Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1oy4hCBDOTU-sWn6jgVGOWegRF4.roa
File: 1oy4hCBDOTU-sWn6jgVGOWegRF4.roa (raw, json)
Hash identifier: bUqGKOdllMcMGEngK3Bszv/Dgk96MG6XHkKTSrUmPYs=
Subject key identifier: D6:8C:B8:84:20:43:39:35:3E:B1:69:FA:8E:05:46:39:67:A0:44:5E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5ACB279FFB9FBDF18BE793EDABB93
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1oy4hCBDOTU-sWn6jgVGOWegRF4.roa
Signing time: Sun 01 Jan 2023 05:54:52 +0000
ROA not before: Sun 01 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 5.105.13.0/24 maxlen: 24
5.105.152.0/24 maxlen: 24
5.105.155.0/24 maxlen: 24
5.105.154.0/24 maxlen: 24
5.105.153.0/24 maxlen: 24
5.105.61.0/24 maxlen: 24
5.105.67.0/24 maxlen: 24
5.105.73.0/24 maxlen: 24
5.105.83.0/24 maxlen: 24
5.105.11.0/24 maxlen: 24
5.105.9.0/24 maxlen: 24
5.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:ac:b2:79:ff:b9:fb:df:18:be:79:3e:da:bb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d68cb884204339353eb169fa8e05463967a0445e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:14:56:91:3d:0b:02:d2:87:4a:10:55:69:
f0:0b:4e:be:62:25:28:d0:24:50:cd:72:16:f7:4e:
ca:b1:26:fd:12:bf:ef:cd:9e:fd:83:c4:58:47:06:
97:39:65:77:e6:1f:d2:f8:0e:aa:a9:8b:00:9c:82:
a9:0c:dd:85:57:3b:0e:05:df:08:18:b4:09:67:da:
3d:55:ba:21:80:58:b5:e9:d8:64:1d:ee:fc:0d:47:
57:87:85:18:29:dc:43:e0:d1:44:e9:04:a4:dc:72:
46:6c:3f:8e:fb:14:7b:08:4d:5d:50:3b:72:19:48:
ca:6a:ce:6a:c2:46:a2:e8:92:db:76:30:ab:3b:c3:
2a:db:a3:43:77:28:28:03:6b:6e:09:d4:b1:ad:e9:
f2:1e:60:3a:fb:6a:49:b0:51:e5:cc:b3:d5:7d:0c:
a6:6b:fe:f8:1a:84:d6:37:5d:34:6b:ef:1b:56:25:
7f:b4:5e:5a:68:a9:e3:f5:4c:ca:a7:64:b1:99:5e:
d8:16:8b:29:ed:b4:5c:3d:27:c7:e8:f5:82:22:0e:
10:cb:a6:3f:86:da:cd:c1:c2:70:3a:0e:9d:8b:c0:
17:59:82:eb:fb:23:37:c8:f0:97:ad:32:51:f3:8c:
ec:e4:22:99:95:16:d5:1b:94:a0:42:4a:ea:f4:04:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8C:B8:84:20:43:39:35:3E:B1:69:FA:8E:05:46:39:67:A0:44:5E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1oy4hCBDOTU-sWn6jgVGOWegRF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.8.0/23
5.105.11.0/24
5.105.13.0/24
5.105.61.0/24
5.105.67.0/24
5.105.73.0/24
5.105.83.0/24
5.105.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:70:75:9f:c4:ed:c2:e8:0b:cd:70:f3:d6:c2:10:41:40:40:
f2:ac:59:7b:34:26:10:f3:48:eb:44:44:05:8b:ab:ee:75:a4:
e6:e8:16:6b:ed:a9:a3:74:3a:c6:60:7e:1f:fb:c3:27:5a:97:
9f:09:a8:25:9e:bf:0c:3e:d3:c4:cf:a4:ec:c9:a1:be:82:ac:
5b:17:bc:06:ab:57:5e:c2:a9:cc:bd:67:ad:ab:64:30:aa:35:
d8:69:ee:c1:ea:74:a4:ae:6a:d1:fe:13:20:76:9d:73:68:e0:
84:19:18:7f:b0:f5:04:ce:18:1e:ae:70:c4:6b:63:c5:f9:a8:
22:de:d6:0d:9c:af:8a:17:c3:8e:45:bf:2d:cf:71:26:28:2e:
2a:13:91:4f:57:39:9e:b6:c6:27:f4:66:a4:33:9d:97:99:cd:
69:93:c2:72:4a:69:25:49:bf:18:44:47:1f:c4:51:1f:82:78:
8d:c3:6e:d4:65:d4:32:03:bb:06:7b:ef:d4:4e:c5:01:45:9f:
26:bb:08:c4:84:4a:84:b2:cc:07:57:d7:bf:1b:cb:06:2b:e0:
0d:1e:85:8a:b0:83:9b:f9:9a:51:c7:f9:23:21:ac:bb:01:eb:
7e:2f:33:e4:a9:73:89:8a:23:35:2f:2b:dc:e6:a6:e2:56:01:
e9:da:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 09:00:47 2023 by rpki-client on console-ams.rpki-client.org