Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/sKn_YFqdiiJPC40VmCqZ6m-2QS4.roa
File: sKn_YFqdiiJPC40VmCqZ6m-2QS4.roa (raw, json)
Hash identifier: NwE6VOyPm/8GL4qL6tsphwYKcXUcaySqtGbZO1pBj0s=
Subject key identifier: B0:A9:FF:60:5A:9D:8A:22:4F:0B:8D:15:98:2A:99:EA:6F:B6:41:2E
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDCA2C6192B471F2E9E2058D86BCDC0
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/sKn_YFqdiiJPC40VmCqZ6m-2QS4.roa
Signing time: Sun 01 Jan 2023 05:44:59 +0000
ROA not before: Sun 01 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
45.151.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jan 2023 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a2:c6:19:2b:47:1f:2e:9e:20:58:d8:6b:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0a9ff605a9d8a224f0b8d15982a99ea6fb6412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:ea:34:d0:7d:c7:67:18:cb:11:ca:a1:a6:
eb:98:26:86:d1:88:52:8b:b9:8a:9e:b2:9e:7b:14:
4f:9a:b9:99:37:15:22:ee:84:44:fe:1e:b6:e0:ac:
0e:0a:ae:e0:93:c1:03:b1:62:03:28:17:21:8b:23:
31:44:a8:e4:bd:af:85:d7:e2:97:46:ea:39:7e:18:
e9:05:e7:b3:f1:c4:f4:ba:0c:85:9d:4b:7f:ef:da:
2d:8b:1f:36:7c:e8:68:a4:53:df:f4:eb:9d:80:35:
72:0b:16:af:fd:65:eb:e9:f5:70:77:53:dc:4a:53:
d5:f5:fd:d6:2a:4b:4b:13:02:22:ed:d4:05:de:eb:
a2:47:17:49:1a:00:f3:36:9e:f8:b6:af:fa:02:bb:
78:a4:23:33:df:fb:57:c7:cb:c3:8d:cf:69:91:8f:
3c:d7:13:c4:cc:96:dd:f9:74:44:83:bc:ea:c8:9c:
68:e1:79:d0:98:da:d7:96:56:e3:8d:43:9c:43:ed:
10:74:4c:97:64:d5:98:e1:95:7d:ce:70:36:aa:cf:
b4:ff:e1:ea:23:e1:80:6c:84:54:1e:72:b5:4c:83:
42:40:cc:1a:53:52:46:ac:7c:5e:06:d7:14:c0:e4:
40:52:73:0b:71:04:81:a2:7d:eb:0a:19:f6:95:5c:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:FF:60:5A:9D:8A:22:4F:0B:8D:15:98:2A:99:EA:6F:B6:41:2E
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/sKn_YFqdiiJPC40VmCqZ6m-2QS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.69.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:23:57:fc:c9:39:5c:6f:30:b2:61:f7:00:9f:f3:67:5c:8f:
16:55:a9:27:2f:2e:a2:2b:19:b9:07:42:26:c7:fa:fc:07:ea:
e5:a0:b3:87:54:ab:da:de:6c:e5:f3:30:7b:6c:d6:a5:74:37:
f5:09:87:5b:14:f7:3b:a3:03:a2:39:03:20:36:f7:2a:6e:e7:
3f:6b:d3:e7:2c:39:93:98:a0:4b:08:d8:18:9e:7b:8e:c3:7f:
80:4a:33:0c:78:14:df:41:ee:7b:3f:56:62:3d:bc:22:a7:51:
8d:20:cc:92:1d:8a:c3:d2:b7:fb:b6:24:eb:77:59:65:79:11:
16:0d:5d:0a:b7:e7:f8:66:b7:e5:40:3b:21:f2:ed:56:73:ce:
1f:65:77:ed:a8:d2:9c:03:ab:6e:f7:7d:3a:ec:0e:a3:1f:e5:
e4:45:17:1a:60:80:9f:ac:72:c4:43:50:2d:2d:74:88:a7:61:
d4:48:ee:d0:a2:6d:86:2f:01:aa:f1:b7:05:91:09:52:15:93:
5f:4a:65:58:d3:93:24:6a:39:59:b6:4b:ec:c4:a0:c9:95:6f:
a6:d9:e2:58:6b:0f:21:e8:f9:3d:f8:8e:06:65:0b:90:1e:9a:
98:ca:45:c6:76:04:da:e0:93:f3:cc:f9:6e:22:69:71:d8:f0:
1b:38:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org