Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EjGZhC_-qVon8rK4ZyXhvGkJ-8w.roa
File: EjGZhC_-qVon8rK4ZyXhvGkJ-8w.roa (raw, json)
Hash identifier: gfVbXWjp1OREXyOlnVF8dlFfjsrahnpitKppe4N5KMA=
Subject key identifier: 12:31:99:84:2F:FE:A9:5A:27:F2:B2:B8:67:25:E1:BC:69:09:FB:CC
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A1D041216914EE08F0E4CFA71623B7A3E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EjGZhC_-qVon8rK4ZyXhvGkJ-8w.roa
Signing time: Tue 22 Aug 2023 11:32:00 +0000
ROA not before: Tue 22 Aug 2023 11:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198037
IP address blocks: 5.105.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:04:12:16:91:4e:e0:8f:0e:4c:fa:71:62:3b:7a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 22 11:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=123199842ffea95a27f2b2b86725e1bc6909fbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:88:bb:f7:03:fb:7c:75:7f:63:61:f4:95:
4b:fd:fc:fd:cc:23:f8:ac:84:75:0d:cc:c2:6d:f7:
80:c7:55:8a:d5:7e:f2:82:e0:f3:34:62:95:91:da:
4c:39:b7:a3:b6:82:29:9f:26:12:c7:59:65:58:9d:
a3:5f:6b:1d:1f:4a:01:d0:9b:21:0c:46:46:8a:ea:
c8:2f:f3:c9:f8:d2:0b:30:cb:bf:6e:2c:3b:46:ac:
9b:ed:80:08:35:21:93:db:d0:67:2a:0b:f5:17:5f:
28:75:a8:b0:42:01:6f:91:79:a5:54:bf:de:d3:d9:
89:21:2d:69:f4:fe:73:c4:bf:61:5a:ab:8f:a7:25:
ae:94:36:86:47:2b:0a:f3:c7:7b:85:56:ab:a5:26:
20:a4:f3:89:22:ed:ad:7f:6b:3c:bc:98:b7:ad:24:
0e:ac:8e:b6:03:89:04:88:22:4d:2d:62:e0:32:d4:
c0:c7:aa:8b:8e:a5:1a:aa:05:67:68:6f:98:cb:da:
dd:6a:b5:5e:90:75:00:f9:cc:6b:f7:52:23:e0:eb:
df:99:22:41:ea:aa:78:5d:68:12:2f:6d:2c:85:12:
ee:05:0b:d7:72:af:cf:8d:c5:b9:aa:ff:63:fe:cb:
bd:5c:10:d0:c9:dc:0a:89:41:e7:16:a1:21:75:16:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:99:84:2F:FE:A9:5A:27:F2:B2:B8:67:25:E1:BC:69:09:FB:CC
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EjGZhC_-qVon8rK4ZyXhvGkJ-8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.48.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d8:a8:25:d8:e0:93:4a:2b:e6:13:b8:fc:4a:30:7a:a2:69:
2d:89:77:2b:08:da:df:78:6d:f7:78:79:61:c2:d5:70:57:8c:
a5:cf:ef:03:7c:f8:6b:a8:35:89:dc:e6:77:d6:0c:cc:37:ae:
b3:f4:4c:f6:a2:70:cd:8d:89:42:02:45:80:83:8d:c8:17:23:
4c:f0:d0:71:74:5c:d2:ff:c7:86:87:ab:2b:73:0f:91:a7:d9:
a5:68:8e:28:90:c8:ec:47:5d:3e:47:70:6e:8a:bc:44:e7:db:
d9:24:c1:76:3a:7d:83:ab:6c:1b:cb:a9:e5:3f:1a:a4:a5:9b:
5e:99:16:6a:00:bd:63:d8:97:c2:11:6b:78:08:76:6a:23:14:
c0:98:49:4a:d3:c0:25:68:dd:52:b8:ab:80:c2:44:0f:d9:48:
e2:d4:ea:13:19:80:a6:44:d6:83:6e:5d:15:40:ad:2e:af:d6:
6a:5e:cd:fe:b7:da:82:1b:13:b0:ec:30:aa:ec:f0:44:0f:48:
9f:78:2a:6a:ed:bc:af:ab:28:30:4b:cf:a9:5d:9a:21:b6:2b:
e4:1f:51:2f:b7:ec:73:32:0f:b8:b5:1c:05:18:06:c7:a6:68:
e4:77:bc:a9:7a:c4:d8:ed:b2:b2:9c:64:57:c0:85:df:94:95:
1b:69:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 11:03:39 2023 by rpki-client on console-fra.rpki-client.org