Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OyA5f-YtBleLTJVz3IONl-XUQmc.roa
File: OyA5f-YtBleLTJVz3IONl-XUQmc.roa (raw, json)
Hash identifier: hHRookjpf5AK1Z6QrlgtDJ+QVzmBE68z6FH9VzKgja8=
Subject key identifier: 3B:20:39:7F:E6:2D:06:57:8B:4C:95:73:DC:83:8D:97:E5:D4:42:67
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186FEF5CFBA18F74B0A4A1F4F1491823510
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OyA5f-YtBleLTJVz3IONl-XUQmc.roa
Signing time: Mon 20 Mar 2023 12:19:27 +0000
ROA not before: Mon 20 Mar 2023 12:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:f5:cf:ba:18:f7:4b:0a:4a:1f:4f:14:91:82:35:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 20 12:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b20397fe62d06578b4c9573dc838d97e5d44267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:6b:ce:e6:35:88:79:d8:68:4a:ea:00:95:
a9:35:a4:85:bc:b2:88:39:fc:07:78:b6:3f:b2:78:
75:7b:50:f5:04:0b:ff:2e:0a:51:42:f5:9e:ac:fa:
fe:c8:e5:e4:58:f9:74:19:c2:74:ed:0d:23:79:c6:
fc:2e:c2:d7:16:ea:2a:76:c6:36:8c:e7:33:e8:97:
ab:b9:f7:60:3a:3d:65:cd:da:2e:26:91:49:27:83:
5d:ed:13:37:10:8c:97:4b:a9:5a:c9:49:cc:e4:e1:
f7:bc:e2:6a:96:ff:16:8c:65:79:be:66:77:ae:6d:
71:b0:57:a4:7a:d6:f8:d3:5b:35:89:5c:4f:29:a4:
9d:49:d4:d3:78:2d:ae:67:7c:d4:ca:c9:f8:fe:c3:
a2:fa:b6:eb:ae:fa:9c:47:8f:f7:df:11:79:6c:f6:
e7:fb:55:c4:3e:83:72:4c:67:66:2f:18:49:c3:d0:
4e:7c:b8:41:37:42:3a:7b:2c:c5:db:1f:bb:74:e8:
93:ad:02:61:33:56:52:29:d9:7d:f5:8f:21:a5:d1:
c9:bb:04:f5:e2:59:a5:9e:50:22:b5:f7:d9:8e:04:
cf:15:fc:21:76:21:b7:d2:74:de:65:65:9c:36:ea:
58:ca:0c:08:46:38:a7:52:91:3f:c6:8b:a1:c7:16:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:20:39:7F:E6:2D:06:57:8B:4C:95:73:DC:83:8D:97:E5:D4:42:67
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OyA5f-YtBleLTJVz3IONl-XUQmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/23
5.105.63.0/24
5.105.96.0/24
5.105.184.0/24
5.105.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d9:19:91:80:e8:18:d4:c3:ce:ba:8e:9f:cf:b3:0a:07:86:
c3:d8:b8:4c:82:d3:36:e4:05:3b:e9:f5:b8:0f:c9:1f:aa:59:
fc:6a:55:72:a3:9f:6d:a6:c5:18:c0:74:8b:9a:e9:e7:13:38:
05:ec:f3:fd:1b:33:ac:79:63:30:cc:64:43:be:61:2e:0d:cb:
94:67:bd:ec:2b:4e:16:72:73:11:1f:28:0c:b1:5a:72:06:fe:
59:4a:7d:c6:62:ad:ff:ba:8a:aa:95:97:af:d6:75:b1:cf:bd:
94:f8:87:86:f1:60:75:50:b0:39:ae:f2:57:ab:90:f0:65:9c:
5d:cb:e9:05:f7:e2:b6:67:e8:d9:b6:04:23:54:64:2d:8e:bd:
23:64:cc:d8:7f:3a:b5:83:fd:e6:5f:dc:4c:63:e0:ae:c6:2e:
d1:3e:85:5c:fd:0a:2c:85:96:da:0c:84:26:6b:e1:b0:40:c1:
8a:78:1e:6a:e1:c6:24:a2:8a:c9:7e:9d:33:e3:d5:f4:3a:8b:
e4:fa:06:99:9e:0c:96:41:da:8b:e3:48:be:62:9d:2b:85:d7:
58:fb:3c:d1:02:1b:ef:91:7a:97:73:37:e2:47:01:a0:79:10:
b5:f1:f8:56:c8:5d:b8:e2:ec:07:ff:e8:c0:ca:45:ca:49:f2:
fc:00:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org