Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/B8loKDX4mjM5P4Yho6AHpU232yU.roa
File: B8loKDX4mjM5P4Yho6AHpU232yU.roa (raw, json)
Hash identifier: Vvahus+BYzgCf5TcidJI3ScaLEaZ4LSPBQOHS55OuBs=
Subject key identifier: 07:C9:68:28:35:F8:9A:33:39:3F:86:21:A3:A0:07:A5:4D:B7:DB:25
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185A0D6F5FA4286376F52749BA0FA5F0022
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/B8loKDX4mjM5P4Yho6AHpU232yU.roa
Signing time: Wed 11 Jan 2023 12:38:40 +0000
ROA not before: Wed 11 Jan 2023 12:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.230.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:d6:f5:fa:42:86:37:6f:52:74:9b:a0:fa:5f:00:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 11 12:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07c9682835f89a33393f8621a3a007a54db7db25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:61:fb:19:36:ed:41:44:08:fd:fd:12:d7:
8b:3f:b4:d3:e9:fc:09:06:6c:83:11:15:07:c1:7e:
2e:df:fe:84:45:d7:c4:e1:51:76:cd:1a:dc:9a:e7:
49:a2:36:5e:0c:b2:b3:d7:ef:03:fa:9e:4e:9b:5b:
28:d8:12:03:eb:92:a2:06:86:5d:7a:3c:8e:71:3c:
bf:76:bf:40:6b:64:c6:7e:79:24:14:b0:d0:bc:e3:
d8:31:76:a1:4d:36:02:7d:c9:16:cf:2c:5e:37:53:
13:3c:24:e3:d4:12:71:b1:af:c6:f1:0d:7e:02:5b:
5d:ce:64:18:50:85:85:34:97:5d:de:c9:d5:89:8a:
3d:a8:65:e3:37:5f:ae:75:bc:38:9e:2c:e0:fe:4c:
27:dc:3d:e1:6c:c6:d5:b5:7f:48:97:48:19:63:67:
f1:fb:5b:ea:99:89:b1:29:9d:b8:fb:7f:c3:a7:d0:
6a:cf:f0:25:0c:11:46:08:c8:c7:26:86:5c:81:ae:
0a:b4:fb:96:73:b7:fa:f3:87:c6:63:ba:79:f6:29:
46:2b:21:8c:b7:53:43:23:02:ee:f2:f8:b9:ed:c3:
df:3e:d3:58:dd:b3:9b:7b:de:89:6b:fa:de:ac:c7:
a9:11:7d:00:a5:06:7b:e3:48:da:64:a5:bf:a4:e8:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C9:68:28:35:F8:9A:33:39:3F:86:21:A3:A0:07:A5:4D:B7:DB:25
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/B8loKDX4mjM5P4Yho6AHpU232yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.17.0/24
5.105.137.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
31:02:1f:29:0f:2c:ec:cc:ef:a1:0e:af:c8:cd:94:11:3b:d6:
5e:60:00:b9:fc:df:e3:c8:30:07:8f:f8:84:a0:31:13:97:b5:
e6:c3:ea:e0:74:68:1c:66:9e:9f:99:b3:e2:58:1e:a8:12:e9:
65:6b:24:b4:ad:d5:b8:81:47:74:82:2c:b7:e3:28:e2:74:a9:
39:b4:03:df:82:f2:5d:6a:f0:a4:03:02:5a:68:3e:f1:2c:a5:
d0:e5:5b:af:e5:43:48:b0:c7:2c:f4:f5:70:05:6d:6a:9e:e7:
61:b9:e4:0b:a2:9a:e4:0d:74:4e:2d:d7:21:4d:7c:10:04:c1:
53:88:d2:ca:01:cd:0e:12:2f:9c:b1:13:53:dc:12:a1:08:6e:
64:7a:98:46:a5:ba:4c:30:26:6b:b4:e6:c0:0c:58:42:ba:64:
1c:98:b7:93:97:74:0b:73:2d:f0:0a:79:1f:e0:84:88:c8:fc:
91:db:f7:f3:74:ea:48:7d:1a:c9:b9:5f:8b:a3:82:9a:6a:92:
56:2e:04:e5:ea:bf:95:9a:e6:7e:6d:c2:c2:b6:98:be:92:ad:
14:c5:36:c1:1a:b4:10:2a:3f:31:4d:c1:81:4a:b9:ad:c9:99:
c0:c7:99:b0:a6:cf:69:57:92:12:ee:3d:af:5a:49:95:a4:2f:
35:99:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org