Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RCwBWmp-bwPpGPgp_ZaHukfD9cY.roa
File: RCwBWmp-bwPpGPgp_ZaHukfD9cY.roa (raw, json)
Hash identifier: zVqZV+x2L2My4RKexsPDOEhq4EpRQLDHOiMsMvn60m4=
Subject key identifier: 44:2C:01:5A:6A:7E:6F:03:E9:18:F8:29:FD:96:87:BA:47:C3:F5:C6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B3841DFEFC301F4724F9B2B7C3D776D4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RCwBWmp-bwPpGPgp_ZaHukfD9cY.roa
Signing time: Tue 13 Jun 2023 06:49:20 +0000
ROA not before: Tue 13 Jun 2023 06:49:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.186.0/23 maxlen: 24
5.105.198.0/23 maxlen: 24
5.105.202.0/23 maxlen: 24
5.105.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:84:1d:fe:fc:30:1f:47:24:f9:b2:b7:c3:d7:76:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 13 06:49:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=442c015a6a7e6f03e918f829fd9687ba47c3f5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:74:2d:8c:93:ea:6d:80:ca:80:93:03:fa:
d7:cf:98:5e:57:6a:31:ea:69:23:5c:49:65:99:7c:
6e:3a:6e:8a:2a:86:fd:b5:ca:30:37:c5:19:a4:04:
49:c4:95:73:95:9f:72:0f:8a:25:8b:3d:00:2f:2c:
b8:6c:75:d1:c8:93:35:8b:40:7a:14:f7:96:22:90:
f1:3f:62:bb:5b:8a:d1:3c:bf:71:e0:43:5e:82:fd:
b5:8f:48:cf:b1:22:33:b1:57:83:80:18:57:81:41:
25:e9:53:5b:ad:c4:19:fe:17:66:d9:f7:44:1a:68:
04:89:38:f3:b8:8a:6e:25:b2:43:d1:9a:e1:23:1f:
eb:df:db:cf:40:1c:3a:72:7c:e0:cd:68:8c:75:3f:
e9:44:61:78:10:09:dd:a3:c4:06:3f:3e:9b:7c:c0:
58:b1:0f:b0:d3:d2:68:a9:00:8e:ef:4b:5f:5c:4e:
74:47:67:13:0a:2b:6b:88:4d:41:4f:ec:70:50:09:
dd:4b:8d:65:31:95:8e:e2:6c:2c:e3:d9:b5:09:3f:
ef:e4:f5:f3:bd:93:23:ea:15:a1:92:c3:7f:14:15:
88:d2:5a:dc:05:a8:19:db:a0:a0:ca:05:f0:4b:7e:
80:6d:b0:59:45:bb:b9:cb:58:be:81:24:36:1b:08:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2C:01:5A:6A:7E:6F:03:E9:18:F8:29:FD:96:87:BA:47:C3:F5:C6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RCwBWmp-bwPpGPgp_ZaHukfD9cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8d:60:56:cb:0d:5f:24:36:21:56:99:b6:77:c1:00:9d:6c:
21:e0:d7:c6:a5:00:51:ca:6d:9a:88:e9:0a:c9:79:ac:04:c5:
1a:a9:2d:ef:bf:c4:2b:e0:97:d6:ec:1d:0e:c8:e1:2d:ae:1c:
a0:6d:9d:2a:25:a3:f0:99:44:7c:89:b0:8a:e5:d0:ef:a3:74:
6e:02:4f:35:59:82:8a:93:98:54:19:58:da:cf:fe:0e:54:b8:
ec:58:7e:9f:64:b5:a3:6c:84:9a:86:b5:89:32:aa:68:89:27:
ea:86:72:4c:dc:ae:5d:52:b5:f7:e0:fc:0b:eb:88:39:39:98:
7a:04:22:14:46:66:53:c2:1c:6f:5a:b7:a6:66:5d:39:41:9e:
9c:3f:12:54:b3:21:d6:86:69:ba:41:46:46:57:2e:82:93:35:
9e:a8:89:9f:df:73:84:bb:f6:db:b3:0b:ae:e4:7a:93:8a:6f:
f9:bf:ca:8e:1d:d8:c6:44:77:68:38:81:3d:bb:7d:8f:90:43:
7c:a4:90:d9:59:52:61:72:d0:f4:08:22:92:60:da:60:50:07:
ea:59:84:4d:11:74:a4:45:94:c7:3a:2c:2f:bd:f4:48:92:34:
bc:d5:93:b1:b9:6c:34:22:4d:da:1e:2b:59:b2:f7:27:02:a3:
cc:07:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 11:51:49 2023 by rpki-client on console-fra.rpki-client.org