Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2kLBwwq_u836YK6B8FDMrUrtggQ.roa
File: 2kLBwwq_u836YK6B8FDMrUrtggQ.roa (raw, json)
Hash identifier: b0fGi7zLKA37SUYiyNXgYvHSnVdu7L++HpsCG4kF4yA=
Subject key identifier: DA:42:C1:C3:0A:BF:BB:CD:FA:60:AE:81:F0:50:CC:AD:4A:ED:82:04
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B0D79C8B99B50FA0979AA52593FDC72E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2kLBwwq_u836YK6B8FDMrUrtggQ.roa
Signing time: Tue 01 Aug 2023 11:24:27 +0000
ROA not before: Tue 01 Aug 2023 11:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 5.105.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:d7:9c:8b:99:b5:0f:a0:97:9a:a5:25:93:fd:c7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 1 11:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da42c1c30abfbbcdfa60ae81f050ccad4aed8204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:09:5c:07:33:4c:d2:0a:2e:f8:b5:e9:59:
ad:c2:04:cc:32:ed:07:88:90:6e:8e:63:a1:48:d2:
16:54:fa:8b:97:e4:0c:75:31:55:e7:a6:78:90:30:
d2:70:1a:a9:7c:85:7f:51:46:22:25:98:92:b6:2b:
06:49:5a:ca:4b:95:10:21:f5:7b:eb:d3:b2:d3:e9:
2e:cc:88:cc:46:56:79:f5:a3:c4:8a:5b:cd:23:0b:
1d:45:2c:68:f9:55:d6:a7:92:af:a7:fd:55:76:49:
4f:67:62:6c:95:e3:67:55:95:6b:1b:62:7d:f7:28:
70:d4:2d:f7:14:9f:cc:d4:e6:8f:ea:b4:82:de:95:
0a:35:44:c9:93:0d:12:33:11:7f:ae:7a:17:cb:15:
d0:23:9d:40:7c:aa:23:bb:b5:30:d3:04:da:cf:64:
1f:7a:ba:d4:24:b7:4b:59:c1:7d:4e:64:56:79:07:
1d:81:d8:2a:3a:30:e7:16:f1:53:fe:53:ff:95:25:
83:d5:91:74:90:19:b0:0f:f5:ff:7b:43:87:bc:a8:
5d:ee:21:d1:a3:ed:ea:81:e8:0f:bf:3b:d1:28:84:
04:02:46:22:4b:ba:44:5e:d4:bc:94:8a:bf:20:a4:
6f:77:34:18:14:51:20:cf:cb:ad:bd:c9:5e:66:33:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:42:C1:C3:0A:BF:BB:CD:FA:60:AE:81:F0:50:CC:AD:4A:ED:82:04
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2kLBwwq_u836YK6B8FDMrUrtggQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.220.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:36:be:eb:b6:56:e5:eb:48:21:59:3d:b6:6d:48:c0:9e:1a:
cd:d6:1b:34:29:85:36:7f:5e:8f:f4:ca:3c:66:6f:3e:e0:06:
89:5e:e4:58:23:4a:ed:84:11:8c:83:b9:75:ea:b3:d8:60:56:
b7:89:01:31:e6:f4:0d:4b:ce:a2:87:9b:b6:9c:6d:a6:aa:b9:
e9:02:ba:d1:eb:c6:77:88:de:83:7a:c2:cd:ed:12:a8:ae:cc:
da:57:56:d7:0d:8c:b7:23:82:41:ea:63:36:94:78:d3:ee:07:
cb:d5:59:27:d1:cb:27:40:2e:10:ae:ed:e4:5f:14:14:1d:b9:
eb:9c:fc:d3:61:9c:e9:93:3d:3a:c5:03:4d:f1:9e:2e:c2:bd:
f7:00:41:98:39:c8:90:48:2f:69:eb:ee:e5:b8:69:a8:61:de:
72:fc:0b:54:51:4e:3c:4a:ac:0d:fc:74:64:ee:09:ac:8c:7d:
82:98:8d:ce:17:bf:c2:4f:3c:2a:94:94:96:a5:e8:b8:68:89:
9e:31:ac:b6:88:4c:4d:3f:18:6e:4a:8d:44:74:34:1f:cd:64:
e1:d1:ff:af:57:d0:46:4c:4f:31:76:0c:23:f9:b6:81:2f:76:
94:a0:0a:2a:e2:f5:99:2c:d8:15:c5:ac:8f:07:e1:65:95:a7:
a7:85:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 12:17:25 2023 by rpki-client on console-fra.rpki-client.org