Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UErR_qacJwnEy-6UvdOr_Xou7tk.roa
File: UErR_qacJwnEy-6UvdOr_Xou7tk.roa (raw, json)
Hash identifier: hhYENRbFMOHrNTyIMOCnqeBfPD8Fh8IR8Mj2LFd6I8g=
Subject key identifier: 50:4A:D1:FE:A6:9C:27:09:C4:CB:EE:94:BD:D3:AB:FD:7A:2E:EE:D9
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDCA866D321E7746E8B3CF028BA549E
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UErR_qacJwnEy-6UvdOr_Xou7tk.roa
Signing time: Sun 01 Jan 2023 05:45:01 +0000
ROA not before: Sun 01 Jan 2023 05:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 103.75.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Mar 2023 06:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a8:66:d3:21:e7:74:6e:8b:3c:f0:28:ba:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=504ad1fea69c2709c4cbee94bdd3abfd7a2eeed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:61:f9:8d:35:4b:a4:88:ef:c8:4b:51:05:
21:ac:8f:3c:25:76:8a:61:67:f6:ea:bc:9a:5f:d5:
73:3b:50:33:ba:2b:e5:f4:c8:ec:c1:23:80:ea:ac:
37:9a:f7:e2:a4:43:e8:bf:ce:49:8b:6f:c7:b2:d9:
e5:9e:53:99:17:58:cc:0d:a5:f9:93:49:0c:c3:d3:
1b:ef:aa:a1:25:31:ad:13:08:14:1f:d6:f3:de:61:
85:77:e9:e6:65:c4:3c:2e:41:45:d6:46:c3:0a:64:
f1:84:2e:4b:dd:5b:6f:2f:f0:82:35:9d:c2:52:71:
b1:dc:7b:6a:72:14:27:b2:a4:c0:3b:8f:82:a6:dd:
5d:c8:36:3e:ab:ad:3a:d5:05:4f:e5:fd:b5:db:f1:
bf:d7:88:e7:01:13:6e:9e:3a:66:d5:24:02:bd:32:
4e:8c:3d:de:c6:7f:8f:3e:0a:4a:8b:11:83:7f:8b:
e2:b9:43:8c:c5:85:06:1c:20:11:84:f6:59:bf:0a:
be:2d:78:d7:15:50:0f:30:0a:39:4a:f0:19:29:65:
6a:7b:6d:c2:9b:ef:c0:10:2e:bf:cc:ff:6d:51:f6:
d2:8b:3a:d4:e8:d8:75:22:4d:40:c1:d2:08:90:70:
1b:11:f2:0c:9a:44:05:7d:2c:08:64:25:e6:f4:88:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:D1:FE:A6:9C:27:09:C4:CB:EE:94:BD:D3:AB:FD:7A:2E:EE:D9
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UErR_qacJwnEy-6UvdOr_Xou7tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:3e:0e:2e:cc:04:f2:fd:b1:a9:75:c5:ed:09:8e:ff:b8:3a:
00:0e:10:88:c7:9d:6b:bc:ad:18:07:32:2a:88:62:a4:93:b6:
a0:17:41:a6:0c:4e:5c:4f:5d:48:ea:a2:8b:4e:2a:4a:00:67:
a7:2c:d4:a8:c5:cf:93:74:f1:62:ab:66:28:83:6c:e7:6a:b8:
09:7f:ca:b5:9c:e0:1d:6e:d8:0d:0f:d7:42:bc:af:28:bf:0a:
36:ed:ef:0f:5c:a7:ca:95:9b:36:ed:94:7a:b2:23:13:85:aa:
c8:3e:f4:48:3b:09:2b:80:23:29:72:91:ef:8d:31:2a:15:ed:
2a:97:88:df:30:f2:5d:a2:c4:ce:28:1d:d8:a9:c7:82:1a:aa:
32:f8:da:10:c1:03:b6:fe:73:6c:8a:2a:3d:a3:a2:de:78:94:
d5:16:90:5a:ab:ae:c0:08:05:71:a5:fe:34:9a:7b:a8:d5:cc:
f7:7f:c1:5d:31:6e:38:32:f7:a8:e0:21:d1:c1:93:6b:6d:a1:
68:a5:c6:8d:55:0a:8d:d0:67:56:a3:17:c3:c9:22:0e:53:36:
0f:ee:99:89:87:16:47:3c:e7:dc:bf:39:b9:d6:b3:be:8d:d0:
15:7e:e3:95:1d:62:1b:be:50:7b:94:ee:e3:90:4a:be:f1:a5:
3f:be:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org