:79:40:7D:10:22:B9:9D:C2:CF:C7:47:B4:44:B1:AB:5E:58
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/AWAseUB9ECK5ncLPx0e0RLGrXlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.68.0/24
103.75.71.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
19:9a:ed:55:99:36:4e:75:5a:fc:6c:9c:a7:e4:c0:3e:0a:64:
fc:e3:d5:fe:cc:84:92:c6:f2:ce:ce:89:a7:fd:6b:bb:dc:70:
f6:6e:5c:8d:38:41:a8:bd:ea:d0:7b:20:af:ae:63:35:af:53:
56:54:63:3e:8d:88:f2:0f:8e:92:4e:c1:78:2c:a3:d9:63:8b:
40:c3:df:8d:b6:da:62:31:e1:fe:f0:e0:76:b2:d1:64:64:bd:
dd:e1:a5:23:b9:37:43:7f:ae:d7:87:c8:e3:2f:91:0c:b9:d2:
ef:d3:f3:3f:f3:1e:ae:2e:34:dd:8a:1f:b0:97:2b:14:f5:fb:
1d:0f:c9:75:a2:2e:4b:1f:a7:c8:0d:5c:b5:b9:94:d8:56:7e:
92:0b:b3:51:1b:35:d0:5d:3a:c1:e1:cc:22:c9:8c:f9:58:4e:
ce:71:16:36:ef:6e:a2:fb:1f:8c:f9:a4:42:79:3e:9d:62:5a:
f3:43:a0:6f:bd:01:59:16:bd:c2:4b:8c:a1:5d:8a:01:26:3e:
89:78:f6:92:96:b1:b9:cc:c2:9a:b7:60:55:47:1d:93:10:1d:
83:6b:2f:ff:a8:5d:5e:71:e2:1e:ef:1e:08:54:2d:f3:e0:7d:
36:62:8b:11:56:91:b0:69:b1:0a:ac:25:47:93:60:a3:a6:e7:
70:27:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org