Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rraktc0wKCgovAUZnoXMD_DhqQk.roa
File: rraktc0wKCgovAUZnoXMD_DhqQk.roa (raw, json)
Hash identifier: E+yvftpE42UEHM/ftsY2dFZR0jfgLCkh1mhSnIEKl+s=
Subject key identifier: AE:B6:A4:B5:CD:30:28:28:28:BC:05:19:9E:85:CC:0F:F0:E1:A9:09
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0187B84416EE1F3ECA7C2B7B607BEEF79B2B
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rraktc0wKCgovAUZnoXMD_DhqQk.roa
Signing time: Tue 25 Apr 2023 11:54:42 +0000
ROA not before: Tue 25 Apr 2023 11:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
103.75.71.0/24 maxlen: 24
103.75.68.0/24 maxlen: 24
45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:44:16:ee:1f:3e:ca:7c:2b:7b:60:7b:ee:f7:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Apr 25 11:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeb6a4b5cd30282828bc05199e85cc0ff0e1a909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:5e:71:25:af:02:a8:a9:42:2f:16:c1:44:
06:ed:7d:a4:ad:5b:97:64:9f:65:1a:05:ec:7a:8d:
70:47:50:0e:f8:77:34:a2:f0:e3:da:13:76:6d:b8:
78:74:ba:03:18:6d:37:d8:8c:6a:66:c5:f1:b5:f1:
99:58:3f:f1:a8:b3:03:e8:7a:dc:11:b7:cb:02:69:
48:91:36:01:d5:16:a4:40:40:b1:d4:79:7a:41:1a:
18:05:ec:b0:aa:49:20:2c:3c:2d:f2:cc:79:c7:c3:
dd:0e:51:31:60:2b:77:cb:37:9e:c2:1c:4a:ae:bd:
26:d6:6c:fb:35:72:77:e3:83:e3:bf:fd:33:77:a5:
90:f1:54:c2:c5:f4:07:00:a0:60:7b:13:62:b6:b8:
99:66:d1:f2:29:c4:c6:9b:f1:d2:eb:ea:91:bf:e8:
e7:5f:c5:95:e2:42:1d:39:a9:b6:f2:07:da:47:02:
60:b1:20:a8:76:c3:26:d5:d7:e0:54:98:12:18:96:
47:77:51:8e:36:0c:27:d3:aa:27:e5:3a:9c:9f:33:
ba:cb:39:d7:7a:f6:5d:e4:c0:c8:14:ca:57:20:65:
2d:b8:d8:fc:48:e9:d4:0e:07:65:13:41:29:69:22:
8f:70:f5:2d:07:f8:e4:6c:85:52:2d:b2:35:25:0d:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B6:A4:B5:CD:30:28:28:28:BC:05:19:9E:85:CC:0F:F0:E1:A9:09
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rraktc0wKCgovAUZnoXMD_DhqQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
103.75.68.0/24
103.75.71.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f0:a9:94:ec:07:e1:68:c0:d5:6b:e0:5d:18:f6:bd:45:bc:
f3:27:c8:1f:a1:aa:90:ba:c1:92:1f:3f:06:6f:dc:8e:2d:7a:
01:cb:a9:99:bd:f5:ca:a5:ff:07:0d:de:0c:0c:80:69:c0:46:
2d:24:ca:60:3f:e4:df:0f:f3:25:6d:40:a4:32:71:b8:a1:4c:
8e:12:3c:33:04:2a:dc:72:bb:9a:76:8d:62:2e:26:d5:3b:55:
de:f7:3a:de:cb:d3:e1:15:d9:31:53:37:5e:d4:5a:f2:42:9b:
82:44:d6:8a:c0:60:4d:99:74:82:94:a2:b3:9e:cc:1a:8e:0c:
94:b7:2b:17:9e:71:ea:67:f1:9b:d4:54:b6:e0:08:68:86:f4:
90:6a:4b:5c:6f:91:7a:dd:d9:41:98:b3:e7:29:2c:08:d8:24:
2f:98:32:29:53:91:39:b2:ea:28:0b:ad:33:e2:da:09:64:9f:
35:5f:51:cb:74:e1:50:7f:b4:2e:e9:10:d5:05:39:ff:d6:9d:
de:3f:73:ac:d1:c0:4e:3f:c0:cb:ba:07:29:c7:39:df:ed:33:
79:d7:b1:8f:ae:ef:e4:1e:92:34:42:03:4f:c5:a3:0d:b5:6b:
c5:ac:25:b8:1f:e0:30:53:0a:6c:f9:4a:a9:42:00:f0:5e:66:
20:5b:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org