Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZNzeVppVBSPekKUWJvs_UNCHsYE.roa
File: ZNzeVppVBSPekKUWJvs_UNCHsYE.roa (raw, json)
Hash identifier: uDEZ1UVnu4FquRq7kDICiFSR/2EBCg7P9b56SS8T8LQ=
Subject key identifier: 64:DC:DE:56:9A:55:05:23:DE:90:A5:16:26:FB:3F:50:D0:87:B1:81
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0187B84415EA7A42F85C6E4032ED93911AFD
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZNzeVppVBSPekKUWJvs_UNCHsYE.roa
Signing time: Tue 25 Apr 2023 11:54:42 +0000
ROA not before: Tue 25 Apr 2023 11:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.75.69.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 07:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:44:15:ea:7a:42:f8:5c:6e:40:32:ed:93:91:1a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Apr 25 11:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64dcde569a550523de90a51626fb3f50d087b181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:ed:80:d6:ac:20:44:e1:48:0a:ef:81:76:
d9:72:f9:0a:1b:bb:88:04:bf:5a:82:e0:89:29:92:
59:3f:9a:02:ad:72:5c:0d:dd:de:fd:bf:bc:62:51:
b7:0e:7d:be:46:cb:2b:63:0b:c7:00:ed:35:11:9c:
26:b3:83:51:80:37:c9:cd:c3:6a:b0:22:3f:24:8b:
51:a0:99:a5:e7:53:7a:09:18:2a:92:e8:4b:0b:bb:
ed:ea:b1:af:41:c6:5f:1d:b0:bc:57:e9:49:50:86:
88:f2:ca:3d:9a:63:16:60:7c:29:f2:5e:89:09:dd:
c2:65:aa:0b:0b:50:b2:59:19:02:ba:cc:a1:16:93:
4d:0a:4c:d0:87:45:52:fa:ca:54:fd:e2:d3:79:8c:
61:af:55:14:79:ad:a1:df:f6:ec:56:79:9a:e2:70:
f7:b9:fe:cf:f7:14:53:58:0f:5c:cc:27:fb:c8:27:
3a:0d:47:e7:91:b0:31:27:1b:64:a7:70:16:b0:9d:
72:36:59:b1:fc:05:59:08:4e:83:7a:d6:d3:be:d3:
1c:b8:30:b4:8f:f4:18:04:1a:b2:e1:74:0c:9d:b8:
d5:a1:18:45:eb:85:83:94:78:e6:82:e6:37:e3:fb:
30:aa:a0:85:41:b2:72:50:60:b5:22:55:ae:92:c8:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:DE:56:9A:55:05:23:DE:90:A5:16:26:FB:3F:50:D0:87:B1:81
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZNzeVppVBSPekKUWJvs_UNCHsYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
11:83:7b:08:0d:51:0d:d8:ba:a0:3f:d2:39:68:a6:91:f6:bc:
7e:c1:18:58:62:61:e3:8c:fa:88:12:cc:2f:1c:b9:51:9c:84:
fd:c4:e3:b2:f2:91:dd:07:6c:5e:ff:e7:d2:2b:e1:e2:26:15:
b4:b5:cb:5c:2d:35:de:07:4b:23:9d:1d:8f:e8:d9:5c:52:e2:
83:23:91:e2:cb:56:a8:86:32:41:5b:ef:b7:52:34:d2:a0:7a:
1c:cd:be:3b:48:d6:d0:41:45:ab:ab:c1:ed:d6:fe:13:c4:0a:
e0:f8:d6:4c:d9:83:77:c2:62:49:2f:9d:85:77:31:15:70:82:
7c:80:79:93:7a:34:33:8f:9e:47:eb:08:31:e4:d6:99:0b:73:
39:4b:ec:b5:f7:63:c9:e3:06:10:fe:94:82:0e:27:70:e3:87:
59:91:4a:fc:77:46:af:a2:da:2a:87:cc:79:45:55:43:4d:26:
96:a0:29:aa:2a:b4:ec:a6:eb:91:3a:06:38:b0:48:b4:37:db:
37:1d:d5:d2:71:2e:80:bd:39:b9:0d:2b:10:72:ca:62:fd:b0:
8d:de:38:3c:a5:4d:47:5c:7f:a2:b0:a0:49:d3:88:d0:27:40:
5d:33:13:78:e6:1f:e9:92:e5:9d:0f:8e:c0:64:d5:be:1c:2f:
04:25:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org