Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZvpcRdQPzoM1GQgOM1yoVPtQA1o.roa
File: ZvpcRdQPzoM1GQgOM1yoVPtQA1o.roa (raw, json)
Hash identifier: dw+Sr/6LDyOtQW67bJDSJ+q8QURw4r1dabsTMY+gROY=
Subject key identifier: 66:FA:5C:45:D4:0F:CE:83:35:19:08:0E:33:5C:A8:54:FB:50:03:5A
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0188A04A1F93C81E82C003392D96FECD656D
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZvpcRdQPzoM1GQgOM1yoVPtQA1o.roa
Signing time: Fri 09 Jun 2023 13:13:12 +0000
ROA not before: Fri 09 Jun 2023 13:13:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61281
IP address blocks: 103.75.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 07:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:4a:1f:93:c8:1e:82:c0:03:39:2d:96:fe:cd:65:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jun 9 13:13:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66fa5c45d40fce833519080e335ca854fb50035a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:73:d3:f3:a0:d8:e1:b6:94:80:ab:85:a6:5f:
56:77:c8:6a:d5:2f:1a:1c:99:80:ec:e7:76:dc:a3:
5b:b7:f5:ca:71:5f:d4:ed:f2:a6:df:8b:e0:74:cf:
38:61:32:17:03:a7:34:1f:98:ee:01:2c:fd:95:cb:
b5:bf:e2:d3:11:2a:cf:63:c2:14:86:98:95:59:af:
d8:71:29:ae:82:0c:75:a7:e1:b9:f1:a3:83:f0:09:
42:cc:ad:53:16:d6:c3:6d:78:d6:0a:8f:21:11:66:
fe:b1:82:6a:4a:bf:f4:28:7c:41:48:97:5d:6e:7f:
a2:64:be:ed:08:41:7f:5c:d0:a7:71:67:68:0a:45:
02:85:93:4f:d6:2e:e6:9f:67:e0:aa:0b:d7:ea:31:
10:02:0a:05:d6:d0:f9:89:68:33:81:9e:ab:f1:e5:
c4:48:68:d1:b2:d8:9d:ff:66:a4:d0:c1:a2:97:ae:
6a:63:24:ce:5b:13:ff:8b:b2:1d:14:37:6b:e7:44:
e5:ab:d8:42:fd:94:65:9a:8c:fa:eb:e2:e6:f5:12:
26:78:c3:a7:cc:81:2d:fa:85:62:51:2f:1e:a1:1c:
2b:66:87:ab:a8:0f:dd:41:3b:88:cf:63:9e:37:11:
1c:55:d9:52:fd:8d:19:8b:d7:e2:3a:53:7f:df:85:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:5C:45:D4:0F:CE:83:35:19:08:0E:33:5C:A8:54:FB:50:03:5A
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZvpcRdQPzoM1GQgOM1yoVPtQA1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.68.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b5:68:d0:87:6d:7b:87:6b:4b:76:03:60:cc:1e:51:f4:4e:
eb:3d:a9:91:16:da:ae:ec:46:4c:f3:94:c6:e8:93:45:53:a3:
74:37:09:92:ff:46:0d:55:ab:43:f6:30:21:a3:55:0b:a4:98:
2e:be:0b:1f:78:0e:81:4c:50:8c:d4:b2:47:cd:d9:38:80:d8:
81:18:e0:3a:81:85:4c:44:f9:c3:69:6c:af:bf:db:a2:5e:79:
b0:12:db:5c:67:ee:3b:41:a8:ef:d0:a4:0c:6a:37:5d:40:7f:
d1:d2:0c:ff:8b:f8:df:84:3f:27:46:f4:2f:60:21:4f:57:a9:
32:de:24:d0:70:9e:68:0e:88:e3:1d:e8:db:a5:05:ef:5c:3b:
0f:55:f8:4b:ae:18:cd:a4:6a:2e:f3:d9:ef:82:a8:a3:a2:81:
f2:db:ea:e2:fa:7c:8d:55:4f:8f:30:c7:d9:dc:90:a2:99:a6:
97:1a:b9:20:38:80:b6:f8:49:b9:60:d8:f8:3f:25:bd:e2:23:
f1:85:9a:04:09:d0:b1:26:27:88:8e:4b:b0:62:d4:28:a5:4f:
2d:8d:a0:61:e5:db:33:35:79:56:29:f6:20:e3:9a:d6:27:73:
1a:a5:2a:a3:60:1d:84:b6:62:0a:4a:e1:bf:13:7b:7f:9e:39:
5c:4f:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org