Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0Zb_nt3uf_VBcJ0f1f6MRlZ7QO4.roa
File: 0Zb_nt3uf_VBcJ0f1f6MRlZ7QO4.roa (raw, json)
Hash identifier: S1vMDl7EVndeh/qJY/jp9UbnjNHmzApBECtGiG+0jv4=
Subject key identifier: D1:96:FF:9E:DD:EE:7F:F5:41:70:9D:1F:D5:FE:8C:46:56:7B:40:EE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889AE003C481E42B369CCEA81D1984AB55
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0Zb_nt3uf_VBcJ0f1f6MRlZ7QO4.roa
Signing time: Thu 08 Jun 2023 11:59:12 +0000
ROA not before: Thu 08 Jun 2023 11:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:e0:03:c4:81:e4:2b:36:9c:ce:a8:1d:19:84:ab:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 8 11:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d196ff9eddee7ff541709d1fd5fe8c46567b40ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:15:78:c5:be:90:a6:18:f4:a6:63:43:16:
67:81:61:ab:20:df:4a:f0:74:24:77:4c:8d:7d:b1:
82:b3:6d:61:7f:e9:9e:55:43:14:49:a7:4f:1e:27:
1e:a6:af:65:54:91:74:88:b8:3a:57:cc:b9:f6:2c:
4c:73:23:69:9c:69:11:68:a3:d5:36:1f:d9:64:4d:
fa:af:51:71:24:a8:04:d7:2d:74:b6:07:ab:a3:7f:
ca:62:da:df:c7:70:dd:49:f0:ad:59:18:b1:6b:0d:
e4:73:75:47:8c:64:46:3c:34:d9:35:5c:13:31:8e:
5f:93:70:a5:76:c8:5f:56:ad:ec:0f:d8:a0:aa:d6:
9d:08:c2:4d:fe:ef:44:b6:b2:21:fb:17:f3:58:48:
e8:b5:c2:1b:b2:e6:cf:43:9c:83:2a:e3:f9:f4:12:
22:a7:82:b4:38:ed:b8:1c:8c:24:dc:e5:a4:df:33:
02:fb:4a:ec:7a:56:31:05:b1:e5:fb:30:de:ff:22:
2b:e0:be:e1:ff:53:ad:8e:96:97:c3:d7:06:94:60:
1a:5c:69:5e:92:79:6b:99:14:bf:a1:c9:19:57:b1:
fc:eb:8b:ec:34:d1:c4:59:90:de:0a:c5:98:34:05:
7d:99:8c:48:76:2b:24:84:f7:a3:8f:2c:d8:cc:78:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:FF:9E:DD:EE:7F:F5:41:70:9D:1F:D5:FE:8C:46:56:7B:40:EE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0Zb_nt3uf_VBcJ0f1f6MRlZ7QO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.59.0/24
5.105.123.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b3:09:d6:06:09:b1:8c:d8:bf:37:e6:83:40:da:64:5b:71:
61:f1:dd:44:e7:cc:4d:45:7a:4a:bf:3f:2a:3c:93:8c:88:52:
4e:59:0f:a2:24:36:43:27:17:49:cc:a1:1d:c2:48:9d:18:24:
4d:eb:fa:44:27:ea:c6:ee:f4:33:1c:58:fd:66:30:87:27:5a:
46:e3:ca:18:b2:ae:70:c8:fb:7c:49:86:2b:64:81:34:0a:cc:
0e:23:cf:61:96:df:44:b2:da:9a:e9:36:68:0f:d2:a7:44:64:
1b:2c:4a:73:13:eb:51:c7:57:bd:d7:12:04:b5:7f:24:d5:ea:
4f:15:87:1c:49:19:fe:8a:f2:68:01:da:d6:21:38:32:10:a2:
db:c8:70:79:3f:03:07:ed:66:ad:cc:a7:6b:8c:cc:d7:78:5b:
76:4a:b0:b3:4a:3a:94:20:0d:82:74:ee:e1:3e:bf:a2:08:2a:
cc:54:38:84:d8:c0:65:51:a1:1c:ce:ba:a6:25:62:4e:1b:05:
b6:c8:dc:de:c1:5e:97:c0:08:ec:71:6f:aa:92:1e:f7:3b:2a:
94:1e:3f:a0:01:f4:ac:a8:42:e5:0e:cc:58:49:f8:1e:e2:9b:
e0:e1:70:31:cb:f5:a5:f5:6a:1a:cd:f9:5c:a8:62:3c:f9:76:
da:8b:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org