Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9CI0x8zUVra8jpUqiP9KEodGwYU.roa
File: 9CI0x8zUVra8jpUqiP9KEodGwYU.roa (raw, json)
Hash identifier: UATecFSP6oHc924RBv7OpZAwNWM1nBolEsZKnNcX+R8=
Subject key identifier: F4:22:34:C7:CC:D4:56:B6:BC:8E:95:2A:88:FF:4A:12:87:46:C1:85
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018636B96EE9C31DE797F63E205AA0427F98
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9CI0x8zUVra8jpUqiP9KEodGwYU.roa
Signing time: Thu 09 Feb 2023 15:09:27 +0000
ROA not before: Thu 09 Feb 2023 15:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210912
IP address blocks: 5.105.122.0/23 maxlen: 23
5.105.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:b9:6e:e9:c3:1d:e7:97:f6:3e:20:5a:a0:42:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 9 15:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f42234c7ccd456b6bc8e952a88ff4a128746c185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:f7:6c:39:74:91:4e:c2:2f:ad:7a:9c:fe:
3d:02:ff:01:2a:2d:15:28:c6:75:48:fa:ac:99:aa:
45:c0:0f:5e:b4:ca:7a:04:69:c4:10:15:bc:62:fa:
28:f6:31:1c:9f:77:cf:8f:98:22:37:3f:20:42:43:
b7:ed:e8:20:3c:24:26:cf:c2:6c:e0:a1:3a:b3:dd:
50:7d:ef:71:4b:11:bb:5d:1c:7f:45:c4:28:dd:57:
c9:c6:81:fd:c2:34:94:ec:b4:93:0e:a1:19:0f:43:
aa:94:89:de:95:78:79:63:cb:23:bc:8c:d4:e9:05:
ca:c9:65:6f:27:b7:a3:f4:23:d5:d1:b3:4d:8d:82:
f3:28:60:09:fc:ac:b2:47:f7:42:95:8b:8a:a2:7f:
8f:87:4f:f8:3e:c3:a0:b0:90:17:84:67:63:fd:95:
14:ab:dc:d3:0e:80:49:11:3a:a4:81:8b:5d:d7:73:
15:aa:ae:fa:39:c5:12:b1:7a:4f:f3:92:68:7e:d3:
04:53:15:23:c7:73:88:23:b8:e2:c5:27:c0:a2:03:
1d:69:c9:d8:65:19:45:c6:86:43:a5:d4:72:02:e1:
6c:f0:07:c6:d0:38:ce:5e:23:5c:40:47:95:a4:31:
3b:6a:ef:79:07:02:e3:46:90:b8:ed:87:2d:9b:71:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:34:C7:CC:D4:56:B6:BC:8E:95:2A:88:FF:4A:12:87:46:C1:85
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9CI0x8zUVra8jpUqiP9KEodGwYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.39.0/24
5.105.122.0/23
Signature Algorithm: sha256WithRSAEncryption
31:c3:ab:53:e9:d1:89:cf:ca:4e:f1:97:1a:ba:62:47:40:2f:
ca:af:bf:ba:47:e0:e8:fd:e0:5b:0e:9a:a4:6f:25:45:35:d0:
87:73:4d:01:64:13:ce:3e:27:19:0e:c4:2c:12:28:97:bb:2a:
cd:fe:36:82:08:5d:22:0f:bf:e5:33:b4:14:90:ad:b5:e0:b4:
37:1f:59:a0:4a:4c:a7:68:1b:40:5d:1b:7f:82:4a:ef:85:8c:
be:f1:53:de:80:03:52:26:eb:a5:b9:d1:ec:9e:1e:9f:0b:fd:
e4:10:41:e8:e0:d6:a2:7d:32:f4:bd:94:a0:42:8d:87:d4:11:
e8:50:aa:87:79:eb:49:bf:d1:b6:e7:93:c3:d3:96:16:0f:60:
39:9f:0e:84:d8:f8:3a:bb:c9:1e:05:c4:19:02:2f:20:c4:15:
02:ee:ad:1c:ad:43:24:cc:7a:df:b6:aa:3e:7d:2c:91:73:03:
e3:2d:3d:9f:43:f1:29:3a:e5:f5:e8:91:12:6a:77:56:f2:5f:
76:9f:c5:e8:ad:9f:c6:0f:76:43:69:01:26:ad:fe:46:b9:e1:
14:af:39:3d:38:5d:6f:f7:37:52:f8:d0:4b:ef:32:bb:19:80:
82:4f:a1:fd:c1:e6:9a:36:c3:e0:5b:64:03:9c:1c:78:ae:fd:
10:30:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org