Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/K5C3DXFK_KYFXAQNg7Br76vPLPg.roa
File: K5C3DXFK_KYFXAQNg7Br76vPLPg.roa (raw, json)
Hash identifier: CFAmoyqFfu6lVNinaIv8uYrQ9mnDlvYHRPT3DEKj5sY=
Subject key identifier: 2B:90:B7:0D:71:4A:FC:A6:05:5C:04:0D:83:B0:6B:EF:AB:CF:2C:F8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185CC1C2FFA15F3A581E57FA6272AAB1D7C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/K5C3DXFK_KYFXAQNg7Br76vPLPg.roa
Signing time: Thu 19 Jan 2023 22:17:57 +0000
ROA not before: Thu 19 Jan 2023 22:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 5.105.120.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cc:1c:2f:fa:15:f3:a5:81:e5:7f:a6:27:2a:ab:1d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 19 22:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b90b70d714afca6055c040d83b06befabcf2cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:8e:ce:61:40:ec:e2:d6:89:ff:cf:05:7c:
d1:ba:a6:a0:f9:57:ab:70:b6:66:ca:36:9a:74:eb:
b2:e0:e0:ab:4d:d7:57:76:a5:15:48:75:ab:7c:76:
77:3b:77:f2:81:90:c1:9e:20:aa:3e:63:b1:17:2a:
5d:19:e1:16:6a:3d:96:7e:f8:11:e9:c9:79:9a:3a:
36:f8:a8:e8:dc:63:91:19:d2:ef:95:17:36:9f:6f:
92:4b:9d:cd:0f:d0:5f:ed:91:33:d2:f3:6f:ec:51:
3e:f4:71:87:ce:37:87:f7:5e:48:24:10:04:16:bc:
04:4a:fb:9c:b1:f4:da:cc:2e:4a:4b:fe:0d:db:2c:
48:de:b6:7d:c9:cd:5c:a4:e1:be:cd:c4:0b:07:83:
d8:8f:57:72:50:a7:dd:3c:58:05:c3:7c:1a:32:3d:
b9:e7:07:bf:7c:2d:f1:b5:a3:88:29:82:e6:7e:76:
0b:85:f3:f5:f2:a3:e5:11:e4:16:0b:42:1a:fd:75:
cc:88:5d:20:e1:03:24:86:2f:eb:1f:89:00:9b:d5:
4e:5e:53:4e:af:cd:d6:ce:59:15:52:57:a0:7f:a6:
83:14:ea:06:ed:5d:53:e8:07:e4:d8:0f:a1:8c:9b:
93:f6:b3:83:b8:96:08:35:1d:0e:47:8e:8d:80:a5:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:B7:0D:71:4A:FC:A6:05:5C:04:0D:83:B0:6B:EF:AB:CF:2C:F8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/K5C3DXFK_KYFXAQNg7Br76vPLPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.75.0/24
5.105.97.0/24
5.105.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:7e:46:12:29:12:a9:de:3e:5d:90:1f:f9:d6:be:44:de:be:
dc:a5:65:1b:69:a5:a1:67:b7:62:c7:0d:bf:8c:92:fc:70:25:
dd:ef:d5:c5:a0:ce:8e:19:e0:58:e9:a8:4c:74:75:4e:08:5a:
4f:2d:f0:2e:9b:94:70:c9:f6:12:48:63:5f:8d:13:7e:29:20:
2f:44:4f:e1:65:c0:0f:84:00:40:99:a9:65:62:4a:8e:27:c3:
fb:8b:e6:39:57:a7:51:c8:71:d4:f2:ca:34:6e:13:f1:51:4a:
60:e4:b0:e0:9e:8c:da:c6:05:be:79:df:04:68:d6:c7:aa:3c:
4c:9d:57:e3:70:03:ca:13:7f:01:98:d6:0c:41:94:5a:b1:af:
50:50:ba:29:02:40:3e:e3:c6:f5:59:fe:81:08:86:be:1c:51:
f5:9b:05:42:c9:5d:5a:7e:b1:50:ab:b9:2f:40:69:02:4b:d1:
5d:d3:51:96:33:df:8c:58:83:0c:d0:ad:e9:dc:09:6e:a6:17:
06:7a:64:10:85:d1:13:22:67:41:d1:69:2c:89:61:a9:2a:1a:
1d:66:fb:ab:2b:d7:6d:29:eb:2d:30:90:20:44:40:78:47:f4:
92:c7:3e:ab:2c:8f:9d:93:46:13:87:76:3b:98:8a:fc:21:5c:
ad:3d:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org