Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9HTGN6vJ8lYVS1e12dFZYq1qpHg.roa
File: 9HTGN6vJ8lYVS1e12dFZYq1qpHg.roa (raw, json)
Hash identifier: 4r6daAojN+TuksRv4a9uBUf44bvoEdDokOuxnp2+OMA=
Subject key identifier: F4:74:C6:37:AB:C9:F2:56:15:4B:57:B5:D9:D1:59:62:AD:6A:A4:78
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01884E936EEF95A6A0D925469BA69938FA06
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9HTGN6vJ8lYVS1e12dFZYq1qpHg.roa
Signing time: Wed 24 May 2023 16:24:24 +0000
ROA not before: Wed 24 May 2023 16:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 5.105.101.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:93:6e:ef:95:a6:a0:d9:25:46:9b:a6:99:38:fa:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 24 16:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f474c637abc9f256154b57b5d9d15962ad6aa478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:c6:57:14:79:fe:fa:59:22:38:a7:75:ad:
8b:0a:7b:65:7d:fc:70:e5:36:6c:f1:1d:42:4a:70:
8e:76:fe:45:e2:2c:76:79:6a:8f:ef:d3:b0:1c:f9:
04:e6:ce:cf:06:bf:af:ca:8f:02:27:ef:98:4a:4e:
78:c0:bb:8c:20:f7:6a:f8:b1:44:f7:a4:5a:8a:42:
1e:35:43:85:86:d0:1a:03:6d:9e:1b:e6:6e:59:2d:
76:ef:a9:d9:7b:d7:8f:55:aa:47:69:46:6d:de:fc:
01:ea:e5:73:ea:2d:03:33:c2:b5:fe:53:7a:bb:6a:
5d:9c:95:85:61:d2:80:1b:9b:04:30:13:4a:21:9a:
eb:80:47:b3:c6:30:47:16:fe:3d:f5:79:f6:4f:55:
0e:6c:76:c4:8a:27:ac:01:3b:f2:4b:f6:d3:42:6b:
a5:4e:e7:53:8b:49:29:15:d3:cb:ba:f4:c5:48:2a:
39:cd:f8:3b:85:3c:b0:8b:c8:e8:a4:20:53:51:bd:
6b:5d:c1:72:6f:0d:db:c1:38:4c:22:16:67:ee:f3:
e7:6b:a4:e2:12:86:26:b7:40:e9:f3:a1:17:38:85:
7f:2c:da:76:2e:33:3f:53:fb:3a:72:7e:87:44:0b:
0f:70:90:cb:3d:70:6c:ac:01:1c:50:f4:12:1d:63:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:C6:37:AB:C9:F2:56:15:4B:57:B5:D9:D1:59:62:AD:6A:A4:78
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9HTGN6vJ8lYVS1e12dFZYq1qpHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.101.0/24
5.105.107.0/24
5.105.110.0/23
5.105.220.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8c:e4:4d:3a:89:b8:7f:5c:f4:8e:8a:3e:4f:00:a9:3f:42:
02:0e:6a:bf:80:9a:43:ca:57:42:d2:e4:f0:e8:90:01:4e:76:
f8:c0:b1:52:2e:56:79:44:f0:5a:f3:54:9c:d2:f5:6d:28:6f:
97:b4:2e:9c:d0:fe:91:ff:91:d4:55:43:c6:a7:c3:2b:92:24:
55:95:d3:a2:4f:96:e4:1a:eb:e4:29:fc:2c:06:50:62:db:0e:
24:76:79:79:29:7f:ad:09:07:9c:a1:66:31:eb:8f:98:6c:65:
fa:5f:be:7b:47:d5:79:43:fe:a4:80:fb:ff:8d:f0:e6:00:e8:
c1:a3:c5:65:0c:00:7b:c6:89:53:d8:97:92:08:29:71:b8:bc:
80:7d:b7:8d:3d:3c:73:f2:9e:f5:7a:f0:2a:71:0d:3e:08:22:
75:c4:07:91:80:c0:5e:b6:d3:cf:69:cc:56:ba:54:ea:fd:49:
11:21:b7:91:79:f3:6d:5e:5e:3e:e7:a3:16:ba:12:55:06:90:
f1:e9:0b:03:6c:8a:13:c3:11:28:c4:ff:29:22:a4:10:7a:21:
18:70:dd:2d:67:e9:3e:84:13:72:2b:a2:d0:71:43:64:d6:c5:
a3:3e:7a:f7:32:68:f0:df:aa:c6:60:ec:4a:c8:7a:a8:5c:0a:
22:73:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org