Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/OLSc8-hsXWY2yNq36hNTtDlnTwo.roa
File: OLSc8-hsXWY2yNq36hNTtDlnTwo.roa (raw, json)
Hash identifier: 6ZNo2apk9cT7Q+yqBeawJU72gNrINNOL0D7BOq0wu2I=
Subject key identifier: 38:B4:9C:F3:E8:6C:5D:66:36:C8:DA:B7:EA:13:53:B4:39:67:4F:0A
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018CC8018DEFD686288A3446CE80B3A3D9A2
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/OLSc8-hsXWY2yNq36hNTtDlnTwo.roa
Signing time: Tue 02 Jan 2024 02:29:54 +0000
ROA not before: Tue 02 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211804
IP address blocks: 103.76.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 06:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8d:ef:d6:86:28:8a:34:46:ce:80:b3:a3:d9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 2 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38b49cf3e86c5d6636c8dab7ea1353b439674f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:ef:91:85:a5:75:cd:c3:25:77:d7:7d:ef:
d1:46:3f:f0:ef:a0:6b:db:77:d4:8d:30:16:6d:21:
d3:3d:e8:b2:15:2a:a1:26:3a:0d:61:7c:ab:ee:3a:
7c:a8:0c:60:36:30:39:c6:8a:15:83:fa:50:2c:6d:
0d:0d:ce:7b:8f:ad:72:05:61:b3:d1:3d:c7:5c:af:
6d:d6:1a:4b:67:75:5f:a3:5a:d5:b3:fc:f7:7a:17:
55:e8:d0:2e:90:29:55:71:17:88:22:cd:2f:8b:96:
b5:15:69:fc:37:b9:d0:b9:07:d6:0a:92:4e:bb:38:
7d:ff:18:02:5f:96:55:e5:d4:69:10:ce:e8:87:db:
fc:ea:27:bf:f8:3c:48:39:75:1a:7f:23:53:f2:91:
f4:dc:64:91:5a:b7:34:a2:d7:42:7f:d2:06:da:79:
71:14:a3:78:cb:e4:78:c9:cf:e9:89:eb:2e:52:a4:
2c:dc:b3:a3:57:26:29:9e:c0:29:26:51:bf:90:59:
d9:5a:ed:61:01:93:6a:cc:6d:59:6b:8d:bc:fa:7d:
eb:69:23:cc:d7:81:2a:98:9e:06:f6:c9:ee:fb:bd:
1a:d3:82:ea:eb:75:21:f9:e5:46:d0:69:49:f8:23:
ba:23:d1:b2:21:4a:c7:34:83:22:00:22:41:2a:6f:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B4:9C:F3:E8:6C:5D:66:36:C8:DA:B7:EA:13:53:B4:39:67:4F:0A
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/OLSc8-hsXWY2yNq36hNTtDlnTwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.128.0/24
Signature Algorithm: sha256WithRSAEncryption
89:54:92:79:76:c0:05:9a:c0:ea:4c:4b:99:53:a5:07:77:c1:
63:58:5e:73:14:a4:1d:a3:9c:ce:a3:12:66:f2:23:3d:05:10:
01:ec:36:35:36:76:7b:24:25:38:b5:2e:a4:dd:bd:58:21:83:
a2:58:86:2a:a6:c9:6b:ef:79:4f:85:af:fb:24:6f:39:3d:a8:
5e:12:72:e8:b4:00:62:7a:85:71:7e:32:9b:48:b9:74:4b:58:
4e:65:1c:f8:90:d7:40:3b:8f:04:f6:a4:21:45:31:2f:2f:ec:
dd:f9:13:e5:93:98:7f:38:cc:04:57:0f:07:0b:ca:c3:da:b8:
4d:ab:62:33:1e:08:96:be:3f:c7:81:0c:10:2b:85:9a:5e:4c:
8e:45:46:3d:7e:e1:0a:14:ff:25:3f:b0:f2:08:7f:f8:05:8e:
c1:3f:ce:a6:4e:59:1a:c4:a7:3b:a1:e8:35:99:e6:77:3c:3c:
9f:54:ef:ee:04:bb:77:43:1d:d3:23:7c:d7:58:11:8c:bf:37:
5e:c0:ea:37:7d:8d:3c:3c:c7:a6:9c:99:76:fc:7a:84:15:35:
93:61:37:56:5b:bf:e0:08:de:89:b0:e7:df:ad:55:a3:70:04:
19:95:05:b5:3f:1c:b3:89:77:4a:94:04:3f:36:a0:92:1e:9e:
5b:b6:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 07:32:31 2024 by rpki-client on console-fra.rpki-client.org