Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2mNdK2WBC6PpNMVkzZTBqt-wwoI.roa
File: 2mNdK2WBC6PpNMVkzZTBqt-wwoI.roa (raw, json)
Hash identifier: HQ7ry8vG3g5ZSIHErvc83fk5l5GPX901ABnopVSmydY=
Subject key identifier: DA:63:5D:2B:65:81:0B:A3:E9:34:C5:64:CD:94:C1:AA:DF:B0:C2:82
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018842442EF704015C58BDF8783679CC387D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2mNdK2WBC6PpNMVkzZTBqt-wwoI.roa
Signing time: Mon 22 May 2023 07:02:24 +0000
ROA not before: Mon 22 May 2023 07:02:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.82.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:44:2e:f7:04:01:5c:58:bd:f8:78:36:79:cc:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 22 07:02:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da635d2b65810ba3e934c564cd94c1aadfb0c282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:88:6e:bf:92:97:6f:9f:c3:a7:4d:47:1c:50:
ae:27:b8:c3:b0:ca:5f:33:2e:d0:62:c7:b4:a0:14:
62:ce:7d:4a:9d:73:2d:42:de:99:60:b3:5d:2e:a6:
6e:01:99:61:b9:af:22:fb:5a:11:b5:be:cc:5e:b8:
07:c4:f9:f6:6f:04:a9:60:67:be:55:7c:d9:96:24:
c7:c0:8f:7c:bb:59:82:da:e7:0c:a2:45:a7:92:d9:
f6:93:ab:e0:f2:cd:0a:4c:d0:fb:4d:a8:80:93:55:
d1:48:ae:6d:47:b9:b3:eb:f4:22:13:9a:97:89:06:
bf:04:27:52:8d:08:36:8f:6c:4a:7c:9a:03:19:4c:
ea:90:9e:66:3c:b5:8c:3f:b9:9e:30:d0:fd:59:c2:
77:a8:02:7c:81:ff:1e:45:d9:5f:e6:2e:3d:cf:c8:
7e:af:64:87:27:bd:cd:84:12:5d:0e:c1:d8:06:03:
c1:73:53:55:bc:88:b6:bd:c0:24:bc:75:b7:66:b1:
28:d1:ab:a2:3d:18:c3:50:be:7d:ff:cb:4e:d1:13:
86:80:e5:c8:f7:91:95:31:41:2c:04:19:2f:e7:d5:
29:89:a2:5c:9a:18:35:c2:94:c7:80:89:ad:1e:64:
08:12:d4:71:2a:52:70:32:e5:eb:fe:ab:c1:45:cf:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:63:5D:2B:65:81:0B:A3:E9:34:C5:64:CD:94:C1:AA:DF:B0:C2:82
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2mNdK2WBC6PpNMVkzZTBqt-wwoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.82.0/24
5.105.102.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8d:c7:01:29:50:f0:29:78:b8:85:09:72:11:20:4f:b3:a1:
15:ba:93:8c:22:02:9f:3c:7d:96:69:cd:91:03:47:18:57:f3:
23:f9:c2:4a:64:1a:53:e8:17:80:b5:6b:43:5c:5b:15:95:4c:
3a:b6:a6:44:4e:81:dc:c6:17:dd:fa:70:82:6b:8a:39:d3:0e:
9d:43:df:07:0f:81:b9:68:08:73:2d:4f:87:53:b6:92:6a:8f:
13:df:e6:92:c9:7d:4d:c1:35:63:ca:f9:e0:49:0f:41:f3:e5:
f8:85:d3:eb:2b:ff:4e:8d:0e:31:54:99:25:0c:82:85:35:7d:
e6:e7:7c:d0:6d:3b:31:bf:56:1b:80:e0:6f:e1:6c:d7:ff:e1:
1d:13:d5:25:62:75:d3:b7:65:2b:c0:f6:53:91:e1:fa:78:78:
a5:90:bd:41:f2:b4:41:b1:12:9f:65:d9:f3:f7:43:15:be:6f:
59:b4:20:f0:4f:eb:b0:81:18:11:26:f2:dd:d1:4d:5e:57:ba:
d3:41:fb:ea:b2:ab:48:d4:55:e6:20:1b:38:ed:af:d0:dd:3e:
cd:23:21:4f:10:af:37:f5:14:82:58:a2:92:5a:39:11:d3:7b:
7a:ad:9e:4a:33:79:61:4d:85:d7:23:49:66:1f:6a:21:69:2a:
90:f9:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org