Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/F7V9WWLtdC9XU83J24ANIOcee68.roa
File: F7V9WWLtdC9XU83J24ANIOcee68.roa (raw, json)
Hash identifier: WJo+KbRX7GBNvqtfsVXMAJddP+RlYGuC+jVDf//4530=
Subject key identifier: 17:B5:7D:59:62:ED:74:2F:57:53:CD:C9:DB:80:0D:20:E7:1E:7B:AF
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018ADC400E044855A4482DA93B4C0B87A614
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/F7V9WWLtdC9XU83J24ANIOcee68.roa
Signing time: Thu 28 Sep 2023 14:44:59 +0000
ROA not before: Thu 28 Sep 2023 14:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21769
IP address blocks: 5.105.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:40:0e:04:48:55:a4:48:2d:a9:3b:4c:0b:87:a6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 28 14:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17b57d5962ed742f5753cdc9db800d20e71e7baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:eb:ff:95:f5:40:c2:01:1c:a2:ac:8e:5c:
cc:21:22:9c:67:8f:a8:b9:f0:d7:70:4e:ea:6e:4e:
b5:36:f3:3d:86:75:56:2a:3a:3a:69:c8:62:49:64:
29:dc:69:38:c5:0b:d6:15:94:b7:70:9b:04:08:ee:
94:ab:1c:d6:3d:06:dc:5c:60:24:5f:c8:8f:17:67:
14:b4:b3:32:59:a1:c1:cf:15:df:8f:33:25:a0:2e:
bf:4c:4a:16:c1:95:0c:4f:05:14:52:0a:49:d6:70:
5f:cf:21:00:8c:df:a8:68:1c:b6:0f:59:c8:0b:43:
07:48:8e:2e:24:21:97:14:45:22:0f:33:1d:eb:a9:
91:7d:d5:08:6b:82:96:73:51:8d:64:7f:e2:21:f3:
6d:3d:0e:ec:f3:1e:67:27:09:cd:94:12:e4:16:30:
7d:57:1c:19:39:d3:60:e7:f8:cc:d8:b1:b5:47:bd:
de:ef:18:cb:62:c7:e7:ec:d2:97:2d:5a:3d:7e:5a:
47:79:58:68:50:a7:f1:90:e4:44:b4:1f:10:98:91:
ad:0f:77:fa:22:18:ae:37:1a:d3:05:be:f3:8b:0f:
17:69:de:fa:7f:26:99:84:4f:a1:2e:50:c0:d3:d8:
63:72:ad:d5:bc:34:42:2c:47:fd:cf:53:20:4c:06:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:7D:59:62:ED:74:2F:57:53:CD:C9:DB:80:0D:20:E7:1E:7B:AF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/F7V9WWLtdC9XU83J24ANIOcee68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f0:42:60:57:87:7c:c3:bf:a1:6d:04:53:d2:f8:3c:25:65:
a4:b9:f9:66:5c:04:63:aa:d9:4c:af:94:31:79:08:df:13:03:
33:c2:55:97:3d:ce:e4:b7:f3:bc:6b:73:50:88:14:ae:19:0b:
e4:34:98:00:6a:33:33:50:6c:a3:8d:41:97:fb:13:2a:29:0b:
cc:4e:51:72:b5:c0:27:c8:b5:db:7a:99:0c:4f:db:37:d8:0d:
2c:5d:8a:e7:05:82:26:cd:50:1d:7e:4e:51:2f:4b:8d:51:78:
96:63:1e:21:78:72:9c:51:61:f9:d3:1a:73:99:86:77:01:57:
b9:03:84:ba:bd:08:8a:f6:cf:3c:dd:d1:ee:a4:a4:0e:8d:3c:
a7:15:fd:9a:3e:7f:43:34:38:d1:3c:bf:7b:90:74:9b:eb:82:
08:1c:ba:43:9f:7c:d7:97:1d:7d:c0:3b:8a:87:81:9f:c8:8c:
49:ca:c9:0e:76:26:29:bf:f0:f2:38:56:6b:ca:17:d4:10:d8:
7c:cf:b2:fb:11:1d:0c:5e:ab:d6:55:2b:d3:72:67:51:ca:28:
90:5d:01:63:3c:b4:11:91:7c:39:43:6b:55:c0:68:8b:a2:41:
da:a9:0e:29:f6:48:3c:cd:50:c3:d6:9c:38:a7:b8:e2:72:01:
6c:bf:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 18:33:32 2023 by rpki-client on console-fra.rpki-client.org