Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gz74IOm2g2I03SL3_Eo4jPqa4v4.roa
File: Gz74IOm2g2I03SL3_Eo4jPqa4v4.roa (raw, json)
Hash identifier: T+usPP6iXwq918vPEAuxfmYkLAlLoPUVwTClxeJ5R7o=
Subject key identifier: 1B:3E:F8:20:E9:B6:83:62:34:DD:22:F7:FC:4A:38:8C:FA:9A:E2:FE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01892010A11FACC255D170C694E08162B188
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gz74IOm2g2I03SL3_Eo4jPqa4v4.roa
Signing time: Tue 04 Jul 2023 08:41:47 +0000
ROA not before: Tue 04 Jul 2023 08:41:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 5.105.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:10:a1:1f:ac:c2:55:d1:70:c6:94:e0:81:62:b1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 4 08:41:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b3ef820e9b6836234dd22f7fc4a388cfa9ae2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a4:6d:a6:f4:ad:61:e4:ad:28:69:f0:11:c2:
67:c7:17:d6:b3:6b:8a:05:d5:c1:b5:19:28:4e:10:
44:68:68:5a:0f:4e:f7:5d:0e:85:98:62:f8:6c:2f:
92:95:b9:4f:e5:6c:db:e9:77:7b:38:41:4c:8d:53:
02:84:ca:c1:ba:fd:41:24:c3:f0:7b:72:08:ee:f0:
4d:ad:0b:5e:e7:8c:22:2e:7c:f9:16:a9:21:6d:c7:
bd:68:db:ab:55:6a:58:e7:ef:06:25:e4:19:58:6e:
5b:aa:33:2a:95:59:2b:ee:95:2e:6f:3c:0e:95:2b:
c5:92:e3:98:6a:76:20:4b:01:57:c0:cb:7e:24:2e:
f6:d6:fc:b7:ad:05:f8:7d:bd:b1:38:67:ed:7d:89:
31:eb:5b:bb:e1:62:ca:44:76:c4:e4:ea:21:f5:e5:
5b:03:14:b0:ec:83:f1:08:2c:06:e4:e4:30:6d:35:
38:88:88:b5:d6:59:0b:4f:f4:a3:8c:7c:7d:78:65:
e7:5e:6f:6e:e9:d7:37:8d:25:96:66:02:2a:09:94:
e6:d0:d7:b1:6b:14:44:73:8e:dc:c3:41:13:dd:b2:
b3:0e:9f:8b:72:a8:0f:62:d3:39:d2:a9:0f:73:5f:
42:85:4a:98:b9:8c:7a:b3:84:b0:6b:b8:00:f0:b2:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:F8:20:E9:B6:83:62:34:DD:22:F7:FC:4A:38:8C:FA:9A:E2:FE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gz74IOm2g2I03SL3_Eo4jPqa4v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:86:8d:be:59:0f:c0:da:26:45:12:bf:44:bd:0f:17:22:8a:
0b:ec:29:39:07:a5:d7:9b:ba:d0:61:34:c2:73:e9:54:ae:17:
d0:cd:59:df:65:7f:c2:37:c5:ba:43:e9:50:f2:41:fc:69:b8:
37:3f:d2:d2:37:94:b3:bd:ef:55:f2:a5:f3:be:1f:66:0f:0e:
e4:5f:67:21:aa:3d:2f:94:67:6d:fe:57:d0:69:b3:80:52:fe:
04:b5:84:15:a2:e7:4c:2c:c4:4b:48:da:38:e6:6a:02:76:b5:
e8:0b:fe:1e:04:d5:12:f0:c6:c7:9d:46:44:1b:d2:55:c1:bb:
18:74:79:54:6e:af:d6:01:dd:54:8f:23:44:d1:a8:66:3d:4e:
a8:88:ac:cd:b2:79:a4:40:8c:f8:31:a5:02:63:60:e7:a2:f2:
de:c2:02:b9:8a:07:d4:af:9a:ec:02:c8:ee:c3:de:06:59:6b:
74:47:17:ae:4b:8d:3f:d8:d9:e1:7d:dd:9c:5c:cf:66:6c:8a:
89:25:23:62:50:07:f3:1b:d9:f1:9d:ab:0d:39:d8:5a:97:a0:
75:62:b1:c8:4b:de:6f:56:bc:ea:38:cb:9f:81:f1:83:b7:42:
09:50:4f:a2:ec:16:81:57:8f:2d:f0:fb:93:b0:0a:77:f2:75:
8c:56:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 09:54:09 2023 by rpki-client on console-fra.rpki-client.org