Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/y1ZY5cw1aazARhXLgqMEmVGpu7I.roa
File: y1ZY5cw1aazARhXLgqMEmVGpu7I.roa (raw, json)
Hash identifier: IEQGII9Tq/+I2hkJfijUO1ObvZdQAQ1T5FvYZsaSiVs=
Subject key identifier: CB:56:58:E5:CC:35:69:AC:C0:46:15:CB:82:A3:04:99:51:A9:BB:B2
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018AB985068CF22D100C26558FDF4D5B04B0
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/y1ZY5cw1aazARhXLgqMEmVGpu7I.roa
Signing time: Thu 21 Sep 2023 20:53:37 +0000
ROA not before: Thu 21 Sep 2023 20:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.75.71.0/24 maxlen: 24
103.75.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b9:85:06:8c:f2:2d:10:0c:26:55:8f:df:4d:5b:04:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 21 20:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb5658e5cc3569acc04615cb82a3049951a9bbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:eb:b9:91:c0:d4:6a:12:5e:7e:d5:e9:9e:
5b:4a:e4:dd:4c:14:f7:7e:dd:d8:3b:55:16:7d:98:
7f:b5:47:f7:4b:9e:c3:a5:04:a1:fc:4f:b2:f7:5b:
79:9f:4a:b4:d0:fd:c1:2a:78:59:0e:5e:24:47:66:
61:41:ab:97:9e:2e:52:4d:d1:ad:57:91:20:76:8a:
4f:0a:9c:10:79:9e:94:ff:6b:92:2e:35:53:39:2b:
b5:1f:d1:52:a5:94:5c:92:4f:8e:ef:3f:79:6a:76:
e4:7a:5b:f9:f5:92:e5:5e:bb:7a:b9:e4:ce:15:c1:
77:06:c7:28:6e:46:f1:fd:dc:7e:46:a3:f3:a5:4f:
e2:0c:4c:9e:78:05:d7:97:87:4b:70:79:f7:cc:5c:
12:95:d8:12:37:9c:0d:d5:e2:f6:f6:dd:4d:1b:04:
eb:92:42:c3:6e:3a:fd:f4:b9:18:68:e6:3b:12:ac:
6d:13:95:b4:b2:73:60:dd:6d:1a:a9:c0:77:40:ec:
9f:25:db:38:9d:6e:ad:04:6e:7d:4b:cc:14:15:9a:
16:06:7a:be:35:84:08:ac:6c:25:f1:ef:b7:4d:14:
bd:67:94:61:8a:80:45:a9:7c:b6:55:b9:5e:8d:fd:
2b:5b:14:46:24:5f:fd:93:a7:4d:58:1d:db:79:8c:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:58:E5:CC:35:69:AC:C0:46:15:CB:82:A3:04:99:51:A9:BB:B2
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/y1ZY5cw1aazARhXLgqMEmVGpu7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.68.0/24
103.75.71.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:42:3b:97:a8:3e:0a:f6:54:01:8b:4b:1d:20:8d:1d:ef:b1:
af:97:1a:aa:8d:f0:bb:4d:44:78:4c:80:ec:21:7e:22:06:a4:
83:ab:cd:9d:c6:84:82:53:75:b2:95:64:90:fe:15:68:a8:61:
5c:db:e2:c0:c7:65:40:76:90:42:bb:5c:fc:59:cd:50:79:cd:
1e:9b:4e:70:ca:6d:ad:79:6e:8e:e3:8d:43:8f:e9:56:9c:f6:
dc:22:c5:34:44:d4:01:e6:45:34:d9:8d:17:2d:34:05:d0:32:
90:91:9d:e1:32:f8:dc:ef:0f:5f:56:91:8c:4f:95:e4:81:a5:
8a:87:b6:1e:60:59:3b:3f:ff:27:c8:2e:ad:db:12:01:a6:a0:
50:e5:9d:ec:eb:58:9f:4e:bc:57:97:f6:c8:09:52:fe:91:de:
f9:96:7f:01:3e:c9:ba:01:14:8b:13:e6:e0:db:d8:ff:d7:90:
4d:59:7b:7e:37:e1:8f:3a:9d:be:8e:75:03:99:a6:50:3a:87:
eb:51:08:23:60:e9:13:37:7a:f2:63:a4:17:d2:ba:91:a7:62:
1c:98:d9:47:ac:0a:2e:86:e2:de:7d:85:41:0b:cd:f4:6f:98:
3e:eb:29:72:b1:a3:bc:58:be:74:24:c8:09:9a:18:e7:d9:f6:
d4:4a:84:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYq5hQaM8i0QDCZVj99NWwSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwOTIxMjA1MzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjU2NThlNWNjMzU2OWFjYzA0NjE1Y2I4MmEzMDQ5OTUxYTliYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyrruZHA1GoSXn7V6Z5bSuTdTBT3
ft3YO1UWfZh/tUf3S57DpQSh/E+y91t5n0q00P3BKnhZDl4kR2ZhQauXni5STdGt
V5EgdopPCpwQeZ6U/2uSLjVTOSu1H9FSpZRckk+O7z95anbkelv59ZLlXrt6ueTO
FcF3Bscobkbx/dx+RqPzpU/iDEyeeAXXl4dLcHn3zFwSldgSN5wN1eL29t1NGwTr
kkLDbjr99LkYaOY7EqxtE5W0snNg3W0aqcB3QOyfJds4nW6tBG59S8wUFZoWBnq+
NYQIrGwl8e+3TRS9Z5RhioBFqXy2Vblejf0rWxRGJF/9k6dNWB3beYy8dwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMtWWOXMNWmswEYVy4KjBJlRqbuyMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEveTFaWTVjdzFhYXpBUmhYTGdxTUVtVkdwdTdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ0tEAwQA
Z0tHMA0GCSqGSIb3DQEBCwUAA4IBAQDNQjuXqD4K9lQBi0sdII0d77GvlxqqjfC7
TUR4TIDsIX4iBqSDq82dxoSCU3WylWSQ/hVoqGFc2+LAx2VAdpBCu1z8Wc1Qec0e
m05wym2teW6O441Dj+lWnPbcIsU0RNQB5kU02Y0XLTQF0DKQkZ3hMvjc7w9fVpGM
T5XkgaWKh7YeYFk7P/8nyC6t2xIBpqBQ5Z3s61ifTrxXl/bICVL+kd75ln8BPsm6
ARSLE+bg29j/15BNWXt+N+GPOp2+jnUDmaZQOofrUQgjYOkTN3ryY6QX0rqRp2Ic
mNlHrAouhuLefYVBC830b5g+6ylysaO8WL50JMgJmhjn2fbUSoSb
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:25 2024 by rpki-client on console-ams.rpki-client.org