Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1Niet2WGeWLkEhqe8vSHtn7HxAo.roa
File: 1Niet2WGeWLkEhqe8vSHtn7HxAo.roa (raw, json)
Hash identifier: 8eLlDN917rq94VZVZIHl9Vt2Ji+5oZnspRXMm/mcreA=
Subject key identifier: D4:D8:9E:B7:65:86:79:62:E4:12:1A:9E:F2:F4:87:B6:7E:C7:C4:0A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189F59D35706C2CB6C32FB5E1DE9A10AB87
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1Niet2WGeWLkEhqe8vSHtn7HxAo.roa
Signing time: Mon 14 Aug 2023 19:54:27 +0000
ROA not before: Mon 14 Aug 2023 19:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:9d:35:70:6c:2c:b6:c3:2f:b5:e1:de:9a:10:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 14 19:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4d89eb765867962e4121a9ef2f487b67ec7c40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:76:15:18:94:83:6b:14:f6:30:af:3e:64:
2d:42:c0:34:24:df:b8:cd:bd:34:41:32:cc:1e:e5:
fa:0e:63:8b:1d:28:35:0b:6b:ec:e6:36:e5:b7:d8:
17:16:b1:f8:7b:cb:1f:59:ee:b6:77:14:ce:29:1f:
4b:96:b5:cb:e6:65:64:58:56:a8:77:e8:0f:e6:2c:
b8:ef:29:4d:45:a5:0b:4e:3f:6d:73:dd:10:b8:d8:
9b:de:73:00:e4:ae:c9:2b:23:8d:32:59:06:d7:99:
e2:48:8f:bc:75:85:04:bb:8c:fe:19:d5:4b:ec:e4:
e1:b5:72:76:9c:ed:0a:f6:87:11:94:30:9e:a4:df:
18:8a:8b:6f:cb:01:60:09:ad:91:47:fc:17:f7:3a:
a6:ac:d2:12:6f:00:4d:08:2d:4b:07:76:f4:02:c5:
10:d7:34:9a:69:9f:83:9b:2f:be:b5:a0:4d:b0:2c:
c8:e7:9f:a7:1d:1e:eb:45:50:eb:19:1f:e9:1c:5a:
7b:75:6e:ad:97:2e:ac:85:3c:f8:bc:de:b9:d1:ab:
0f:5d:36:ec:8c:eb:48:14:71:30:4b:1a:73:32:6b:
1b:98:1d:41:e9:47:be:22:e9:4f:3d:a1:31:c4:25:
03:84:45:51:84:4a:19:ae:ec:b4:b1:44:78:cc:0a:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:9E:B7:65:86:79:62:E4:12:1A:9E:F2:F4:87:B6:7E:C7:C4:0A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1Niet2WGeWLkEhqe8vSHtn7HxAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.123.0/24
5.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
07:55:24:00:46:b1:02:dc:49:d9:fe:62:d9:54:54:de:c5:c2:
2b:a8:2d:b8:41:ea:6a:97:67:70:a6:54:cb:f2:ab:65:8b:89:
31:18:74:e8:ec:25:72:91:72:4d:3c:71:b3:53:93:cf:7a:47:
67:43:04:44:96:7c:92:cf:80:c4:20:45:6e:98:9b:f7:3a:0d:
03:23:ad:38:f0:b5:1a:00:3e:25:83:a2:8a:e5:9d:d9:b5:f7:
95:d0:88:9f:ba:16:85:40:ee:28:ad:2a:09:d7:7a:0c:28:3c:
fd:54:16:3e:ca:00:45:a2:44:1d:c4:88:86:99:a4:b9:f6:66:
d9:ed:6e:de:a3:1e:5d:5b:5f:ca:73:c1:9c:74:fe:64:25:ea:
c9:26:6e:66:43:a3:97:75:f8:18:56:0f:39:ca:ac:4a:24:3c:
25:05:7a:c7:61:b7:12:05:b4:19:d8:80:32:41:94:6c:00:9b:
fd:1b:65:7d:77:d9:97:0d:8e:29:0d:0d:89:15:d3:ba:37:93:
83:7a:6a:6a:77:1c:33:75:29:93:38:88:c9:87:6a:eb:17:37:
a8:96:82:63:0a:b5:40:0a:e4:0f:22:29:8d:3c:17:d0:05:36:
7c:00:88:62:e0:3c:b6:24:cd:6e:af:2d:1b:e9:5a:86:50:1a:
c2:4c:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 00:40:45 2023 by rpki-client on console-ams.rpki-client.org