Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lCYiCLFDl_Fj-v-y4Z8MYz3-pOg.roa
File: lCYiCLFDl_Fj-v-y4Z8MYz3-pOg.roa (raw, json)
Hash identifier: 361UcE1oQTvHtq/1u+YJTudFgrwXpdU6cb0GlNA/piY=
Subject key identifier: 94:26:22:08:B1:43:97:F1:63:FA:FF:B2:E1:9F:0C:63:3D:FE:A4:E8
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0185F34CADC8F3C74FD7892AAD7364DEA1CE
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lCYiCLFDl_Fj-v-y4Z8MYz3-pOg.roa
Signing time: Fri 27 Jan 2023 12:56:06 +0000
ROA not before: Fri 27 Jan 2023 12:56:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 103.75.69.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:4c:ad:c8:f3:c7:4f:d7:89:2a:ad:73:64:de:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 27 12:56:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94262208b14397f163faffb2e19f0c633dfea4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:07:c8:cf:b6:c7:15:57:19:73:9e:46:09:
03:87:8b:11:73:b9:a2:c9:64:9b:f5:0f:7a:83:cd:
c3:b7:17:6e:48:f8:3d:73:57:40:a0:9a:83:ae:76:
74:a0:64:f2:6e:0d:d2:b7:93:7e:cc:4a:d7:bc:0f:
48:3c:0d:af:e0:f4:8e:02:6e:89:8f:ec:67:83:1c:
5e:66:29:9d:3a:52:83:be:2d:bc:41:54:1e:d2:0f:
3c:76:94:b6:a8:e6:82:f4:d8:e0:67:96:7a:c3:c5:
ef:0e:fb:fe:41:38:82:b5:11:6e:2e:07:f6:d5:0d:
ad:69:43:72:96:d8:22:86:0a:6b:e8:45:1b:e6:4b:
57:22:a8:90:ec:66:62:ec:66:cf:01:14:c3:66:12:
03:47:d8:2b:67:83:57:c3:ce:20:b1:99:eb:26:2c:
51:21:ba:ac:30:ef:79:a7:29:85:00:84:94:ea:35:
c2:e5:3d:6f:90:ab:68:32:1a:3b:3f:38:7e:ce:cd:
14:1e:90:30:6b:fe:5b:ea:d4:1e:91:58:4f:21:78:
cf:12:c9:92:ef:c2:96:9e:a3:cd:ee:78:76:a6:06:
0f:d0:8b:55:66:54:2d:a3:e6:69:6a:1b:bc:02:2e:
9d:46:2b:5b:28:e6:eb:43:1a:fb:ed:d8:fa:6a:43:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:22:08:B1:43:97:F1:63:FA:FF:B2:E1:9F:0C:63:3D:FE:A4:E8
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lCYiCLFDl_Fj-v-y4Z8MYz3-pOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:54:82:2a:6f:2a:bd:b7:78:94:f6:b6:1e:11:49:59:95:10:
b8:36:89:c0:4e:8a:76:97:40:bb:52:92:4a:af:83:22:5b:4c:
f1:9f:b7:92:71:17:b4:b9:3d:88:72:94:63:02:04:28:f8:8c:
a2:e3:05:aa:ea:54:d0:42:7e:85:ea:f5:09:00:02:7b:25:61:
11:c7:84:d3:54:33:8f:b8:b1:a2:9c:0f:51:31:82:6e:f4:6d:
dd:b8:d1:70:7c:2e:0d:31:d2:fd:b0:5e:c1:99:a0:8c:c9:24:
c2:aa:0d:38:90:2e:6f:0f:9b:54:9d:87:10:23:f2:33:50:2c:
06:8e:7f:92:44:1c:42:fc:b7:d4:56:5f:7b:ae:e3:c9:20:3b:
38:d6:0e:ce:4b:0a:ea:c5:f9:b5:7a:39:13:fa:1f:b2:56:0e:
d1:dc:81:93:81:9e:f6:d1:8f:1b:37:27:4a:88:f8:0f:a2:5c:
a0:82:c8:23:ee:ae:02:92:77:d2:d5:7f:85:43:6e:05:f8:95:
8e:ab:4f:96:bf:89:e2:21:e2:1d:08:41:c5:a9:97:fd:b3:58:
ca:dc:1a:63:72:7f:d7:0a:86:6c:74:68:9d:17:4b:19:09:70:
40:78:6b:ef:f4:13:10:f3:b5:ca:73:74:21:80:9b:1c:6b:63:
1e:51:da:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 09:06:13 2023 by rpki-client on console-fra.rpki-client.org