Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OjFiYo2FygUNrli_knG-7NSGDS0.roa
File: OjFiYo2FygUNrli_knG-7NSGDS0.roa (raw, json)
Hash identifier: 8OgzfGbIlQ+YXjCGNIao6TMkMQ/4EJfOpmBv85tjoQk=
Subject key identifier: 3A:31:62:62:8D:85:CA:05:0D:AE:58:BF:92:71:BE:EC:D4:86:0D:2D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018682B2B9D867F587ECBB021617628C5D5D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OjFiYo2FygUNrli_knG-7NSGDS0.roa
Signing time: Fri 24 Feb 2023 09:13:16 +0000
ROA not before: Fri 24 Feb 2023 09:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 5.105.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:b2:b9:d8:67:f5:87:ec:bb:02:16:17:62:8c:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 09:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a3162628d85ca050dae58bf9271beecd4860d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:3e:36:30:cf:80:44:2b:1e:4a:bc:d5:ed:
da:49:17:12:25:27:e7:06:7d:4f:18:83:1d:f7:29:
e1:78:7f:45:a7:6f:74:30:90:2b:b3:3e:55:87:00:
d1:1f:df:01:a5:20:92:f5:55:04:24:f6:fa:43:8e:
d4:64:00:44:b8:1f:54:ac:09:21:c0:1f:53:41:96:
08:fd:94:3d:db:c1:39:05:43:7a:e2:49:53:22:d9:
a5:d9:ef:55:19:45:84:ac:79:f5:8c:27:be:ee:19:
3e:dc:ca:e5:00:ad:08:20:38:65:4f:91:8b:b3:eb:
86:3e:3e:fb:29:18:59:dc:47:63:1e:39:fc:53:55:
23:46:c2:ff:96:8d:10:c2:87:71:23:94:f7:46:34:
68:e2:9f:77:ac:c4:d7:0e:d5:6f:1a:a3:ab:71:de:
56:26:36:d2:56:be:a3:3f:ca:74:89:67:eb:d8:8c:
ae:cd:72:f4:f5:3c:24:cd:4c:a5:d1:99:65:aa:b4:
64:cf:f9:7a:d6:25:42:ad:a5:96:14:85:d8:13:02:
10:d9:ef:17:46:bf:0f:12:c4:6f:b7:24:38:97:18:
4e:cd:ec:fe:7f:bc:18:11:97:fe:79:06:e6:1a:04:
9b:39:ec:51:4c:d0:84:e2:86:21:b6:2f:dc:f7:21:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:31:62:62:8D:85:CA:05:0D:AE:58:BF:92:71:BE:EC:D4:86:0D:2D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OjFiYo2FygUNrli_knG-7NSGDS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:35:51:d8:3c:ac:24:1c:6b:9a:d8:e1:10:67:a0:57:4e:7f:
58:9a:1b:ce:9f:a8:f3:19:d6:1e:ce:0a:7e:01:83:15:bb:24:
cc:83:ea:33:61:df:8f:07:c2:a6:0b:0d:79:3e:f1:56:42:ba:
50:79:4a:50:d3:c0:60:75:d3:fb:fc:7a:37:48:bb:67:d6:4f:
a1:4c:b6:fd:18:0b:98:b1:e6:53:1a:6f:3a:62:6f:fa:32:73:
fc:17:27:e4:14:6c:6a:89:dc:1c:9b:33:bc:52:60:b1:6d:e7:
f6:d9:d1:9b:87:03:9b:55:11:3a:72:c0:04:f9:82:6e:64:fd:
c1:c4:2d:05:39:20:cf:00:5e:e2:e9:4e:67:4e:06:59:96:0d:
2b:a0:a9:de:8d:58:0d:dd:a1:74:c6:7e:b7:90:96:4b:4f:0c:
e7:b0:0d:00:1e:1a:b8:a7:0c:0e:db:c0:7b:94:33:1a:48:84:
68:02:cd:64:3d:92:5e:a3:e7:cc:d2:d4:65:34:33:9e:12:79:
01:08:19:f8:03:7b:77:40:a6:44:a4:db:3e:38:0e:6e:93:ab:
72:88:ab:73:a3:df:70:83:fc:90:19:4a:74:55:7e:0d:56:db:
f6:1c:88:70:80:08:b4:21:19:1c:d9:87:3e:f8:e5:8d:f7:76:
e5:ca:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org