Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BVH7PFpzL62f1M49IKjtrLgVTHw.roa
File: BVH7PFpzL62f1M49IKjtrLgVTHw.roa (raw, json)
Hash identifier: EyG8Ek2eDpvMgEQNJ6eq9/3QI263KtUgMIkW6Rngkuc=
Subject key identifier: 05:51:FB:3C:5A:73:2F:AD:9F:D4:CE:3D:20:A8:ED:AC:B8:15:4C:7C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018940A9B77DDD0D659D59C44BF764A72EE6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BVH7PFpzL62f1M49IKjtrLgVTHw.roa
Signing time: Mon 10 Jul 2023 16:36:51 +0000
ROA not before: Mon 10 Jul 2023 16:36:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:a9:b7:7d:dd:0d:65:9d:59:c4:4b:f7:64:a7:2e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 10 16:36:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0551fb3c5a732fad9fd4ce3d20a8edacb8154c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:d2:15:94:b3:40:3d:95:96:93:ba:15:5b:
aa:e7:c3:23:3c:61:e5:bf:59:7d:d3:36:78:f1:09:
bb:9e:0c:8f:56:d0:72:f3:c0:77:c6:05:75:80:22:
1b:6c:29:45:28:00:0e:30:4c:79:8b:e8:ae:a9:a2:
3c:15:21:77:3f:1e:55:7f:09:fa:e1:29:94:e8:57:
87:1e:be:ce:25:66:0b:05:01:33:88:91:a2:57:12:
5e:ba:14:e3:23:cd:e7:0d:d5:b5:02:fc:b1:f3:87:
ba:fe:32:dc:ba:c9:ed:8a:01:26:82:9a:13:ab:23:
2f:55:c5:04:4e:c2:51:5f:ea:48:7c:0a:11:ba:0c:
af:1c:e5:9e:6b:45:fd:ef:f2:5e:d4:e0:e3:66:d5:
0a:ee:5a:62:db:06:40:8d:68:78:24:a0:e7:ca:58:
6c:49:98:99:3c:4a:6e:f1:4f:e2:74:f3:84:1f:f1:
d1:26:b7:94:7a:71:95:67:9d:87:af:b8:8b:b9:ff:
fe:e8:86:21:d6:5f:d2:ff:05:e7:dc:35:b5:07:17:
48:21:43:19:da:6f:1b:c9:fb:3b:e0:64:af:89:3d:
47:4a:e3:5d:49:ef:bc:1f:87:54:ff:94:59:ea:c0:
37:ed:fa:21:5b:c4:48:16:85:0d:b0:80:cb:34:4e:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:FB:3C:5A:73:2F:AD:9F:D4:CE:3D:20:A8:ED:AC:B8:15:4C:7C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BVH7PFpzL62f1M49IKjtrLgVTHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.22.0/24
5.105.40.0/24
5.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
60:53:a9:f8:89:52:d6:37:c1:cf:43:7f:3a:1b:dd:66:a8:a4:
6e:bb:0e:9f:1f:ea:05:39:05:df:09:53:75:5b:f2:e8:55:1e:
95:eb:74:46:21:67:f2:f6:bf:93:d4:1b:02:60:17:f8:b2:95:
d9:53:2d:0e:c1:95:65:d8:a5:2b:18:8c:83:6e:95:e5:be:8b:
aa:5d:ad:c5:22:c3:da:a3:1d:72:64:86:29:00:2d:60:71:98:
df:c3:a3:8c:aa:c9:f2:4f:19:91:ca:0f:9c:80:ec:83:f0:29:
d6:a8:24:28:8c:bb:b1:b3:6a:34:c4:5a:6d:17:11:df:57:1b:
c7:f5:8e:e6:c1:00:67:e0:11:cd:42:87:d8:5a:c0:7f:9d:16:
91:09:b7:4e:6d:50:38:54:90:ee:96:ca:23:1f:8d:0b:5e:24:
ba:5c:63:be:bc:a5:b6:db:1b:4e:ea:b0:ed:eb:7c:9c:af:b0:
ae:5f:79:16:9e:5c:0b:f5:74:1a:3b:47:2c:99:f9:d8:9a:ca:
dc:09:6a:66:51:7e:16:fc:38:9a:ff:de:89:a2:35:4e:0f:57:
2a:b9:7f:41:63:79:2e:0b:98:5a:cf:2e:e1:ae:30:53:14:a6:
24:51:bb:c7:e7:67:62:c2:1f:ef:91:14:8f:8d:15:0a:de:2b:
15:50:f7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 30 20:03:24 2023 by rpki-client on console-ams.rpki-client.org