Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Svyt2wCjwR3NWCLVCJ1I8s8p1LI.roa
File: Svyt2wCjwR3NWCLVCJ1I8s8p1LI.roa (raw, json)
Hash identifier: tCynvdOZ7Jvx6huw6dAv1GgUZcjAJ4GfmGdoR5+OwR0=
Subject key identifier: 4A:FC:AD:DB:00:A3:C1:1D:CD:58:22:D5:08:9D:48:F2:CF:29:D4:B2
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0188DCF2410E69A4F96D6611B26162023868
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Svyt2wCjwR3NWCLVCJ1I8s8p1LI.roa
Signing time: Wed 21 Jun 2023 07:54:03 +0000
ROA not before: Wed 21 Jun 2023 07:54:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 103.75.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:f2:41:0e:69:a4:f9:6d:66:11:b2:61:62:02:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jun 21 07:54:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4afcaddb00a3c11dcd5822d5089d48f2cf29d4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:96:de:61:87:2d:62:7c:2f:8b:1e:c0:82:
2d:3e:56:a3:ab:e9:ae:c6:2f:24:07:8b:6c:89:d8:
c9:05:bd:9d:ad:67:da:81:e6:97:2d:8f:cc:db:ff:
30:41:d6:d6:18:f1:de:30:63:06:e8:d9:08:e5:3f:
aa:14:95:e4:4e:4a:ed:d4:d0:58:28:f1:db:0f:fd:
cd:8c:4b:ae:ca:9b:32:53:13:e2:73:85:21:40:c2:
69:33:3b:40:69:b6:ca:78:2a:b0:ef:a9:21:d0:c0:
6d:2e:68:da:8d:2d:f1:13:0d:e6:6e:94:0d:67:35:
a5:6d:a3:08:45:1e:ea:97:c7:da:9e:57:8f:42:fd:
a1:8f:2e:56:3d:d2:a9:0e:56:b7:5a:8d:59:b3:2b:
aa:c2:12:ea:6a:45:84:e1:8f:88:19:38:9c:39:d4:
0a:fc:fe:9d:11:37:61:f2:9f:0d:02:a0:5b:3a:aa:
01:aa:d3:b3:b2:13:5d:be:9b:e9:8f:4d:d3:f2:1c:
54:24:b9:9e:d1:fc:c3:a2:f9:93:8d:25:b7:40:ab:
11:c7:56:00:29:3a:2b:e2:eb:30:ef:bc:e7:f6:69:
fb:95:4e:95:c3:97:a4:b2:2d:03:ba:d6:3a:01:b0:
e5:60:6e:55:20:35:8b:7c:8e:80:65:83:ba:20:41:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:AD:DB:00:A3:C1:1D:CD:58:22:D5:08:9D:48:F2:CF:29:D4:B2
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Svyt2wCjwR3NWCLVCJ1I8s8p1LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.70.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9c:aa:a5:8a:d4:fb:37:c0:28:fb:39:ad:5a:a4:86:90:3a:
33:57:2d:6e:98:2b:e5:0f:f5:85:1a:cc:a0:37:ba:53:38:5d:
06:bd:f0:2f:d4:07:34:ca:d7:0b:47:fd:fa:0c:cd:00:d6:ff:
ac:0c:67:22:e0:a5:be:cc:0f:53:4b:c8:78:2b:48:3c:e0:b3:
ea:36:74:f8:0c:4c:f3:a8:1d:f3:2d:c0:0a:21:62:9f:f3:41:
38:6c:31:cd:d2:c7:3d:dd:65:c3:7c:60:f1:c8:96:12:9d:09:
1b:fa:7a:38:a0:6d:41:af:d4:75:d9:40:61:04:eb:9f:e7:ae:
f2:45:f6:58:8d:ca:0c:c2:ef:ac:28:da:04:8c:bb:3f:12:89:
13:82:da:b1:a1:1c:90:b4:29:5c:fd:f3:39:f1:09:e1:99:1d:
1c:51:b3:d0:1a:69:a0:68:89:38:bb:a4:e1:73:3d:0b:35:a3:
eb:34:4e:19:e2:51:7e:f6:36:1f:07:11:b6:24:ab:3e:24:3b:
62:f9:f4:12:1e:c1:ab:a4:64:60:77:f3:00:fa:75:b9:1e:1b:
73:c5:bc:6c:be:ac:4a:6f:7d:30:15:24:fe:57:bd:f8:ca:cb:
22:d1:c3:fd:5e:22:35:73:94:24:f6:20:3e:5f:9c:a6:c0:f9:
2e:dc:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:24 2024 by rpki-client on console-ams.rpki-client.org