Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rtlaubB7TrIZg8GNJX09PikVb6o.roa
File: rtlaubB7TrIZg8GNJX09PikVb6o.roa (raw, json)
Hash identifier: rwR5MFOgLhKJZrAocB2OFUOzfQfrH8XVVLxA/8xdWOA=
Subject key identifier: AE:D9:5A:B9:B0:7B:4E:B2:19:83:C1:8D:25:7D:3D:3E:29:15:6F:AA
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018AFCB5A50B426CB075CF83714E0E607CBD
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rtlaubB7TrIZg8GNJX09PikVb6o.roa
Signing time: Wed 04 Oct 2023 22:01:17 +0000
ROA not before: Wed 04 Oct 2023 22:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.76.131.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:b5:a5:0b:42:6c:b0:75:cf:83:71:4e:0e:60:7c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 4 22:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aed95ab9b07b4eb21983c18d257d3d3e29156faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e7:41:e4:54:7a:45:3a:51:c2:c9:22:57:2f:
9a:11:3e:49:2b:f8:89:54:bd:e7:72:be:31:a8:6e:
28:95:41:54:1f:98:f0:f8:a3:31:5c:e7:86:b4:06:
b3:3b:16:81:c5:56:11:a5:7d:da:91:9a:95:ac:1c:
0d:51:ab:94:32:fe:d5:9b:12:62:d5:0c:8e:a6:36:
41:53:78:41:b6:5a:f8:af:0d:7f:ab:43:f8:4c:30:
bc:c7:09:71:b9:f7:f8:79:a0:a5:78:a7:31:d2:55:
7c:77:d7:2c:57:7f:0f:b9:4f:96:29:67:06:5d:eb:
3a:c2:04:d6:10:7c:de:07:df:3a:4d:de:87:3c:d9:
59:d9:35:85:a9:54:c6:a2:e5:22:45:ac:cd:cb:df:
8d:5d:e0:f3:9c:fa:f0:3c:b9:1d:4f:ba:61:1e:7b:
f9:5b:f3:73:e8:b0:c5:ef:68:73:42:3c:d3:00:9b:
f3:f6:58:5c:61:7a:f7:0c:06:d6:db:7f:27:ca:1a:
80:ea:0b:d9:7a:fb:db:01:f1:21:e0:83:8e:73:25:
00:01:b8:f3:54:5b:86:bc:8b:c9:43:a0:a6:3a:09:
1c:b0:88:dc:d4:af:84:0f:01:c5:67:75:af:3a:66:
be:38:f8:86:78:83:47:99:1b:f1:f4:31:ab:1c:98:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:5A:B9:B0:7B:4E:B2:19:83:C1:8D:25:7D:3D:3E:29:15:6F:AA
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/rtlaubB7TrIZg8GNJX09PikVb6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
09:79:f2:5d:bb:0a:2f:20:41:fa:9d:e1:5f:0e:26:bc:34:90:
9a:ce:99:ea:e4:a1:5e:b6:83:f9:02:27:42:2f:ad:e7:a5:10:
b1:38:ee:43:d3:d9:d9:42:42:73:8f:cb:6b:ff:1a:e3:0f:a6:
1a:4b:35:fe:ac:9d:e4:c2:af:20:29:34:9d:11:ea:99:48:38:
d3:49:0c:9f:3c:08:4f:7d:4b:5f:cb:ae:6a:d7:4a:23:dd:d4:
f9:dc:b6:44:13:a6:8a:3d:b1:8a:0f:7b:04:e1:78:97:bb:5a:
e7:9e:bd:26:c3:2f:42:27:5d:28:a4:12:89:9f:ad:fc:1f:be:
f4:47:21:93:06:e7:97:05:23:03:f0:72:aa:d9:9c:55:c2:cb:
2b:40:6b:cd:0a:7a:0d:ed:ba:52:bf:db:22:15:88:7a:ec:3c:
03:58:1e:52:32:36:cc:0e:0f:82:90:80:1c:25:49:ed:1e:65:
7a:9b:fe:9e:36:1c:6c:28:13:fb:9d:7f:56:a4:1f:e0:67:b5:
f2:00:9a:ec:59:ab:76:6b:a9:ec:e1:32:00:69:3f:7f:32:45:
9a:63:8d:a4:c6:30:2a:1c:61:5d:81:86:17:6d:85:02:8b:79:
fc:2a:07:49:c7:9a:70:11:81:50:fd:7b:5c:3a:e8:f2:5e:a7:
f0:d1:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 10:14:50 2023 by rpki-client on console-fra.rpki-client.org