Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nAivAKJ5dF0rrug-qG4o9-Httc4.roa
File: nAivAKJ5dF0rrug-qG4o9-Httc4.roa (raw, json)
Hash identifier: K1UGoHiPQkP6DzF+1YhW4ZQaVBZXuJrsl+GyJyXSCgU=
Subject key identifier: 9C:08:AF:00:A2:79:74:5D:2B:AE:E8:3E:A8:6E:28:F7:E1:ED:B5:CE
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018967C5EB5FB95AD7054A1B185216DD38B7
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nAivAKJ5dF0rrug-qG4o9-Httc4.roa
Signing time: Tue 18 Jul 2023 06:52:51 +0000
ROA not before: Tue 18 Jul 2023 06:52:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.75.69.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:c5:eb:5f:b9:5a:d7:05:4a:1b:18:52:16:dd:38:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jul 18 06:52:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c08af00a279745d2baee83ea86e28f7e1edb5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ba:45:f6:46:7e:c7:2a:5d:2e:cb:32:75:9c:
c7:52:40:f0:b7:23:8d:e7:88:e4:13:ca:6f:34:23:
07:b6:88:9c:40:ae:2b:9b:5e:5b:e3:bb:e6:20:86:
e5:d7:88:e8:94:64:f0:79:58:4a:6f:a5:99:e5:7f:
32:60:0d:bc:5f:f1:8b:3b:35:19:e1:7d:17:24:62:
8e:27:5f:1b:1d:06:d4:da:26:55:c2:b6:8a:5c:66:
af:db:da:9b:ba:03:9c:48:f4:48:8d:b0:d5:05:4d:
77:fc:5c:b8:a1:c4:60:ce:e5:d9:a0:95:d9:fc:9e:
9d:32:66:1c:98:bd:ff:af:3b:b9:7f:f5:9b:23:b6:
94:f4:c7:da:9b:4c:2e:9f:95:ec:3b:f0:af:b9:73:
53:7e:e9:36:1b:ce:6e:a7:13:3d:1f:41:c1:3e:8c:
52:8e:75:89:59:5f:49:6e:3d:e6:cb:de:dc:23:7c:
ba:18:e1:52:ad:c9:37:53:f1:b4:ac:07:7d:56:3a:
2b:ac:da:f2:88:f2:ad:1b:1b:b4:ed:0c:ad:c5:19:
c5:67:ab:94:19:18:bb:ce:19:ab:d5:86:13:58:3b:
f5:fa:f3:aa:86:72:03:5d:3c:5a:0f:bc:bb:09:7d:
23:d2:63:b7:03:65:d2:35:7d:61:b8:85:1c:1c:23:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:AF:00:A2:79:74:5D:2B:AE:E8:3E:A8:6E:28:F7:E1:ED:B5:CE
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nAivAKJ5dF0rrug-qG4o9-Httc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
34:89:d5:50:f7:ef:5a:da:95:ef:34:2a:a2:b2:6b:ad:66:a1:
9e:67:48:6f:54:7e:13:e1:c0:01:e1:d1:1b:59:49:af:04:46:
19:5c:df:43:d5:24:5a:b5:7b:66:f5:6d:27:ad:aa:0c:60:fa:
cb:3f:b5:73:84:18:b8:e9:f2:31:8c:fc:0c:27:3c:45:38:3c:
fc:72:76:16:18:73:91:df:e5:57:cf:d3:10:4c:a7:76:92:44:
44:53:df:2c:f3:61:4a:22:c5:ae:8f:a4:5b:33:cb:58:0d:44:
8d:e5:bf:6d:78:78:be:74:c6:07:7f:28:0b:c3:c3:36:9f:05:
5d:25:c5:72:a8:bd:21:c0:33:71:9d:6e:5c:6d:86:04:28:b1:
35:f3:9b:e4:7a:05:ac:79:ff:6c:9d:22:58:13:ff:92:42:0a:
db:7f:e2:bc:e3:6f:d3:fb:ed:08:eb:68:58:b8:39:04:84:1a:
b4:29:b5:9d:f8:5b:ea:59:b7:b3:6b:ac:fe:4d:14:65:01:d0:
c6:5c:de:ce:7c:62:4d:74:69:fb:42:4f:db:49:fa:91:70:7f:
56:00:9f:e4:95:45:e9:04:74:fd:f4:d3:3c:66:12:1b:94:ec:
94:83:47:ce:1c:a1:d6:e1:ce:48:70:9e:71:82:f9:1f:05:14:
f4:a7:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 09:06:13 2023 by rpki-client on console-fra.rpki-client.org