Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/LCTGfAG03ZV4jgXS6kiY9LgCK54.roa
File: LCTGfAG03ZV4jgXS6kiY9LgCK54.roa (raw, json)
Hash identifier: g9oa2qpzmhknmw9fChpYH9wgygjoXzVfEeIFzgr8Xu8=
Subject key identifier: 2C:24:C6:7C:01:B4:DD:95:78:8E:05:D2:EA:48:98:F4:B8:02:2B:9E
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDCA211E4C5AE092F6D68BF21F8D7C0
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/LCTGfAG03ZV4jgXS6kiY9LgCK54.roa
Signing time: Sun 01 Jan 2023 05:44:59 +0000
ROA not before: Sun 01 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 103.76.130.0/24 maxlen: 24
185.173.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a2:11:e4:c5:ae:09:2f:6d:68:bf:21:f8:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c24c67c01b4dd95788e05d2ea4898f4b8022b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:a5:32:32:22:b0:97:71:b2:84:d3:13:97:
7f:9b:6d:00:96:05:27:93:40:1e:58:46:51:13:5a:
d3:5a:d0:9f:6e:11:29:14:e9:5c:43:80:50:d5:e9:
3f:e8:29:f0:d5:02:4f:97:94:dc:27:22:47:e6:9c:
0b:2a:90:a3:34:61:c6:e4:03:40:57:41:53:ee:64:
2f:b5:61:6d:a1:27:f6:5f:6b:90:af:7c:f2:69:bb:
03:9b:61:b9:36:5d:00:5c:71:97:18:cc:41:01:80:
0d:d2:a7:b8:b7:a5:e3:c0:7e:3e:d7:7a:e8:6b:72:
68:6e:46:d8:db:10:4a:d7:36:5c:40:fb:e5:2e:77:
57:c8:49:a4:6f:e2:ee:9b:83:89:0e:c4:63:4d:d3:
9a:6d:0f:48:62:94:5a:98:03:b3:12:ed:1e:2e:bc:
a0:d3:b3:c8:53:17:fd:b1:23:43:75:ad:2a:2b:80:
2c:7d:82:b0:d1:c0:a2:e0:f4:16:ca:d7:92:7c:2d:
24:e4:aa:ed:f9:71:ca:e0:27:f3:b8:56:97:0e:30:
b1:b9:a3:96:91:92:c9:49:90:3b:1b:90:31:7d:f6:
c1:bb:f4:60:11:c5:73:71:17:a3:c6:3e:fe:6d:06:
60:92:cb:86:d4:a3:d2:2a:ee:52:3f:2b:4c:59:d0:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:24:C6:7C:01:B4:DD:95:78:8E:05:D2:EA:48:98:F4:B8:02:2B:9E
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/LCTGfAG03ZV4jgXS6kiY9LgCK54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.130.0/24
185.173.146.0/24
Signature Algorithm: sha256WithRSAEncryption
17:66:08:87:23:60:f5:a7:a8:fc:ab:c6:60:d8:9b:fb:95:c3:
1a:68:7b:18:e4:1a:c6:88:86:92:77:72:11:55:56:13:c5:8b:
e1:b5:d9:5c:5f:28:94:ea:ce:73:9a:d9:5d:db:4b:bc:9b:10:
2a:cb:19:cb:5b:0f:6b:a2:83:f8:c2:8d:f7:3a:69:f7:13:b6:
93:00:c3:78:8c:86:4d:7c:95:91:4a:07:19:2c:be:bf:18:cb:
c5:17:25:a3:ab:74:af:e7:ed:78:81:53:3a:19:91:51:16:6c:
6b:8a:8c:61:b3:2f:cf:e6:84:69:ac:eb:20:16:c6:00:9c:c6:
4f:b9:6c:4b:f9:cd:fc:22:19:15:64:79:60:e0:80:90:34:be:
2c:4a:06:66:e9:71:89:a7:fa:c6:11:a6:32:2a:bd:02:5f:e7:
a7:7d:5c:9b:0b:c6:0e:88:9f:5e:87:85:92:df:03:01:5d:ac:
ed:58:35:25:93:e4:7b:96:19:f8:3c:96:68:3a:df:56:45:d1:
7a:90:59:fe:b3:90:46:7a:61:a9:96:50:cd:cf:b7:f4:80:17:
90:04:68:c7:12:ca:5a:36:eb:ac:62:79:14:0b:09:aa:d1:37:
ce:b9:d1:b8:d5:98:88:25:22:5b:c9:3f:d6:75:45:c9:98:82:
b4:b9:fe:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVr3KIR5MWuCS9taL8h+NfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwMTAxMDU0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzI0YzY3YzAxYjRkZDk1Nzg4ZTA1ZDJlYTQ4OThmNGI4MDIyYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWClMjIisJdxsoTTE5d/m20AlgUn
k0AeWEZRE1rTWtCfbhEpFOlcQ4BQ1ek/6Cnw1QJPl5TcJyJH5pwLKpCjNGHG5ANA
V0FT7mQvtWFtoSf2X2uQr3zyabsDm2G5Nl0AXHGXGMxBAYAN0qe4t6XjwH4+13ro
a3JobkbY2xBK1zZcQPvlLndXyEmkb+Lum4OJDsRjTdOabQ9IYpRamAOzEu0eLryg
07PIUxf9sSNDda0qK4AsfYKw0cCi4PQWyteSfC0k5Krt+XHK4CfzuFaXDjCxuaOW
kZLJSZA7G5AxffbBu/RgEcVzcRejxj7+bQZgksuG1KPSKu5SPytMWdA5eQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCwkxnwBtN2VeI4F0upImPS4AiueMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvTENUR2ZBRzAzWlY0amdYUzZraVk5TGdDSzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ0yCAwQA
ua2SMA0GCSqGSIb3DQEBCwUAA4IBAQAXZgiHI2D1p6j8q8Zg2Jv7lcMaaHsY5BrG
iIaSd3IRVVYTxYvhtdlcXyiU6s5zmtld20u8mxAqyxnLWw9rooP4wo33Omn3E7aT
AMN4jIZNfJWRSgcZLL6/GMvFFyWjq3Sv5+14gVM6GZFRFmxrioxhsy/P5oRprOsg
FsYAnMZPuWxL+c38IhkVZHlg4ICQNL4sSgZm6XGJp/rGEaYyKr0CX+enfVybC8YO
iJ9eh4WS3wMBXaztWDUlk+R7lhn4PJZoOt9WRdF6kFn+s5BGemGpllDNz7f0gBeQ
BGjHEspaNuusYnkUCwmq0TfOudG41ZiIJSJbyT/WdUXJmIK0uf5g
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:24 2024 by rpki-client on console-ams.rpki-client.org