Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4RcP33lyq6G3z70-1RQvqCgUT9g.roa
File: 4RcP33lyq6G3z70-1RQvqCgUT9g.roa (raw, json)
Hash identifier: csVY/xqdLVeiEhmsqkXU5ukSih+lETD31RAog+nCW2I=
Subject key identifier: E1:17:0F:DF:79:72:AB:A1:B7:CF:BD:3E:D5:14:2F:A8:28:14:4F:D8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187FBDB0C2247B68C45CDE23D2C63A96A92
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4RcP33lyq6G3z70-1RQvqCgUT9g.roa
Signing time: Mon 08 May 2023 14:54:09 +0000
ROA not before: Mon 08 May 2023 14:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.164.0/23 maxlen: 24
5.105.186.0/23 maxlen: 24
5.105.198.0/23 maxlen: 24
5.105.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 19:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:db:0c:22:47:b6:8c:45:cd:e2:3d:2c:63:a9:6a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 8 14:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1170fdf7972aba1b7cfbd3ed5142fa828144fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:c8:5a:26:48:b9:6a:05:b0:0f:63:2a:27:
7d:98:c2:69:71:84:32:df:a9:0f:9f:07:02:7a:eb:
dc:76:18:52:77:e8:68:0f:64:93:62:13:20:51:b5:
6e:5f:95:86:e4:ac:e4:af:ef:68:28:3d:81:ff:7e:
64:25:8c:ae:69:ce:b0:ae:e8:f5:69:aa:1a:44:97:
b4:bc:78:ca:1c:2d:49:ca:ea:66:2f:84:0a:a4:95:
d9:05:45:af:dc:de:f2:39:d7:a0:11:a1:f4:e0:d3:
d2:3b:f7:4e:a1:d1:78:77:27:b4:12:12:b3:0d:9a:
aa:30:c1:d0:a9:89:8a:ed:a5:08:71:fc:46:14:ed:
89:df:c1:7f:fb:60:85:b4:67:66:76:bd:72:25:24:
7a:d5:db:6c:03:6f:fd:db:c1:f9:66:5a:87:ed:4c:
c4:ca:12:a4:bf:35:7d:95:99:89:b6:bf:11:78:65:
50:d9:b1:fe:c7:aa:b7:42:1b:8e:06:75:42:f0:0c:
6e:7a:cd:d6:29:60:61:f5:32:e8:c8:15:82:e6:03:
f9:6b:e4:4c:01:a0:89:fb:e5:a5:e6:25:39:ec:f6:
c6:fb:b4:d0:4b:64:ac:94:03:b7:f3:26:b8:84:f1:
35:61:b2:0e:f6:e7:6f:09:3a:47:4a:07:4e:0c:3b:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:17:0F:DF:79:72:AB:A1:B7:CF:BD:3E:D5:14:2F:A8:28:14:4F:D8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4RcP33lyq6G3z70-1RQvqCgUT9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.164.0/23
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:8f:aa:13:07:1d:cd:51:c9:a7:77:dd:e8:85:70:ad:c4:bb:
e4:c2:0e:97:3c:94:a3:98:9d:6d:8b:88:70:9b:fa:cd:cf:ed:
f8:cd:d9:fe:43:52:21:97:6f:a7:49:b0:0a:a3:35:73:c2:ce:
40:37:d3:26:3d:3f:15:eb:33:6c:51:e9:0d:87:3c:78:82:d8:
99:8a:42:a7:4f:ef:7a:2a:3b:a4:02:cf:85:2e:a1:b0:53:25:
f0:01:86:1d:15:f3:b7:2a:0d:4d:2f:aa:d3:33:dc:68:38:a2:
0a:63:23:48:2f:4d:48:01:9d:55:32:4f:cc:41:59:9c:d4:00:
79:ee:ab:4c:09:c8:6c:44:5b:d7:a8:92:b3:f1:9b:42:6f:4d:
8c:43:85:0b:00:2d:54:f3:32:63:32:45:55:7f:7b:49:83:5e:
f1:ea:a8:a0:f6:7e:68:32:0c:82:d8:d4:b0:a3:32:52:3c:5d:
c0:74:39:06:de:93:78:b2:cd:f4:a9:2b:a5:97:60:88:8e:60:
95:e2:6b:67:cc:bc:6d:cb:20:89:35:aa:c3:28:a8:1d:d9:cf:
7a:68:3d:92:2e:9c:a6:3f:8f:c3:43:0a:a4:20:09:8f:5c:ee:
de:56:af:bf:81:59:d2:47:e7:a5:5e:07:6a:69:c3:20:8c:77:
c9:f9:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:26 2024 by rpki-client on console-fra.rpki-client.org