Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RyIpxN-oTkBB5Y1ntHfyXKdPeGU.roa
File: RyIpxN-oTkBB5Y1ntHfyXKdPeGU.roa (raw, json)
Hash identifier: IczlawhSpCcLExZVZUmCwGBO5Y9I2mEx+e6PoWNFNo0=
Subject key identifier: 47:22:29:C4:DF:A8:4E:40:41:E5:8D:67:B4:77:F2:5C:A7:4F:78:65
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B57D593F1FC308927868C60FDD18D494
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RyIpxN-oTkBB5Y1ntHfyXKdPeGU.roa
Signing time: Wed 02 Aug 2023 09:03:58 +0000
ROA not before: Wed 02 Aug 2023 09:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.34.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:7d:59:3f:1f:c3:08:92:78:68:c6:0f:dd:18:d4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 2 09:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=472229c4dfa84e4041e58d67b477f25ca74f7865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:3f:d5:5d:59:42:9e:ed:26:62:89:a2:d9:
49:b2:4a:ff:fc:ea:30:4d:c6:d6:ae:4d:5e:e0:75:
2b:51:dd:02:e3:54:37:19:cd:3d:6d:1e:bf:7e:46:
5e:da:a9:9c:00:ea:be:ab:b0:2e:d7:16:3b:fc:71:
5b:79:71:31:db:44:c4:a3:86:af:ea:7c:42:3b:94:
49:b2:24:64:1a:15:6b:15:3f:e3:5e:92:cf:0d:30:
bc:b1:0b:2b:35:1c:34:14:8c:2b:d2:ba:72:4a:e8:
34:23:a1:e8:b5:1b:a5:dd:83:9c:3a:1f:0f:19:7d:
92:eb:75:92:a7:61:d7:39:c9:22:d3:7f:f3:8e:42:
5d:30:05:1d:2a:67:f7:cc:38:eb:bc:32:95:75:d6:
e4:e8:ff:f6:04:31:4e:ed:46:47:87:00:30:64:d6:
b2:58:40:86:25:2a:91:58:c0:5e:64:d6:ef:a1:3c:
ca:29:d7:87:ae:b3:29:e8:4a:e4:7d:8b:74:b2:c5:
33:17:de:87:81:7a:d8:d1:1e:dc:93:03:93:49:6a:
78:2e:a2:7b:c9:49:10:aa:75:eb:e8:a0:58:97:1d:
66:e0:c6:c3:e4:03:14:f1:26:d9:74:d3:9a:da:71:
aa:14:3e:e7:1e:77:5d:fe:3a:8a:90:bc:0c:d9:05:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:22:29:C4:DF:A8:4E:40:41:E5:8D:67:B4:77:F2:5C:A7:4F:78:65
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RyIpxN-oTkBB5Y1ntHfyXKdPeGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.34.0/24
5.105.41.0/24
5.105.50.0/24
5.105.82.0/24
5.105.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b9:9d:0d:da:33:be:a6:c5:7c:dd:f2:5f:17:2b:af:36:ce:
c7:0b:15:ac:81:13:53:2c:fc:23:e7:d3:00:39:08:2f:62:d8:
3f:c2:19:5e:22:4f:83:54:27:c2:29:98:ec:0b:fc:f3:d9:19:
dc:1c:40:d8:4d:57:27:22:0c:56:71:ce:3f:c6:e5:e1:b3:9e:
61:2e:5b:b6:fe:85:29:f6:a7:d4:8a:f2:20:16:91:58:a0:5c:
dd:f4:12:e5:89:60:8e:dd:1f:ed:e3:56:29:c6:ce:5e:e0:86:
d7:f0:86:15:cf:e9:89:06:8a:3c:29:5d:2b:a0:84:68:08:72:
1c:d2:58:11:5d:54:05:b4:ca:44:fe:75:36:91:d9:3f:c2:14:
ad:9e:13:38:dc:2e:46:f8:94:2b:4e:d3:a1:ef:e4:bd:71:4c:
95:14:5a:71:5c:4e:76:bd:96:0a:51:18:28:39:38:90:41:fc:
02:b1:88:65:9e:7b:56:09:0e:50:1d:d3:3a:91:f2:a2:2d:fa:
08:a6:32:ef:51:6e:15:da:d4:41:1e:ae:83:0f:8d:fe:22:7f:
e4:09:a4:da:75:a9:7a:55:11:69:6d:27:ca:c3:cd:67:c1:87:
8b:79:98:11:d8:e0:16:bf:ba:ad:cf:4e:d6:bb:1e:6e:23:14:
98:40:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 13:33:01 2023 by rpki-client on console-fra.rpki-client.org