Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/yV4oMXrh8NCDKps_tYm8Ancrg2Q.roa
File: yV4oMXrh8NCDKps_tYm8Ancrg2Q.roa (raw, json)
Hash identifier: +jZOL6ja4+lhphqwEfmiP5g2jOn/zsOn9H78jzLRMs8=
Subject key identifier: C9:5E:28:31:7A:E1:F0:D0:83:2A:9B:3F:B5:89:BC:02:77:2B:83:64
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDCA3EBAA05767B205BED3BEBB7C678
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/yV4oMXrh8NCDKps_tYm8Ancrg2Q.roa
Signing time: Sun 01 Jan 2023 05:45:00 +0000
ROA not before: Sun 01 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202335
IP address blocks: 103.75.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a3:eb:aa:05:76:7b:20:5b:ed:3b:eb:b7:c6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c95e28317ae1f0d0832a9b3fb589bc02772b8364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:01:7e:ff:e9:76:a9:3a:3d:49:ec:cd:10:
4a:21:e0:5a:68:c8:b6:e6:23:7a:5d:56:fe:e6:86:
19:db:75:d6:ca:61:f8:3f:cb:ec:07:fe:9f:64:37:
ad:28:61:27:a4:8e:92:00:c4:21:6b:7f:1a:cf:70:
ca:13:e8:ce:09:bf:44:5a:c5:56:34:0c:56:0b:fe:
80:a0:be:0e:95:75:48:98:ca:8f:65:7d:e4:30:d8:
3b:ac:7e:ab:5d:46:c2:86:43:97:45:86:c4:1e:3d:
ec:3c:3d:45:d7:eb:d6:22:28:30:cb:36:15:3e:05:
f7:1d:5b:f6:72:82:e0:74:39:60:1b:6e:52:df:6a:
8e:e6:70:98:ad:32:80:a7:7f:80:2f:ea:67:63:de:
93:58:ec:87:29:0f:8f:4d:df:b0:8a:14:ae:9b:08:
0a:5b:4a:08:55:d3:b0:55:6b:52:32:b0:a9:c3:83:
f1:38:5c:3e:87:c6:4a:55:a7:fa:ac:a0:db:07:f4:
03:0f:17:60:15:04:81:32:6f:45:00:82:3a:43:31:
34:6e:91:d7:af:17:6a:f8:29:0b:0a:91:fe:eb:6f:
07:96:29:85:a3:77:9e:34:f0:f9:bf:ac:f6:0d:c3:
73:f1:fe:b6:61:01:db:42:01:e6:45:30:ca:31:2e:
82:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:28:31:7A:E1:F0:D0:83:2A:9B:3F:B5:89:BC:02:77:2B:83:64
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/yV4oMXrh8NCDKps_tYm8Ancrg2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d5:43:b8:4a:59:f9:ce:3c:ac:bf:f3:9a:9c:d5:98:8f:ce:
e4:3f:90:83:9b:7e:2e:9c:2a:9c:07:29:db:e6:f7:70:c0:75:
06:5e:65:5c:5b:f3:ca:85:80:ce:d4:64:4e:d9:30:c1:63:ca:
54:d1:d6:cf:7d:f8:a6:2b:0b:fa:62:2b:63:34:12:00:c2:bc:
74:c3:e3:b8:45:8c:d5:76:f3:2f:93:08:78:37:4c:0d:98:07:
11:3f:6d:d8:76:e0:74:20:b1:d0:76:78:8b:ee:f4:ba:2c:48:
0b:f6:37:97:43:ac:b9:02:d5:45:74:37:f7:49:7a:d0:3c:6a:
66:9e:f6:ec:73:81:06:e1:e4:88:03:24:c1:f9:4a:99:95:f2:
82:0f:93:26:57:46:53:d8:1b:da:5f:ea:1a:ac:ad:58:8c:cf:
2f:aa:48:63:83:37:17:bc:a2:44:9d:79:18:7a:1a:d0:5c:7d:
44:bc:89:4a:31:c4:12:52:fb:30:30:92:02:fb:f8:5a:37:9a:
07:07:35:8e:b5:48:75:6b:1a:43:b7:21:b2:57:d4:af:8f:9c:
a7:fa:00:74:97:62:55:02:0f:fe:39:c0:50:ba:38:c4:74:d6:
38:51:9f:18:0f:5a:d8:22:3e:65:0b:19:c6:c0:80:3f:b3:f0:
74:79:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org