Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/k3T15yNz1Q6e6MlvqBUFXUVOh2o.roa
File: k3T15yNz1Q6e6MlvqBUFXUVOh2o.roa (raw, json)
Hash identifier: sB6KH9SExzHAIKegvP3ObyXn5JFjFYFbWLUEsf5reuc=
Subject key identifier: 93:74:F5:E7:23:73:D5:0E:9E:E8:C9:6F:A8:15:05:5D:45:4E:87:6A
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0188DCF240879D5BB90A1239D4ABF46868FE
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/k3T15yNz1Q6e6MlvqBUFXUVOh2o.roa
Signing time: Wed 21 Jun 2023 07:54:03 +0000
ROA not before: Wed 21 Jun 2023 07:54:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.75.69.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:f2:40:87:9d:5b:b9:0a:12:39:d4:ab:f4:68:68:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jun 21 07:54:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9374f5e72373d50e9ee8c96fa815055d454e876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:b0:33:9d:7c:22:a5:c0:4e:ed:c2:5a:c3:
c2:cc:91:48:24:23:9f:56:02:5a:c0:4f:06:38:29:
21:ad:bd:55:1f:9a:75:78:67:de:32:09:77:20:86:
f5:3c:c2:a8:34:04:ac:f5:4d:31:0e:30:67:28:ac:
07:88:21:d8:83:6e:f4:4a:23:18:59:31:cc:6c:b4:
b5:70:81:03:40:94:b4:3c:8a:cc:81:11:a5:34:a7:
93:5b:91:7d:55:e8:c9:7e:f8:a5:00:89:8e:00:d8:
53:a3:e7:27:3c:c5:70:49:d1:15:be:c5:6a:6b:6c:
c3:a8:49:67:a3:56:a4:3b:52:c7:36:b6:88:16:fd:
f1:3a:65:48:9a:a1:85:e4:ff:ec:0e:c6:3a:7c:e3:
c5:78:b6:df:81:e6:f0:51:f5:7a:59:26:dd:30:ea:
b7:2a:07:23:f7:4a:43:c1:38:ab:d3:d2:2a:72:a9:
b9:10:ac:1f:9c:46:f9:ce:de:26:7c:6f:aa:54:4f:
c4:7d:3e:a8:e6:5d:f9:01:b8:ea:73:32:9c:6b:de:
89:9d:cf:e0:ee:3c:d3:f8:11:b6:ca:4f:ea:1c:14:
21:e8:62:bf:84:ff:a0:04:7b:a4:6c:55:fd:6c:60:
a4:b5:c1:e2:04:89:18:1f:8a:40:51:e1:d0:1d:19:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:F5:E7:23:73:D5:0E:9E:E8:C9:6F:A8:15:05:5D:45:4E:87:6A
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/k3T15yNz1Q6e6MlvqBUFXUVOh2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
14:80:06:bc:de:e9:b1:f7:88:64:42:3e:e3:8a:de:67:a7:45:
e5:41:47:4c:11:03:75:0f:57:f8:bf:74:9a:b5:4d:26:db:63:
c1:f0:04:a5:ac:63:7b:fb:89:63:c3:84:ed:4d:38:7d:4b:9d:
bb:58:ed:cf:50:19:3e:e3:ca:e7:36:80:b4:d1:a2:b7:bd:c5:
8b:68:f7:e0:48:4e:bb:3a:c0:ba:bf:32:10:2f:d3:34:e0:cb:
2e:e5:19:48:ac:22:b4:5b:dc:f3:2a:27:27:22:9a:64:dd:35:
08:9f:d0:83:e2:9c:78:8e:42:09:c5:6f:e3:1a:29:5b:a2:fd:
52:0d:88:bf:fd:6c:a4:b3:b4:0f:37:29:e5:92:a0:61:48:ec:
d0:f6:1f:9b:39:2e:dd:29:3a:05:5c:e2:3d:be:fb:7f:5b:ed:
fa:40:85:cc:12:e7:57:51:e9:dd:c8:b7:58:4e:cf:16:60:8c:
52:0f:ae:ec:80:83:7a:6b:5b:eb:6f:e6:3e:74:69:ae:cf:11:
72:28:80:d5:76:4e:78:20:6a:39:a2:1e:99:39:eb:ab:22:af:
d0:5d:ce:aa:26:af:0d:ee:3f:ff:60:b1:3a:7a:6c:21:53:04:
ef:c4:3b:d6:3b:17:9c:f7:be:73:a8:24:0e:fe:ee:2a:72:53:
c5:52:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org