Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_GRLwcLkwn0MOfAgE1GEJShRyis.roa
File: _GRLwcLkwn0MOfAgE1GEJShRyis.roa (raw, json)
Hash identifier: Oh7V1JCML1M+BtrQkiKX7AV3ZDsBnIgiP5ynInvFSQ0=
Subject key identifier: FC:64:4B:C1:C2:E4:C2:7D:0C:39:F0:20:13:51:84:25:28:51:CA:2B
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0186D9BF874502851AEAD3577C85EAB8F771
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_GRLwcLkwn0MOfAgE1GEJShRyis.roa
Signing time: Mon 13 Mar 2023 06:54:13 +0000
ROA not before: Mon 13 Mar 2023 06:54:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 103.75.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Apr 2023 07:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:bf:87:45:02:85:1a:ea:d3:57:7c:85:ea:b8:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Mar 13 06:54:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc644bc1c2e4c27d0c39f020135184252851ca2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:b5:4b:74:da:bd:6b:f5:08:2e:49:e9:5f:
69:e0:77:53:46:b2:ab:7c:49:38:28:50:95:fb:83:
39:e5:f9:12:3c:36:5b:1d:c5:4b:3a:76:f0:ed:7b:
09:4c:6c:29:50:45:60:88:f8:99:ec:40:17:cd:b9:
6c:44:29:32:ea:c7:e7:75:38:ae:72:b6:30:ad:00:
31:ea:da:3f:a0:3c:fd:1a:12:94:4c:6f:3e:55:2c:
a2:7e:5a:83:2f:61:bf:f7:37:f0:b1:58:fd:6f:a2:
a8:14:78:da:b3:2f:ca:e6:21:d6:0d:69:b3:11:9b:
a8:93:f9:f3:04:1f:28:11:ea:72:f0:a0:0b:1b:fb:
59:78:80:57:bb:78:10:ee:db:42:41:ea:12:55:12:
a0:24:e3:e9:4d:ad:03:5b:c3:bc:c4:87:9d:be:e5:
d4:4d:c2:3a:7a:e4:1e:3c:27:09:a2:9f:e9:32:b4:
cb:6f:23:87:c4:a0:12:28:73:e2:47:40:49:27:44:
e6:2c:41:b0:04:d6:c4:2c:29:a1:00:bb:5d:e9:89:
43:2e:a4:a2:c2:a4:47:7e:80:41:37:20:9c:bc:90:
20:6b:5b:71:7c:3f:3e:ad:8d:0d:a3:4c:72:31:6c:
70:49:8a:09:4f:2b:2c:e1:0f:8c:7c:a5:ec:f7:14:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:4B:C1:C2:E4:C2:7D:0C:39:F0:20:13:51:84:25:28:51:CA:2B
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_GRLwcLkwn0MOfAgE1GEJShRyis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.68.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ad:7e:62:9a:4f:bc:c0:5d:11:8b:0f:d3:b1:40:a7:76:34:
45:f9:6a:f2:5e:c9:a8:c8:48:ba:42:6a:fa:75:72:6c:0b:af:
ba:54:92:68:8c:3b:ee:7e:42:51:62:7f:cd:19:8f:c9:f7:99:
62:ed:bd:84:c2:90:40:e1:d8:5b:b4:80:c7:2d:61:71:31:4b:
5e:2f:f3:8b:ee:77:9e:bd:8b:64:f7:28:97:cc:b6:d4:9f:ef:
b5:1c:af:8a:fd:c3:3a:c0:10:3e:76:8b:26:84:48:96:55:cb:
ee:15:d4:64:e4:f2:d7:28:f3:2c:a5:5e:f2:08:51:49:aa:63:
34:7a:93:12:03:b7:f8:e7:0b:a4:9b:d6:38:2a:23:23:da:64:
6a:52:c9:f6:81:bf:f6:ba:cc:c4:b5:8b:2a:60:c7:1b:21:1f:
41:15:a7:c2:54:db:9a:80:13:96:f0:f2:e1:8a:8d:e2:1a:e6:
5d:71:5c:13:2b:ac:8e:cd:b6:15:ec:91:e6:0b:8f:dc:63:53:
11:b2:46:c3:48:c0:0b:cb:da:2a:1d:6e:7a:21:ab:fb:32:e7:
26:37:bb:37:27:40:06:db:5d:d4:4f:e3:d8:0a:9a:e3:05:e8:
bd:a5:82:64:12:d9:04:14:73:1e:f3:20:87:ef:d9:18:93:40:
c1:9b:fc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org