Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Co2oWkvXNoBJDEvvXhph17x4N7s.roa
File: Co2oWkvXNoBJDEvvXhph17x4N7s.roa (raw, json)
Hash identifier: QGAsoXGwdTHt1qTN6tRBxqIr6DUSNWqFwk+l7XGOIq8=
Subject key identifier: 0A:8D:A8:5A:4B:D7:36:80:49:0C:4B:EF:5E:1A:61:D7:BC:78:37:BB
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0187FA4E8FF5AF4878BC18706D6E29CD0409
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Co2oWkvXNoBJDEvvXhph17x4N7s.roa
Signing time: Mon 08 May 2023 07:41:05 +0000
ROA not before: Mon 08 May 2023 07:41:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.75.69.0/24 maxlen: 24
103.75.70.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:4e:8f:f5:af:48:78:bc:18:70:6d:6e:29:cd:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: May 8 07:41:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a8da85a4bd73680490c4bef5e1a61d7bc7837bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:ba:b1:16:72:81:7c:a7:d2:e2:4d:dd:72:
bf:58:13:35:cc:a1:af:e4:16:61:72:56:e5:55:d8:
65:8b:e4:ad:87:e9:43:62:b7:6a:7f:8f:02:1b:6e:
73:32:ca:be:51:c9:ec:dd:00:a7:d9:5b:78:5e:01:
2f:ed:0d:95:1b:6f:4d:5f:7a:c2:11:b1:40:c7:b5:
77:8e:77:9c:f6:7b:ad:a3:1f:70:0a:b4:88:ba:cb:
f9:83:e8:13:42:d1:e2:fb:2a:d1:ed:c0:42:f0:66:
94:c0:1f:b0:af:32:91:2d:8f:f6:b4:2b:8f:07:be:
a0:6f:40:00:08:0f:8d:f4:8a:09:b0:32:9a:63:00:
bb:23:93:78:63:55:16:16:71:0a:16:6d:a7:10:c9:
a2:19:cb:72:f3:50:5f:8c:61:78:83:af:87:12:0e:
4e:67:ea:98:35:45:44:3e:ae:79:be:fd:35:61:d0:
2f:47:1e:2f:e4:02:81:ee:7a:51:0d:a1:52:de:4c:
a1:9e:89:08:fc:91:f6:02:80:ea:33:4e:2d:ce:46:
0c:4b:f6:8e:b9:61:3c:90:79:b4:12:4d:d2:55:5a:
ef:89:19:b4:5d:f8:de:34:c8:d6:fe:7c:79:11:a6:
52:85:d1:4d:46:74:b0:40:e5:35:11:d1:af:8f:a2:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:A8:5A:4B:D7:36:80:49:0C:4B:EF:5E:1A:61:D7:BC:78:37:BB
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Co2oWkvXNoBJDEvvXhph17x4N7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
103.75.69.0-103.75.70.255
Signature Algorithm: sha256WithRSAEncryption
53:cf:ac:c3:5b:79:5d:ef:0f:70:5a:4d:43:af:f9:e2:97:ca:
a4:8d:6f:a0:d6:03:b6:b7:c0:e0:0a:1f:05:77:ee:ab:81:bc:
27:c7:26:0d:3f:1c:fe:7d:e2:d1:23:8d:27:a5:46:b1:85:33:
63:ee:bf:ee:25:8b:eb:1a:e4:b9:d2:a5:2f:c0:e8:23:25:a8:
4a:df:66:3e:5a:e0:6c:5d:2f:1d:f8:5f:a6:07:42:60:e7:75:
ba:89:fa:6f:94:59:33:eb:db:3e:8c:fb:3a:b9:a0:cb:f6:0f:
6b:6f:33:49:ce:2c:3e:d7:54:90:57:59:09:53:6c:c5:26:3f:
f8:de:21:b2:b4:43:14:5d:a4:9f:cc:f2:92:ae:ff:03:a6:3e:
cf:8d:b5:f5:54:fd:84:4d:2d:8a:45:8b:fa:b6:df:24:45:93:
31:4d:c1:e4:cc:4a:09:93:62:45:de:88:0e:89:01:e7:e6:80:
3d:9d:66:bb:24:27:b8:f3:37:02:73:87:68:f1:3a:35:f9:0d:
b4:64:7c:5d:50:66:6f:dd:00:45:7f:ae:6a:1b:c1:88:26:f9:
09:bb:7d:07:5b:71:97:41:b7:36:85:2f:d6:6b:ec:c3:84:58:
43:38:55:5c:88:b4:3d:01:35:2b:c1:30:c4:44:6e:e6:cf:b5:
e1:ad:39:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org