Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UthUVcdOIiyfVLzFJ-l_RS4rpMY.roa
File: UthUVcdOIiyfVLzFJ-l_RS4rpMY.roa (raw, json)
Hash identifier: dQWjeUTLd4sEQWCy1f+xy/jeBA9eSVW8MF6ThURrnlc=
Subject key identifier: 52:D8:54:55:C7:4E:22:2C:9F:54:BC:C5:27:E9:7F:45:2E:2B:A4:C6
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01866E54D02B7FE733F444C418F1DF239C11
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UthUVcdOIiyfVLzFJ-l_RS4rpMY.roa
Signing time: Mon 20 Feb 2023 10:18:17 +0000
ROA not before: Mon 20 Feb 2023 10:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:54:d0:2b:7f:e7:33:f4:44:c4:18:f1:df:23:9c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Feb 20 10:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52d85455c74e222c9f54bcc527e97f452e2ba4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:52:78:71:d8:b1:82:30:06:66:a8:8a:b0:
66:54:1e:24:5b:f4:57:45:31:70:52:b8:11:89:9d:
ec:3b:d3:90:63:3c:7d:bc:1c:e6:fc:46:17:7e:8e:
36:48:14:a7:09:62:47:64:af:ba:12:f1:e3:a7:a0:
f2:f1:a3:e5:19:a3:84:b6:ae:ca:6d:9f:c7:2e:4a:
3b:6d:a9:d0:fa:bd:7c:e2:65:e5:84:82:53:0a:bb:
09:f2:93:46:fe:c7:fe:6b:e5:74:78:02:28:26:56:
da:6f:23:b6:d7:28:e1:6e:a7:fa:80:73:7f:1c:a8:
de:1a:bd:7a:c9:04:ad:80:bb:2d:30:98:62:a4:e1:
82:52:07:16:b4:96:19:9b:f6:0a:7a:bf:53:7e:82:
45:4c:89:3c:b6:ab:16:2c:91:66:dc:9a:a9:cc:a3:
1a:cb:42:36:2c:55:f5:1e:b0:60:e9:cd:f2:8b:09:
b3:0b:aa:f5:c8:79:05:3f:a4:18:b3:6b:36:39:59:
d2:29:74:bf:f2:a6:84:9c:55:65:08:d0:be:cd:fc:
cc:c7:89:62:22:c4:b9:7a:69:4e:c9:c3:d0:0b:35:
13:19:b2:6b:19:f9:b9:52:12:b8:60:a5:f4:4b:2d:
95:f3:3a:b1:d6:85:f4:94:53:f7:82:73:8a:39:73:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D8:54:55:C7:4E:22:2C:9F:54:BC:C5:27:E9:7F:45:2E:2B:A4:C6
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/UthUVcdOIiyfVLzFJ-l_RS4rpMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8c:04:47:d2:ad:d4:0a:be:b1:a9:42:f9:06:61:93:53:c3:
f8:1a:c4:94:74:c4:35:44:86:3f:f0:e9:a5:c5:96:cd:39:bc:
2c:6d:a1:fb:b8:4a:a4:c1:ae:d4:3c:f2:3f:67:03:ce:e8:ba:
e4:c5:28:77:95:5d:5d:9d:b9:ac:f0:a2:10:be:df:fb:f0:02:
30:69:05:5f:b0:18:12:c0:a2:a5:98:f6:a0:cd:fb:57:42:f4:
1d:f3:23:da:ca:1f:0a:ec:98:3d:33:ee:87:b1:d8:5a:b4:5d:
8b:77:2b:c5:1f:54:63:cd:8f:82:a9:bf:66:97:29:19:12:21:
5d:67:54:7f:39:9d:50:b2:b5:1a:8a:b4:dc:78:74:2b:c0:d0:
80:d9:e6:9d:64:68:7b:9e:e9:26:56:45:9d:3f:ff:a5:58:63:
5e:43:18:bb:63:ec:57:8e:6b:86:f4:90:a1:af:e5:50:08:d5:
d2:9c:2b:a5:ee:81:18:a4:2e:3b:94:94:db:23:23:40:b3:fb:
f0:ec:88:2e:46:9a:43:e7:5a:9c:30:9f:18:19:7d:2c:65:8f:
53:7a:6e:82:a5:9b:ac:16:24:a1:c7:5e:25:27:b1:43:ad:22:
81:33:71:c8:e2:4c:e3:9b:f8:65:13:f5:f4:9f:b3:f4:a3:61:
a8:b6:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org