Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/S-9LA2goVwdE2DWcXeJdLcE8Am8.roa
File: S-9LA2goVwdE2DWcXeJdLcE8Am8.roa (raw, json)
Hash identifier: lHKE17cdon0NVHf66eXfL5rMkMy1b/SXLDrjvCfHxrc=
Subject key identifier: 4B:EF:4B:03:68:28:57:07:44:D8:35:9C:5D:E2:5D:2D:C1:3C:02:6F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018731943684587F12303308A7566295CA51
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/S-9LA2goVwdE2DWcXeJdLcE8Am8.roa
Signing time: Thu 30 Mar 2023 08:13:29 +0000
ROA not before: Thu 30 Mar 2023 08:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400536
IP address blocks: 5.105.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:94:36:84:58:7f:12:30:33:08:a7:56:62:95:ca:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 30 08:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bef4b036828570744d8359c5de25d2dc13c026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:cb:2d:8a:84:94:53:2c:88:c6:45:b4:4c:
16:2d:04:b9:7c:4d:bc:0e:f5:9f:c9:e2:67:f2:e0:
4c:1b:55:c4:01:02:4d:6c:90:77:40:d1:06:13:ab:
2f:49:af:fb:b2:58:6c:b7:18:9f:26:ba:b5:3d:7b:
0b:f3:aa:a4:47:0a:67:9a:f2:c5:4c:9a:d2:a0:d2:
93:63:89:68:87:8c:ee:2d:35:e9:34:a3:1f:9d:a2:
7d:0a:88:e7:41:de:c4:4a:46:b4:1a:b2:ad:f9:51:
64:a2:3c:7d:70:27:12:0c:3b:ea:fc:9f:3b:8e:35:
a8:57:d2:4d:ec:e3:ee:5d:79:9d:86:10:e1:16:54:
4d:60:f7:f5:a8:53:02:c6:cb:5d:25:10:bf:a9:92:
bb:d5:5c:f2:95:d0:cf:a2:ff:2e:83:75:c7:7b:f3:
fe:f6:e8:dd:74:17:ea:3c:e6:6f:0b:30:19:16:ab:
a8:27:fd:65:b8:15:8c:87:ac:1f:39:7a:63:d3:af:
82:dd:5c:39:3f:62:ce:a0:75:49:0c:c4:d3:9c:a6:
39:c3:3a:25:b8:e9:16:f5:7d:19:43:1d:d0:68:2f:
4f:5f:73:c6:90:66:99:87:54:54:7e:d0:38:cb:c0:
eb:97:15:af:65:f9:c5:6f:18:87:b4:b7:cb:9b:63:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:4B:03:68:28:57:07:44:D8:35:9C:5D:E2:5D:2D:C1:3C:02:6F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/S-9LA2goVwdE2DWcXeJdLcE8Am8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.32.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d6:55:09:6a:8c:b1:2c:e7:e3:4a:4c:38:27:07:5e:4d:65:
de:b9:af:39:27:f1:16:4c:43:7f:d0:0e:28:20:6c:ba:fe:c5:
84:02:25:53:38:10:d1:7b:f1:ce:77:c7:f7:24:43:f4:0f:96:
19:0b:53:98:48:80:1f:5e:f5:e1:69:fa:bb:cc:bc:7d:4e:a6:
85:7c:3c:74:52:7e:5d:45:06:29:fc:43:0f:64:90:79:41:fb:
89:b2:cb:a7:1c:77:cb:65:e4:d3:b7:c6:10:fb:92:80:1f:c1:
7b:b6:a6:64:bd:3e:7d:c3:48:38:4f:f2:e3:fc:0a:44:e3:58:
d6:b4:28:7f:ad:0e:b6:b3:ea:8f:7e:1e:60:5f:4e:61:d3:b5:
c8:53:39:c4:bc:d9:c9:55:0d:16:de:d2:8b:6d:04:5d:4b:df:
66:80:41:b2:99:f9:19:32:99:9f:e6:3b:f7:ad:59:a0:1b:a6:
d4:a6:fa:26:e0:bb:bb:0c:e6:61:22:19:3c:e6:15:ff:21:e9:
8b:d7:f8:16:84:fb:5b:23:53:9a:88:99:61:e1:0f:4f:dc:51:
75:cc:7c:27:b8:f3:02:55:3d:81:50:12:b1:b6:4a:8b:23:b4:
47:d5:80:d4:36:e4:ea:11:09:fa:0a:80:70:56:8e:2c:a5:45:
aa:ff:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org