Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EY-XccRZvo42_Q4RqS88ltmBdtA.roa
File: EY-XccRZvo42_Q4RqS88ltmBdtA.roa (raw, json)
Hash identifier: MvyF9AKvvpXdmmw7i9Rnz+5kScfV1OhBsRVVm6aaayw=
Subject key identifier: 11:8F:97:71:C4:59:BE:8E:36:FD:0E:11:A9:2F:3C:96:D9:81:76:D0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01879E9782341BD6C7A4DC5A7D4EC712E965
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EY-XccRZvo42_Q4RqS88ltmBdtA.roa
Signing time: Thu 20 Apr 2023 12:15:41 +0000
ROA not before: Thu 20 Apr 2023 12:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:97:82:34:1b:d6:c7:a4:dc:5a:7d:4e:c7:12:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 20 12:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=118f9771c459be8e36fd0e11a92f3c96d98176d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:de:bb:78:ff:d3:7a:c8:78:79:46:37:89:
1a:1e:3c:20:83:15:3a:23:1f:7f:b6:0d:42:9f:af:
0c:ed:e0:c5:9b:35:db:72:87:8f:88:34:53:9f:0a:
18:00:39:fa:ea:e6:24:9c:44:1f:fb:7f:e1:a0:9e:
d7:5c:c9:d6:40:4b:5d:36:d9:f3:62:ad:0f:25:af:
4e:1c:9c:a2:8b:af:dd:c6:7f:c6:14:2a:e0:ce:9f:
c6:43:d9:13:7c:9d:54:20:75:96:4f:10:d8:91:6e:
22:54:d9:b8:b6:08:d3:90:83:17:84:8d:e1:d6:78:
79:05:86:97:8c:81:bb:4d:61:9e:8e:4f:ac:0c:25:
8e:68:0c:fc:8c:6f:79:36:19:ff:de:50:c0:0c:b4:
e0:37:cd:63:5e:12:f6:12:e3:bf:79:76:c3:5b:ee:
dc:62:f4:c9:cb:80:8c:b1:86:c2:13:f6:2b:b9:d6:
f3:53:30:df:99:99:8c:a0:3c:ad:7e:9b:d8:31:f2:
36:87:7b:35:e5:c9:d7:3f:0b:de:92:92:cb:a5:ad:
5d:cd:16:59:b3:16:2e:b0:98:bd:a0:9f:ef:58:57:
73:48:35:96:01:b2:0d:b7:3e:3c:8e:ac:86:4d:88:
ae:61:27:44:f1:53:14:75:2b:82:b0:eb:b8:b8:fb:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:97:71:C4:59:BE:8E:36:FD:0E:11:A9:2F:3C:96:D9:81:76:D0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EY-XccRZvo42_Q4RqS88ltmBdtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/24
5.105.63.0/24
5.105.85.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:20:6e:70:15:4d:7f:ae:c3:07:5e:b5:c6:7e:90:93:20:74:
ea:63:c6:8c:23:13:e9:16:58:17:f3:0e:69:ee:11:cb:04:09:
ef:76:fa:eb:af:88:a8:87:fc:bd:be:74:4f:8a:6f:82:84:21:
18:60:8f:d5:74:b3:6d:89:e0:ce:69:93:12:db:ef:08:d0:67:
16:60:78:41:b3:69:fc:8a:c3:af:0e:8a:41:99:54:10:a5:8c:
ad:16:77:a5:a8:da:41:89:aa:08:b5:60:06:95:fb:f9:02:fa:
66:07:b1:13:d2:e2:ea:70:cb:08:8b:d2:37:49:04:78:c8:11:
d0:97:1a:7a:c0:a6:8c:4e:7b:d0:a1:5e:1a:f6:59:bf:40:b8:
ce:04:06:7a:67:e4:58:89:eb:84:84:b5:ca:93:58:26:cb:65:
40:0d:1f:85:67:b4:ba:39:25:96:d7:f3:ed:ec:57:2a:57:d1:
b4:99:a8:44:95:8f:be:0b:c4:f7:f5:70:7a:18:d8:e4:cd:2f:
fc:6d:40:dc:48:b6:32:fe:24:26:5e:eb:93:e0:df:70:7f:a2:
43:a2:0a:0c:c9:b1:b3:75:c8:86:c1:17:42:e6:b1:68:1c:73:
f5:42:e9:dd:5b:61:f0:21:59:a8:a1:3c:0a:4f:99:d8:53:b9:
37:39:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org