Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Og5yqRO_cqnNdHuN1S_tLVn6Yag.roa
File: Og5yqRO_cqnNdHuN1S_tLVn6Yag.roa (raw, json)
Hash identifier: hylz3bnzrvdFSyoR6w7xRUq2anzvb0NPSU5DBUcMUqc=
Subject key identifier: 3A:0E:72:A9:13:BF:72:A9:CD:74:7B:8D:D5:2F:ED:2D:59:FA:61:A8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188DD38C2E716A62E0CA35C5CE2461164FA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Og5yqRO_cqnNdHuN1S_tLVn6Yag.roa
Signing time: Wed 21 Jun 2023 09:11:04 +0000
ROA not before: Wed 21 Jun 2023 09:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.34.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:38:c2:e7:16:a6:2e:0c:a3:5c:5c:e2:46:11:64:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 21 09:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a0e72a913bf72a9cd747b8dd52fed2d59fa61a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:2d:18:1c:8c:5a:08:7e:4e:ae:c8:71:bf:
16:df:9c:76:46:5d:38:7c:d9:fa:0d:92:00:98:bb:
f9:f3:d3:52:29:d1:9d:3a:5e:d4:e0:26:da:82:30:
59:b1:57:48:e1:1b:2f:54:4a:68:80:7a:9f:c5:2f:
76:38:16:ee:24:9e:7d:2d:a2:47:9a:e0:08:76:c3:
21:07:75:e0:36:9a:40:0b:1b:d3:25:e4:0c:4c:67:
c7:b3:a1:67:01:82:ab:24:e2:53:68:a6:85:cf:98:
67:c5:92:f3:c3:91:f5:1a:6e:4b:17:46:8f:5d:12:
84:a1:b5:74:ae:99:a4:0e:0a:2d:e3:25:d1:7e:d7:
fd:28:84:0d:e7:ba:c0:e3:f6:2b:58:ae:65:68:32:
08:d0:ba:e2:84:5a:cc:29:bd:5a:f2:3c:10:17:c1:
21:32:33:07:cb:84:60:3e:71:89:40:da:d2:02:8e:
5f:62:c2:8d:fb:7c:51:89:0c:82:a1:34:58:de:1c:
4c:97:7f:e8:ed:aa:89:b9:3c:2e:34:aa:dd:e4:4b:
2f:ce:57:fc:96:ab:40:50:2d:66:50:3f:d1:97:ec:
65:c4:f2:d6:6b:0a:15:70:a8:aa:b5:77:37:ee:78:
c5:c0:df:84:34:8d:ee:58:66:a3:c2:d2:9f:7e:76:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:72:A9:13:BF:72:A9:CD:74:7B:8D:D5:2F:ED:2D:59:FA:61:A8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Og5yqRO_cqnNdHuN1S_tLVn6Yag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.34.0/24
5.105.41.0/24
5.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
68:70:f0:1a:e0:30:6a:fd:df:c5:ee:91:04:8a:40:1c:c6:c2:
5b:18:69:97:de:58:d9:65:4d:c9:86:a1:3e:1c:af:74:22:3f:
e2:12:b4:8b:ec:a6:e6:93:4d:d4:9d:18:3d:56:ed:7c:f8:94:
db:16:94:ab:5d:f1:97:c4:4e:9d:8f:08:36:ff:49:a1:eb:4c:
0f:d7:e7:27:17:2c:e0:1e:b0:40:84:0d:a9:f4:3f:95:ba:c3:
d6:55:22:9b:09:4d:f1:2b:91:82:19:e3:2f:38:dd:eb:8a:c5:
86:0e:c0:df:1c:d7:6c:13:2a:7d:a5:c6:52:e6:f5:9f:94:05:
12:90:9e:59:39:c8:7e:29:58:5c:91:5c:16:e6:2a:96:aa:a9:
6f:a7:75:3a:9b:af:bc:e9:4b:97:a6:fd:ec:86:21:21:17:e1:
3e:a8:d3:04:dc:fb:bc:4d:41:d8:8b:76:c5:37:dc:6b:ae:a2:
4b:0a:32:8c:1b:20:b9:26:98:d7:56:08:98:9a:3c:81:aa:2b:
60:cc:b0:97:c4:4a:39:91:15:83:7f:b3:47:55:97:bb:70:d6:
b9:b2:c6:37:8d:d9:33:11:b4:ab:46:4c:42:ba:af:a1:0b:ed:
4b:52:db:7b:96:4c:8d:d9:f0:e2:9c:f1:f9:a0:d5:5c:cf:be:
af:ee:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org