Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/DNUDvFYXFlmpk2eXDEgYuhG8QtQ.roa
File: DNUDvFYXFlmpk2eXDEgYuhG8QtQ.roa (raw, json)
Hash identifier: ftNnF1ouQehxfocZwVYBmCYGgK5VoZ/2LgSpLd67360=
Subject key identifier: 0C:D5:03:BC:56:17:16:59:A9:93:67:97:0C:48:18:BA:11:BC:42:D4
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018B1E2F90BCB54E0CD59CA61C99E38D88B8
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/DNUDvFYXFlmpk2eXDEgYuhG8QtQ.roa
Signing time: Wed 11 Oct 2023 10:01:55 +0000
ROA not before: Wed 11 Oct 2023 10:01:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 103.75.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2f:90:bc:b5:4e:0c:d5:9c:a6:1c:99:e3:8d:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 11 10:01:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cd503bc56171659a99367970c4818ba11bc42d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:7f:65:2a:b3:c9:52:f8:72:87:32:36:3a:
1c:3f:a5:81:f2:80:89:66:9f:49:d5:b7:4f:66:35:
a6:6b:34:1f:7c:fd:c4:35:d6:83:a8:04:b1:29:a7:
53:01:9c:f2:55:e5:da:d5:4e:cf:4c:65:3a:f3:5d:
5f:2d:aa:96:3a:92:45:63:b2:02:2d:22:a2:43:67:
2c:96:b1:8d:ac:1e:01:71:ca:8e:57:e1:67:19:a2:
fc:16:79:41:1d:00:a5:53:6c:bd:9a:73:20:fe:32:
95:74:a2:6c:ea:22:e7:4d:d7:ad:b1:6d:c7:86:d5:
85:b6:ac:45:f5:38:03:de:21:3a:23:1d:42:97:6b:
6f:7a:02:51:a9:0e:bc:87:39:46:7f:a9:45:aa:87:
91:64:b4:a0:ef:52:45:c0:a1:69:af:0c:2e:f6:93:
19:35:83:6c:08:37:93:63:23:f8:28:26:6d:d2:8c:
a4:c3:14:8a:1b:49:67:c0:6b:c3:1f:7e:7b:1a:95:
9c:67:51:2a:6c:50:67:00:ec:c7:80:c6:4c:47:bc:
a9:ab:9f:98:ab:d7:0c:9d:7c:2b:8e:74:11:1a:e8:
fe:e4:d1:56:ca:5c:ea:c2:75:d7:6b:53:2c:d0:0b:
5e:84:25:e8:43:b2:70:df:81:e9:5f:e1:68:93:a1:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D5:03:BC:56:17:16:59:A9:93:67:97:0C:48:18:BA:11:BC:42:D4
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/DNUDvFYXFlmpk2eXDEgYuhG8QtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
27:33:bf:48:43:75:65:1c:f3:e9:64:da:4f:cb:75:fa:37:5e:
27:13:49:7b:ff:cd:0f:eb:a7:d7:77:3a:87:97:c9:cb:c4:e2:
35:62:69:0c:1a:98:18:38:54:1f:0c:7f:44:6c:a5:78:25:e5:
80:44:58:40:6e:18:78:a1:0e:27:f5:5a:af:7c:33:7a:6f:92:
81:f2:47:9f:05:ab:a9:4e:49:35:c6:84:b8:30:70:b8:33:ec:
80:ac:b8:39:5a:83:b4:5f:24:c1:63:7c:87:fb:91:4e:f9:81:
80:b7:72:bf:33:59:da:1b:2d:58:1e:60:8e:58:19:ce:64:89:
0a:69:38:80:36:c7:1e:50:10:59:06:63:e3:b2:2c:66:9f:20:
f9:d2:2d:a2:e9:fc:ec:c7:b8:e5:49:2c:f4:38:95:c0:57:af:
df:e1:2d:5b:d7:ba:b3:8e:69:bb:04:b9:1e:14:72:87:cf:4a:
94:4a:fd:5a:25:de:6b:e5:89:32:c2:62:69:2c:b5:d5:c6:7c:
f4:a8:ab:13:aa:f5:11:ec:20:29:8f:ee:c6:6a:93:f8:0a:08:
34:e8:f2:0e:34:9b:42:43:bd:c0:e6:e2:95:da:5b:33:a4:d7:
e9:8a:95:46:19:e2:27:db:40:27:b0:cc:98:d9:32:c7:b9:f4:
cb:20:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:56 2024 by rpki-client on console-fra.rpki-client.org