Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OMCBERQ9kn29jb4gBnqXyrG9Www.roa
File: OMCBERQ9kn29jb4gBnqXyrG9Www.roa (raw, json)
Hash identifier: ko5703uyPwJ6oDK6W/0ScSGr0WgaCpgkr3OHvW4TNJg=
Subject key identifier: 38:C0:81:11:14:3D:92:7D:BD:8D:BE:20:06:7A:97:CA:B1:BD:5B:0C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5AD85E0AC95580AF43BC1CFECA7D7
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OMCBERQ9kn29jb4gBnqXyrG9Www.roa
Signing time: Sun 01 Jan 2023 05:54:52 +0000
ROA not before: Sun 01 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 5.105.15.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:ad:85:e0:ac:95:58:0a:f4:3b:c1:cf:ec:a7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38c08111143d927dbd8dbe20067a97cab1bd5b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:7e:01:cd:c2:c8:bb:bb:c7:3f:51:e6:91:
05:b0:f0:50:60:2b:8f:56:20:7d:3e:5c:4f:b6:00:
75:dc:17:4c:27:53:2b:d4:75:e9:ed:4f:09:fa:cb:
e3:ce:ab:ea:a9:cc:61:48:03:f9:4e:52:48:ff:8f:
dc:85:07:96:0e:70:a4:6c:54:c7:71:68:8a:3a:61:
28:00:3f:95:16:cf:e7:9e:38:63:b4:41:7b:f4:84:
59:f4:b3:e4:3f:52:a2:f1:a7:c0:61:ca:61:94:05:
8f:0d:bc:43:c1:a6:65:c2:a2:b0:21:b4:c3:24:24:
cc:c7:47:09:23:cb:55:15:84:96:2a:57:bd:99:1f:
0a:bb:d1:af:fe:84:37:a6:4a:db:b1:2f:e6:31:19:
78:54:da:35:7a:64:48:f7:ae:74:36:fd:8d:e8:c9:
67:67:1d:64:19:6a:34:e0:3f:9e:07:00:ad:84:1f:
83:00:37:92:7e:cb:bf:fe:6b:16:17:5f:1c:61:b0:
dd:2f:d3:5d:f3:1f:55:23:23:ae:73:ac:ab:2e:dc:
d4:bc:78:e6:03:88:e2:8c:e2:29:ec:a5:47:da:79:
4b:4d:b1:e0:55:58:ab:7a:dd:3a:86:dc:f7:7d:58:
2b:5e:78:9f:46:7f:e9:e0:7b:7f:e4:48:93:1d:4c:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:81:11:14:3D:92:7D:BD:8D:BE:20:06:7A:97:CA:B1:BD:5B:0C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OMCBERQ9kn29jb4gBnqXyrG9Www.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.15.0/24
5.105.28.0/24
5.105.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ef:ee:2d:7a:cb:cd:6b:65:70:2d:54:1b:d3:d9:af:05:ac:
78:b9:94:04:b5:87:f0:c6:88:4c:23:ec:81:4c:54:6e:d8:ac:
08:0e:d5:4c:f4:89:22:cd:98:72:ef:9b:2d:34:2c:3d:10:a9:
eb:57:10:8e:9a:09:f5:7b:c3:a3:8b:e7:03:91:0a:51:d1:25:
15:84:27:07:15:68:d3:36:c8:17:a2:54:62:d5:8b:a2:07:ef:
b6:ad:90:6a:b6:7d:8a:b7:93:e0:1e:3a:23:7d:8a:06:ab:ca:
76:27:2e:b1:1d:47:31:ab:2d:98:79:63:a5:16:85:89:07:ff:
4a:c2:8b:29:28:19:09:18:a3:39:32:9b:fa:12:84:10:4e:54:
96:6e:67:05:e0:61:c5:1e:02:52:2e:d1:8a:8f:f8:04:95:59:
62:d4:70:f6:c0:85:5a:da:d7:5a:f2:a7:ef:0e:80:2a:6c:a8:
1a:f3:dd:d6:ba:16:70:65:50:8b:a6:50:c5:96:33:0c:12:4d:
76:2c:b1:2b:cd:1b:f6:46:db:57:54:53:21:86:73:bf:8b:52:
d8:a9:36:64:a7:fe:da:5d:0f:f4:d4:bc:37:c6:00:bd:bc:6e:
06:97:ad:b7:20:40:ff:5c:ac:98:60:0a:42:c0:57:e9:e0:e6:
f6:53:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org