Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ulbDiK6i9vSt0_j3oQco32pdrL8.roa
File: ulbDiK6i9vSt0_j3oQco32pdrL8.roa (raw, json)
Hash identifier: 0kdh7apKRGNenKO0dHHwDMwheU+moV+X8cARlQo3Sls=
Subject key identifier: BA:56:C3:88:AE:A2:F6:F4:AD:D3:F8:F7:A1:07:28:DF:6A:5D:AC:BF
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0185C05DEEF581F1558736F455842C966AFF
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ulbDiK6i9vSt0_j3oQco32pdrL8.roa
Signing time: Tue 17 Jan 2023 15:34:19 +0000
ROA not before: Tue 17 Jan 2023 15:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 103.76.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Feb 2023 10:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:5d:ee:f5:81:f1:55:87:36:f4:55:84:2c:96:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 17 15:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba56c388aea2f6f4add3f8f7a10728df6a5dacbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:b3:27:50:7a:b8:ec:9c:0e:c1:80:e1:50:
a1:ae:66:8d:42:97:91:c8:fb:b5:43:00:a0:d7:50:
e8:83:06:4b:2f:15:fe:b0:0b:63:a9:6a:89:a4:b7:
05:a6:21:53:7b:d5:b7:42:72:9f:b0:ff:0a:7d:19:
41:c6:41:b2:ae:15:cd:51:5a:b5:4d:92:60:00:26:
5d:30:04:1d:0a:02:b8:a2:49:45:7a:5d:60:c6:e4:
24:20:7a:c1:54:20:57:b5:67:33:51:04:10:f7:42:
a8:55:39:b9:f0:2e:29:c5:2b:82:f7:5e:59:91:be:
c1:8e:35:a3:b4:eb:29:77:97:ff:22:73:9a:8b:1a:
7c:ca:82:c5:64:5a:38:98:b1:be:24:16:58:f5:86:
28:01:f9:71:0f:03:d2:2a:e9:7d:e9:67:c4:33:6e:
a2:72:63:76:00:71:c3:e4:32:40:6c:b5:50:5e:e8:
e3:12:46:dd:fc:4b:fa:cb:06:53:07:24:43:c1:25:
50:82:38:be:4c:56:82:84:fd:02:eb:35:a9:9e:01:
a2:0f:6a:92:31:15:08:38:33:54:34:ca:24:72:40:
7d:7f:bc:62:fe:0f:2d:44:c2:ea:6d:e3:c6:bf:17:
62:91:ff:7d:82:0e:54:a0:30:1e:6a:4c:6b:c8:3c:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:56:C3:88:AE:A2:F6:F4:AD:D3:F8:F7:A1:07:28:DF:6A:5D:AC:BF
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ulbDiK6i9vSt0_j3oQco32pdrL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4c:0d:53:ca:3d:fc:d6:61:dd:33:f4:e7:92:1a:56:90:d2:
c1:58:4e:20:8a:7c:7a:00:e6:dd:ff:96:b1:ad:ac:70:55:f4:
ee:3e:3b:e7:64:f7:10:c3:75:c0:33:f0:29:58:70:19:d4:40:
7f:5b:45:f5:f1:47:99:fb:dc:06:b6:e4:4d:a7:dd:96:c0:9e:
ec:5a:f6:2f:8c:90:44:fa:dc:03:38:42:e2:14:60:d8:71:e9:
90:a2:50:fb:9f:c2:07:ba:d3:6f:dd:41:3b:4a:c5:d3:46:30:
d2:bf:18:84:12:ed:a4:1f:9b:5c:e3:46:7b:f5:c7:cb:e8:ee:
b8:c9:ee:95:8b:bd:32:f5:88:01:a2:0a:d1:0d:85:c7:92:fa:
90:d6:a1:5a:a0:0d:4c:4b:21:e8:7c:cf:07:39:d7:18:f2:cf:
30:47:4c:4c:e9:aa:67:1b:f3:4f:17:29:c2:d4:2c:a8:4d:5f:
ce:a2:c1:af:21:e8:10:fc:9a:0d:54:31:58:6d:dd:3b:cd:0b:
49:10:f2:ec:23:23:fb:b5:62:49:97:37:57:5e:10:18:32:aa:
73:29:4b:cb:87:78:2a:ca:5b:ef:68:f5:8e:7e:04:2f:38:c0:
4e:5f:96:c3:18:5b:a2:25:c6:b6:21:74:c6:c3:fd:54:33:22:
b2:51:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org