Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/I7AFKk_zk5YvzC1U-7n3Mc6-g_Y.roa
File: I7AFKk_zk5YvzC1U-7n3Mc6-g_Y.roa (raw, json)
Hash identifier: F6jH7rkfZgsdB3V/MLvF6cY2aaJERP1b4wIYAifq+i4=
Subject key identifier: 23:B0:05:2A:4F:F3:93:96:2F:CC:2D:54:FB:B9:F7:31:CE:BE:83:F6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189A850FECB4D2ED3EBF03E38415EBE0B94
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/I7AFKk_zk5YvzC1U-7n3Mc6-g_Y.roa
Signing time: Sun 30 Jul 2023 19:40:27 +0000
ROA not before: Sun 30 Jul 2023 19:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:50:fe:cb:4d:2e:d3:eb:f0:3e:38:41:5e:be:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 30 19:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23b0052a4ff393962fcc2d54fbb9f731cebe83f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:3f:cc:f0:17:50:f5:d8:c8:e2:38:32:15:
99:0a:81:5f:40:bc:fe:40:87:77:87:2a:30:01:bf:
c1:05:7f:28:d7:40:6d:de:87:86:a4:77:7f:77:c1:
ba:b7:d3:45:08:c2:69:85:f1:47:2f:c5:8d:fc:9b:
e1:16:e4:53:0f:81:b8:67:d5:32:39:23:5e:43:57:
8b:35:11:f4:0e:1d:6a:95:d0:cc:15:28:eb:e1:3d:
72:87:a3:6a:68:73:9c:c9:c2:29:2b:09:2a:fb:14:
d9:32:5c:af:8e:a7:17:34:92:46:4e:96:1a:be:d9:
a4:d8:c0:03:a4:ec:ec:1e:43:09:60:bd:ba:e3:c8:
b2:f4:20:1f:c5:50:60:78:ec:13:3e:b4:28:79:ce:
8a:ea:0a:32:c6:11:a5:c4:26:8a:1b:67:96:a0:aa:
87:53:58:0b:61:d9:fa:45:37:c3:4c:1f:cf:15:9b:
35:54:71:ff:36:74:3c:3d:5f:81:dc:68:6e:73:bd:
3e:9d:f8:f0:43:d2:1b:7c:8a:e4:1d:d4:0f:c6:81:
b7:bd:89:e2:ed:81:93:5f:fc:c1:93:89:95:23:17:
d0:a2:00:ee:fb:31:83:bb:18:5b:81:86:ea:e3:ed:
3b:1a:90:89:c9:5e:8e:66:71:93:70:08:50:2a:7d:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B0:05:2A:4F:F3:93:96:2F:CC:2D:54:FB:B9:F7:31:CE:BE:83:F6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/I7AFKk_zk5YvzC1U-7n3Mc6-g_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.22.0/24
5.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8d:30:e7:b1:9a:9e:de:c3:fd:53:ee:8f:58:55:ba:3c:be:
13:03:9a:76:de:1e:2d:f4:91:1e:22:9e:78:d0:ca:cd:86:77:
f1:3f:8d:01:a8:85:ef:c9:c3:d1:76:3c:4c:d5:82:91:1a:ec:
50:18:11:57:fe:6a:7c:60:2a:5c:89:db:6e:88:4f:dd:2f:0e:
12:ee:6a:01:74:06:18:86:d2:61:d7:12:fb:b3:de:a3:07:26:
4c:6e:b4:f9:33:ef:8e:fd:e7:e8:8e:43:82:22:15:c6:fe:de:
e8:bf:e2:df:8a:2c:4f:af:29:1e:1f:d3:18:1b:2f:da:33:bc:
58:5b:af:02:22:50:6a:e7:ff:e7:78:db:ee:ae:e6:1c:88:5f:
9e:f1:52:b4:e1:73:62:3f:27:c9:eb:88:51:6d:ac:46:96:be:
72:b8:23:42:86:8a:93:8a:7f:c2:60:7a:29:e3:62:3d:5a:3c:
20:1e:0e:f9:56:f8:dd:70:0e:ef:bf:35:55:dc:90:b2:c4:81:
47:0e:51:6a:5c:a1:43:bb:f9:c5:7f:d3:e8:9e:88:fb:15:ed:
29:01:a8:bb:5e:54:2d:ad:91:d2:34:65:36:1b:65:cd:81:88:
02:1e:a3:5c:ea:88:c0:a5:98:f2:7f:a6:b0:22:24:e5:17:32:
39:31:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 10:13:18 2023 by rpki-client on console-fra.rpki-client.org