Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/OEKy-jw9s0xm6kOpqY1OjdQ_QXk.roa
File: OEKy-jw9s0xm6kOpqY1OjdQ_QXk.roa (raw, json)
Hash identifier: gVt2nkJPfFMg4D5RN6wS+JlqamqLYZ7rIyFiGx5Nhp4=
Subject key identifier: 38:42:B2:FA:3C:3D:B3:4C:66:EA:43:A9:A9:8D:4E:8D:D4:3F:41:79
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01887B7B8486798B081E0EF659FB78D0481F
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/OEKy-jw9s0xm6kOpqY1OjdQ_QXk.roa
Signing time: Fri 02 Jun 2023 09:41:12 +0000
ROA not before: Fri 02 Jun 2023 09:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
103.75.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:7b:84:86:79:8b:08:1e:0e:f6:59:fb:78:d0:48:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jun 2 09:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3842b2fa3c3db34c66ea43a9a98d4e8dd43f4179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:a1:55:4e:0e:d3:61:bc:39:d6:25:0c:4f:
f5:4f:bc:28:6c:ae:dd:cf:b4:88:c0:e3:9d:21:37:
fd:f1:27:57:9b:2b:5f:a4:33:64:f6:48:c2:e7:99:
46:88:fe:db:1c:0b:24:a8:ea:d7:39:c2:2e:05:cc:
42:22:c8:4c:d7:8b:9c:e1:5d:da:b0:62:f3:e2:20:
50:1d:7e:fc:8c:bc:3d:34:46:23:6e:8d:ee:5e:e2:
b4:be:e4:3b:74:c2:6a:3c:ee:a0:d7:d1:2e:ff:a6:
2b:15:a7:49:72:43:93:b7:bf:19:50:4e:9c:b9:da:
b1:ec:94:8e:33:61:09:46:ff:18:a9:49:00:2e:d0:
95:66:72:02:dc:94:db:57:a4:fe:90:d9:bf:d2:5b:
0a:89:50:80:00:d5:43:c9:e5:ef:5a:7a:af:55:99:
98:4b:4b:78:64:aa:58:11:eb:0d:32:6a:c1:e0:07:
e6:a4:ef:63:a4:a5:f7:7a:e8:6a:b3:8d:c5:b6:5c:
5a:da:83:ae:39:8c:95:c1:09:d6:0f:57:6c:b2:25:
c2:40:50:62:41:f2:26:b8:02:e4:e1:46:97:9a:3e:
84:bd:72:eb:80:66:ac:67:e6:b8:41:c6:90:33:f0:
0b:1d:4e:ba:33:94:2f:f7:b3:8f:16:9d:5c:e4:e1:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:B2:FA:3C:3D:B3:4C:66:EA:43:A9:A9:8D:4E:8D:D4:3F:41:79
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/OEKy-jw9s0xm6kOpqY1OjdQ_QXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.71.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0c:b0:4d:ec:53:f0:2f:29:ae:d3:76:54:04:21:95:d9:a1:
33:fd:45:51:4a:3f:b3:a1:da:e5:4a:58:14:ff:00:fc:d4:7a:
46:25:03:54:a8:d8:1d:48:7f:c6:3c:d3:54:a7:82:f5:41:04:
b2:16:3e:c7:1c:46:da:ff:c8:ce:ae:f6:31:82:f7:48:8b:23:
ab:d7:c0:06:75:c6:9b:28:22:3d:59:13:96:03:43:d5:6f:af:
7c:c0:64:e2:62:ee:0a:50:ff:7c:41:51:a3:21:82:36:e5:a1:
3f:65:cd:e6:dc:c9:56:6d:fc:f2:ac:d5:94:f5:6c:05:7b:3c:
0e:67:7a:66:5f:ac:8c:f9:63:7e:94:80:ed:81:3e:02:28:a9:
be:25:10:cb:57:4c:3d:41:7e:75:50:f6:e4:4e:78:0b:45:60:
44:11:06:49:90:26:0e:25:aa:a0:50:13:fc:f0:de:33:6c:d5:
12:3e:65:dd:24:c6:89:ec:f9:37:a8:e0:7f:fe:22:ad:28:16:
01:ea:2c:78:60:01:cd:4e:b3:76:e8:5e:8d:14:1c:42:cc:50:
80:8d:fb:36:f7:21:cb:f2:e5:ea:77:c4:cc:94:37:b0:e5:b3:
50:28:92:3d:d5:34:96:dd:ca:9a:fe:da:df:53:9f:de:a2:73:
f7:08:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org