Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gz78GERARPUrxZgeKE3j8LzmK44.roa
File: Gz78GERARPUrxZgeKE3j8LzmK44.roa (raw, json)
Hash identifier: 1KuH+xrMRywIlI7uLy/WuKQ63p6onItn2wty0ZchjIM=
Subject key identifier: 1B:3E:FC:18:44:40:44:F5:2B:C5:98:1E:28:4D:E3:F0:BC:E6:2B:8E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188D92B7784571CAF1EC3C767275387D262
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gz78GERARPUrxZgeKE3j8LzmK44.roa
Signing time: Tue 20 Jun 2023 14:18:04 +0000
ROA not before: Tue 20 Jun 2023 14:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.41.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:2b:77:84:57:1c:af:1e:c3:c7:67:27:53:87:d2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 20 14:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b3efc18444044f52bc5981e284de3f0bce62b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:c5:c8:63:18:8c:8f:37:ad:4b:29:f0:74:
82:81:5b:a8:d5:28:26:5b:f5:f7:c9:8d:08:31:78:
0b:05:9f:4e:9d:93:c8:8d:41:72:66:f6:7c:f1:30:
db:d0:a6:49:bf:59:7e:ca:8c:41:be:ba:4c:07:ea:
8b:82:96:fb:ec:57:eb:54:33:16:96:ef:c6:eb:2f:
8b:32:52:ed:35:02:99:59:1c:9e:9a:89:a1:0d:1b:
0d:6b:d2:93:00:41:ac:02:8f:e9:34:7a:63:c6:bf:
99:b9:61:95:89:41:da:8c:31:f4:b1:d5:b4:bd:a9:
9e:8b:ea:6d:e0:f5:26:a7:78:66:ec:f5:b3:90:e3:
b1:41:6e:7c:3b:7e:90:43:86:5f:ec:a8:b4:5f:e9:
30:88:1f:0b:22:67:c3:f7:e5:1a:f9:ed:a5:b7:a6:
8f:72:ec:13:e3:0e:e8:b4:36:52:61:5f:b1:03:eb:
7c:f5:3e:0e:5b:6b:18:0b:43:a3:ba:95:03:59:f4:
3b:4e:7d:90:88:25:bc:2a:92:96:6b:23:59:f1:d1:
49:91:fd:4b:5b:21:76:a3:18:06:0c:0b:72:40:bd:
3d:59:f4:67:09:df:b8:9a:f2:8f:5d:51:07:4a:db:
f2:d8:25:00:1a:52:89:55:13:d9:ad:b9:b3:71:52:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:FC:18:44:40:44:F5:2B:C5:98:1E:28:4D:E3:F0:BC:E6:2B:8E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gz78GERARPUrxZgeKE3j8LzmK44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.41.0/24
5.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f0:11:2e:60:c7:d9:43:81:e3:be:5a:73:10:aa:95:b5:bf:
67:a3:ef:18:80:f4:5d:52:04:fa:16:16:60:e8:c5:dc:7e:f6:
3c:74:2f:02:dd:8f:a6:42:b3:b4:67:fa:da:f8:e9:e0:e5:2a:
14:d6:bc:df:2e:a5:49:bc:35:35:da:9c:f4:ec:70:b7:ad:51:
09:ac:fc:d9:9e:db:61:6c:6b:f1:64:48:f3:df:40:ea:6c:3e:
bf:0c:ce:61:25:7f:e7:ed:79:b5:08:07:69:0c:7b:c8:ef:2f:
e5:68:62:e0:b4:c2:1c:f5:f7:9b:c8:7a:68:63:f8:fd:5e:43:
88:5d:96:a5:31:7f:9b:c0:7e:a5:b9:a3:69:be:c8:b7:cf:fe:
a9:58:38:40:f9:45:22:79:22:5e:cf:43:ae:8c:46:d9:bb:20:
77:c1:9d:e9:c5:1b:43:1b:dd:ee:6a:51:62:71:a3:a1:ea:88:
cf:38:c9:c7:37:5a:10:f3:d8:3b:57:6e:4a:59:38:bb:52:03:
82:7d:f0:88:eb:a5:14:b8:cc:67:29:ef:c7:ec:2c:04:8e:fe:
b6:5b:a3:1e:b3:2f:6e:0e:6b:95:88:de:c4:85:69:e0:7b:ef:
60:f1:28:a2:f8:48:73:22:a5:d1:cd:6d:f9:52:e6:7f:13:e4:
ae:b8:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org