Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nweCnYkkW5BHfu8uICMj2Vi2DPg.roa
File: nweCnYkkW5BHfu8uICMj2Vi2DPg.roa (raw, json)
Hash identifier: 6nN3FNktV5vJeiJLjx0IL+ZOqzzoKNsXcVGrYvvwN4c=
Subject key identifier: 9F:07:82:9D:89:24:5B:90:47:7E:EF:2E:20:23:23:D9:58:B6:0C:F8
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018DA6F888211891A1C327F6BCB5C66D6918
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nweCnYkkW5BHfu8uICMj2Vi2DPg.roa
Signing time: Wed 14 Feb 2024 09:35:21 +0000
ROA not before: Wed 14 Feb 2024 09:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51791
IP address blocks: 103.76.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 10:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:f8:88:21:18:91:a1:c3:27:f6:bc:b5:c6:6d:69:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Feb 14 09:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f07829d89245b90477eef2e202323d958b60cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:d8:43:6d:f4:84:ff:59:53:52:c9:69:31:
bf:5e:c9:90:4c:41:0d:3e:8e:d8:ac:2d:a8:91:aa:
e0:0b:f1:0f:6b:db:0e:8c:eb:1d:6a:f3:3c:78:60:
a9:e0:17:95:98:ed:b4:53:62:5e:1e:13:0c:10:f9:
66:b4:d6:90:44:12:39:09:b2:22:30:be:19:70:d0:
16:49:77:4d:d6:f5:97:4c:bd:69:ad:a2:99:b2:8b:
a1:4b:47:87:3c:da:3b:0d:5c:29:c2:b1:c1:0f:83:
66:31:9e:35:18:26:e3:a5:de:70:00:21:76:2a:4c:
23:b6:8e:61:88:64:4e:f3:75:68:b9:d7:7c:c7:8c:
d5:a5:06:0b:58:de:2e:20:de:e4:56:17:e3:59:d0:
dd:45:9d:38:7b:c4:43:53:f6:f4:9b:33:b2:04:34:
62:84:dd:e6:cd:44:e7:00:26:b1:38:f3:ee:ff:6b:
a2:58:aa:37:52:a6:d5:74:a6:f9:93:d0:b9:a4:89:
4b:01:df:f1:25:96:35:80:57:cd:58:e0:c6:95:a5:
cb:cb:bf:bc:e6:06:4e:3a:17:b9:7a:e6:8a:f0:c9:
6a:2b:bc:3f:45:f9:6d:19:8d:ed:be:91:d1:01:90:
55:89:75:2c:97:1e:57:c2:06:53:6a:c5:39:07:52:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:82:9D:89:24:5B:90:47:7E:EF:2E:20:23:23:D9:58:B6:0C:F8
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nweCnYkkW5BHfu8uICMj2Vi2DPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:41:ba:c3:e1:fa:4b:e4:1f:73:c0:c2:26:3f:03:9c:2e:bc:
ef:6c:89:01:d5:d8:c8:3a:fc:79:a7:a3:a1:f6:fc:f3:21:f5:
5a:80:41:a8:9c:1e:4d:af:8f:9e:09:b2:47:7c:8a:42:c3:67:
eb:1e:89:42:91:1b:34:09:bc:6e:e7:2b:09:9f:f0:94:73:15:
64:a7:1f:70:2e:65:7c:24:59:25:9f:d7:1e:49:8a:5b:0c:d3:
22:6a:97:e5:9d:27:ac:3f:87:c4:30:b9:2d:88:42:bd:ef:03:
5d:fa:98:1e:52:df:94:67:ef:d1:c9:21:63:7c:7d:52:d0:1b:
b6:54:4b:2f:f1:6d:dc:fa:3f:76:82:d8:cd:b1:ad:99:96:77:
93:54:76:2e:de:08:7b:fd:b1:29:49:51:6d:29:60:e4:34:cc:
68:e2:e4:1c:7d:b6:ef:1f:bc:33:af:40:5a:b1:4b:37:8e:24:
8d:f6:52:d1:00:63:c9:ab:c1:72:b0:8e:ac:83:ff:4c:ae:14:
2c:e4:5f:29:36:dd:1e:19:b3:a7:c9:d8:73:78:38:d5:90:b1:
d8:e7:e8:9c:13:b6:9a:41:70:8d:f7:74:7b:bf:35:17:a2:6f:
4c:f0:9b:36:df:17:c7:41:36:3a:95:1d:0f:c4:83:09:c8:f3:
ef:35:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 14:38:32 2024 by rpki-client on console-ams.rpki-client.org