Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/El_hvA-AXJ1QKgnuSNGOrPdpdqM.roa
File: El_hvA-AXJ1QKgnuSNGOrPdpdqM.roa (raw, json)
Hash identifier: X2+mL8QzhRVqjvkYD3eZdrWnAHWMhN/7G5ZOC2W3Nyo=
Subject key identifier: 12:5F:E1:BC:0F:80:5C:9D:50:2A:09:EE:48:D1:8E:AC:F7:69:76:A3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01870E716E629560FCC431ADDAAAE6978941
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/El_hvA-AXJ1QKgnuSNGOrPdpdqM.roa
Signing time: Thu 23 Mar 2023 12:28:47 +0000
ROA not before: Thu 23 Mar 2023 12:28:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:71:6e:62:95:60:fc:c4:31:ad:da:aa:e6:97:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 23 12:28:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=125fe1bc0f805c9d502a09ee48d18eacf76976a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:8f:ca:1c:bd:0a:f4:3a:c8:b4:83:34:86:
76:91:35:06:d1:8b:f3:ad:53:5a:89:72:75:55:ea:
8e:e0:ea:b7:3b:9f:1e:9d:1e:83:2c:0d:be:24:7a:
e5:48:17:bc:9b:54:0b:1b:ea:a2:98:87:2c:1c:53:
60:23:e5:05:f0:46:b6:9f:ee:63:d0:bb:03:7c:da:
23:88:31:8c:80:e2:b9:e9:99:ca:ee:eb:9d:83:c0:
f2:76:be:8a:88:bf:0f:a6:c8:02:63:18:6f:eb:16:
da:6b:f9:8d:06:e2:41:8b:30:ba:1a:2a:04:6a:2a:
cd:27:b4:3e:ef:d5:3a:3e:bd:d8:21:45:71:3a:1e:
64:63:2f:68:58:69:d7:25:04:40:f5:6e:ec:cc:69:
ca:29:b8:ed:e7:17:ee:2e:f9:37:7a:53:2e:02:b9:
a8:17:4d:1a:0a:55:99:0c:5e:81:01:71:0f:45:3a:
35:bf:d6:ef:68:f2:21:ad:09:12:54:7b:3a:04:6f:
15:04:0e:3c:fd:e6:1f:63:67:f9:80:1e:82:d9:db:
21:94:fc:46:5d:22:dc:1f:14:ad:09:dc:e6:48:1f:
39:99:10:1f:f0:28:9d:0d:a8:50:c3:a1:5c:dc:f4:
7d:f6:c9:fb:3a:b1:09:3c:e8:7c:fc:17:be:f8:ea:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:E1:BC:0F:80:5C:9D:50:2A:09:EE:48:D1:8E:AC:F7:69:76:A3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/El_hvA-AXJ1QKgnuSNGOrPdpdqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/24
5.105.63.0/24
5.105.85.0/24
5.105.184.0/24
5.105.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:41:73:12:8b:10:80:fc:3b:0a:e0:a9:ea:dc:b2:d7:ef:01:
05:71:87:5e:7b:d2:84:91:02:8b:36:a7:7a:f3:71:51:7e:d6:
f7:19:f2:a7:c0:14:d3:4a:d9:f8:0e:e3:91:70:93:10:29:c6:
e5:22:42:0f:cc:8a:4f:4e:6e:8e:ee:5f:0d:55:fe:9c:ce:aa:
43:64:68:0a:c6:74:74:1a:0f:5c:48:c8:dd:02:5a:a7:74:99:
5b:cc:5a:e8:12:ef:1b:e9:0e:d8:43:5e:52:5f:96:99:4e:9a:
0c:48:0c:92:33:15:ff:ea:7b:81:9b:8c:26:dd:c9:f8:13:56:
00:e5:cf:0f:05:91:02:e1:b8:a1:d6:45:e6:90:8a:32:a4:01:
7b:88:1e:a1:35:7f:48:e0:99:7a:93:51:5d:32:ea:42:7c:15:
71:c1:eb:18:f8:af:00:76:ad:19:44:86:8d:d4:03:b0:58:ce:
f5:78:6f:e3:cb:91:14:ec:94:a9:06:0d:c3:0c:98:d4:73:10:
17:4b:7e:c6:1e:87:fe:d8:5c:a2:07:6e:99:b1:1e:5d:52:7d:
43:22:99:2d:67:6e:ab:52:a5:76:02:80:e6:9f:94:ed:ce:91:
47:ea:e5:a9:17:eb:27:ca:ff:9b:93:fc:5f:b5:e4:f5:5c:c1:
b1:d4:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org