Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/E9co1hz_7iRfsMd8GLdPw7qOARc.roa
File: E9co1hz_7iRfsMd8GLdPw7qOARc.roa (raw, json)
Hash identifier: abH5xbsu7XyKlWXHtSUkalScsov5zl5+/Gs3KTJbvOQ=
Subject key identifier: 13:D7:28:D6:1C:FF:EE:24:5F:B0:C7:7C:18:B7:4F:C3:BA:8E:01:17
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B1158863401DE6CF0AA4536B1804
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/E9co1hz_7iRfsMd8GLdPw7qOARc.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 5.105.120.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b1:15:88:63:40:1d:e6:cf:0a:a4:53:6b:18:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13d728d61cffee245fb0c77c18b74fc3ba8e0117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:84:f1:d8:c7:f2:ed:c4:e9:1d:69:aa:0e:
28:00:da:0b:50:15:88:68:21:f6:67:6c:52:32:c3:
b7:b5:c3:0b:d0:04:bb:ff:e9:be:1b:0b:43:e5:17:
c9:c8:a5:9c:e5:1d:31:b1:50:7a:e2:c6:f1:9b:12:
8c:46:3e:00:48:1e:17:8f:11:80:bf:bc:4a:21:c3:
60:d3:90:f7:fb:15:1a:8e:5f:c3:bc:7a:e4:5b:d3:
d5:8b:1f:b4:8a:e0:5f:8e:7b:3b:15:78:2f:68:ef:
a4:fb:3f:98:e1:de:9b:8d:1b:66:98:15:2f:02:6d:
13:5b:85:98:27:fb:03:76:ff:5f:d0:b0:14:b4:0e:
06:7e:2f:7a:65:58:36:5a:99:f9:2b:c8:ac:6a:12:
c7:a9:d4:ec:9e:01:22:72:ac:b2:ee:77:76:c3:2f:
76:5d:bb:bd:1d:aa:ba:4f:62:50:23:ff:0d:96:72:
85:0e:36:0d:d9:d2:37:6c:38:c1:94:5d:2b:ef:f6:
17:5c:50:30:73:c3:d5:5c:fa:eb:25:f8:6a:01:cb:
c5:54:23:63:1d:1a:a9:a5:73:28:d1:18:bf:f3:16:
4a:9d:c7:11:78:12:06:09:9a:c8:29:94:ab:65:4e:
32:6d:b7:ff:96:ff:21:07:c6:73:60:9b:6a:30:e1:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:28:D6:1C:FF:EE:24:5F:B0:C7:7C:18:B7:4F:C3:BA:8E:01:17
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/E9co1hz_7iRfsMd8GLdPw7qOARc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.65.0/24
5.105.75.0/24
5.105.97.0/24
5.105.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f6:db:aa:dc:a9:43:cb:7e:e2:aa:10:64:41:90:a4:27:d1:
66:37:d1:35:74:3a:dc:a7:84:18:78:d5:b9:98:37:d6:52:df:
65:32:0b:7d:19:ca:6e:0b:5e:e3:f8:d3:c8:81:28:62:eb:a2:
4c:77:62:d8:e1:bb:15:95:28:45:35:7f:55:77:1c:43:1a:24:
0e:fa:e0:6d:c8:32:98:f2:e3:ac:1f:bc:22:01:fd:29:f0:99:
5b:8a:8c:c9:42:68:25:a9:b7:01:f0:54:37:68:b3:1c:85:86:
b8:a9:ae:e3:ca:b5:e9:40:db:c5:b4:71:0d:64:d3:47:28:ea:
b7:66:d8:75:9f:67:fb:24:7f:41:a1:76:de:26:c4:ca:2c:a9:
5a:bb:bc:0b:25:c9:da:c4:58:ec:2b:89:00:dc:46:c5:5b:13:
c5:dd:9d:9d:25:88:a8:8d:77:40:34:97:2d:cc:84:67:73:e5:
57:6c:91:04:5f:00:06:8b:fa:e6:2e:1d:5e:a9:68:e9:d5:b8:
d1:eb:04:64:e3:05:11:5f:f4:67:0b:3f:75:5e:91:4a:66:26:
1d:41:86:e0:3e:4c:8b:34:02:40:cd:02:30:d8:48:20:12:44:
3f:27:f4:e8:de:ec:4b:03:f9:8f:97:49:60:aa:b3:82:5d:e0:
3e:1f:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org