Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/J-OKkBgLS5LvV1aL8tHFINAgsKY.roa
File: J-OKkBgLS5LvV1aL8tHFINAgsKY.roa (raw, json)
Hash identifier: 0UtklKqs414B3tmlQzVtwxwyPESj4V2RO8TD/BbCLBw=
Subject key identifier: 27:E3:8A:90:18:0B:4B:92:EF:57:56:8B:F2:D1:C5:20:D0:20:B0:A6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01884FAE531DCB1DCE2E4C6197348974C1E8
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/J-OKkBgLS5LvV1aL8tHFINAgsKY.roa
Signing time: Wed 24 May 2023 21:33:24 +0000
ROA not before: Wed 24 May 2023 21:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.37.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4f:ae:53:1d:cb:1d:ce:2e:4c:61:97:34:89:74:c1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 24 21:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e38a90180b4b92ef57568bf2d1c520d020b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:f7:ea:7a:4b:9d:03:7f:0a:d2:3b:98:e6:
6e:be:21:a7:a2:cf:91:83:4f:cb:a2:d8:04:f7:fe:
61:4d:16:2f:fd:3e:70:b1:46:87:6f:a5:c1:b8:7a:
5c:7e:3e:c8:ee:bb:1a:19:be:22:13:a7:03:53:78:
8e:d4:00:01:95:97:47:ee:4d:ce:ab:e5:89:92:87:
49:7e:0c:ea:10:79:90:a7:96:9a:d1:03:58:df:13:
72:e3:6e:08:15:86:82:0e:ab:2f:d4:8f:75:5b:28:
83:44:21:97:88:61:2b:20:f5:67:1e:f3:15:d6:75:
92:91:b2:68:5e:e2:37:34:21:b5:8d:05:d3:1c:e2:
b0:58:fd:ac:3f:10:a3:a1:d0:77:a3:ea:9b:ec:f9:
18:e1:78:b4:3c:21:12:04:4b:87:32:3b:a5:3f:0d:
30:27:15:f5:d3:0b:1f:5a:1e:85:88:9d:db:d8:ef:
db:46:cc:89:87:ef:f4:05:d9:89:74:c5:4e:d2:fa:
a6:1a:69:ad:a8:ab:31:8c:0b:e8:7e:64:0a:cc:f1:
b7:b0:6f:3d:19:58:ad:5b:ef:ab:a9:7d:63:fa:0c:
e2:41:3d:f9:25:49:00:7c:fb:28:23:33:80:87:36:
0f:a4:02:62:76:a8:32:05:be:5f:b0:68:f7:34:c4:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:8A:90:18:0B:4B:92:EF:57:56:8B:F2:D1:C5:20:D0:20:B0:A6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/J-OKkBgLS5LvV1aL8tHFINAgsKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.32.0/24
5.105.37.0/24
5.105.76.0/24
Signature Algorithm: sha256WithRSAEncryption
05:59:02:ee:65:ea:ad:38:37:f9:74:8c:0d:c5:81:ea:14:66:
49:84:40:77:ef:7f:21:2d:c6:8f:15:3b:28:e0:bb:27:54:19:
5d:5c:ba:9e:7e:30:60:49:c1:18:78:b5:c1:e8:cd:58:0e:a9:
84:5c:0b:4a:9f:9c:a8:9d:c2:d4:a2:44:77:a2:79:25:56:c5:
3d:b7:ff:6f:fa:e5:44:0d:82:98:7e:57:dd:e2:03:ef:d6:d1:
82:b6:0d:df:f8:46:5e:f2:5b:36:f7:c0:9b:91:10:0e:f3:9c:
a4:11:d4:a8:08:95:48:9e:9d:30:64:31:e9:46:ef:46:40:f2:
af:76:db:0c:d6:0f:71:2f:46:ef:42:98:87:6e:2e:e2:d9:6b:
63:8f:58:59:a0:c9:f5:4a:a4:07:31:62:a9:28:51:38:3b:a7:
ea:ae:6e:a3:ef:ef:f0:1d:08:c4:39:0f:5e:2c:8b:a5:4a:32:
dd:90:d0:c6:b0:e5:be:09:f2:55:97:1a:fe:e1:6f:bb:cc:40:
db:d8:2d:84:8f:0d:a5:aa:b9:a0:bd:60:ae:1b:bb:53:7b:54:
b9:eb:9f:8a:41:ad:66:65:3d:9e:ab:a8:4a:8c:31:31:ee:05:
cf:ce:83:1c:cc:22:1d:e0:c0:d8:ff:cc:11:c7:83:1e:06:00:
58:8a:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org