Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/tkZrKZbRAh0--s40PjUBP609ajc.roa
File: tkZrKZbRAh0--s40PjUBP609ajc.roa (raw, json)
Hash identifier: DgWaGM7G8q3D36ZBrOqLWSTWrL4KaJtKd23qOsQGwWw=
Subject key identifier: B6:46:6B:29:96:D1:02:1D:3E:FA:CE:34:3E:35:01:3F:AD:3D:6A:37
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDCA32C690DFF38E9BC7D946720044B
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/tkZrKZbRAh0--s40PjUBP609ajc.roa
Signing time: Sun 01 Jan 2023 05:44:59 +0000
ROA not before: Sun 01 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141968
IP address blocks: 103.76.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a3:2c:69:0d:ff:38:e9:bc:7d:94:67:20:04:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6466b2996d1021d3eface343e35013fad3d6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:49:0d:16:27:88:83:a9:70:8a:d0:41:67:
d4:e0:dd:db:08:0c:0c:2a:6c:8d:2a:e8:cf:60:11:
d0:f0:e7:85:e7:c3:f0:8d:67:da:2e:44:bc:d8:73:
ce:5a:39:84:6d:46:73:48:5c:cb:da:cf:21:ac:32:
10:18:ae:f3:47:0c:86:8d:e7:05:41:de:a6:d6:34:
4f:11:a7:5f:bf:90:d2:12:e7:37:b7:fe:4e:9a:f2:
c8:a0:a7:fb:a7:aa:e4:55:17:94:8f:33:cd:39:8f:
5b:91:aa:4c:ab:47:b9:49:fc:c7:b8:0f:28:53:4a:
f8:6e:cd:a3:43:1f:6d:23:62:f5:05:69:28:de:ad:
89:2e:4d:97:3b:03:6b:70:15:5a:cc:d8:56:1d:23:
a0:88:7a:81:59:a3:48:8b:84:fc:d0:e2:8d:f3:e8:
4f:a8:8f:95:2f:44:f2:6c:ae:17:58:5b:26:07:5d:
b3:10:d5:f8:a6:c7:77:7b:f7:f4:40:39:0d:64:ff:
7c:19:51:5f:5a:c8:55:30:51:3c:39:6e:44:2c:52:
a9:3d:5c:74:ef:4a:37:2b:95:02:41:f9:49:55:9e:
c6:c3:97:c2:81:27:cf:af:e4:79:ce:b2:26:81:57:
2d:b6:e6:2f:48:50:49:0d:8d:9f:9e:86:3c:e4:d2:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:46:6B:29:96:D1:02:1D:3E:FA:CE:34:3E:35:01:3F:AD:3D:6A:37
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/tkZrKZbRAh0--s40PjUBP609ajc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:4e:25:21:90:4c:9d:ae:89:63:bf:16:94:4d:39:5b:f7:f6:
bc:76:59:be:3a:52:cd:8e:71:3b:01:a1:43:fb:af:e1:dd:bb:
3d:1d:95:80:c0:2c:40:3b:a1:a3:2d:f1:72:a5:ef:42:33:36:
23:48:40:f4:a2:f0:c3:8d:74:e3:49:04:ca:77:89:6c:0c:cf:
a0:8d:55:28:84:39:80:65:d6:e1:42:f6:5f:44:9f:ee:5f:7c:
23:8c:84:13:07:df:b8:54:de:ef:57:b1:c1:22:b6:9c:63:94:
06:2e:1f:4c:78:f7:49:eb:3b:26:e3:2e:04:5b:62:f9:45:44:
6d:42:00:c2:f0:33:8d:87:27:ed:90:8a:02:e2:fd:47:09:01:
11:37:1d:ba:e4:c1:70:a7:80:ce:93:9b:00:4e:37:2e:05:47:
38:c1:f4:7a:c3:60:77:de:3b:81:70:2b:d7:60:88:d3:74:c1:
4b:a5:de:d9:19:25:6d:42:e3:1d:37:73:42:62:17:43:10:e7:
4e:b2:5e:b2:9a:53:46:49:eb:f7:26:89:61:79:8f:94:3f:9b:
f4:1b:a8:f7:74:a6:96:45:b8:84:9e:e1:23:bb:5c:71:6e:94:
9d:38:62:2d:d3:25:ed:e4:d3:bb:8b:ae:bc:e9:7a:7e:f7:af:
73:75:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:24 2024 by rpki-client on console-ams.rpki-client.org