Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/S8fugCHIF5Zrk4eUHjOPtmG06TY.roa
File: S8fugCHIF5Zrk4eUHjOPtmG06TY.roa (raw, json)
Hash identifier: LirJkZnMtDCkfzstbgRZTyP8XcEe2aaOf4OWDVL3EBk=
Subject key identifier: 4B:C7:EE:80:21:C8:17:96:6B:93:87:94:1E:33:8F:B6:61:B4:E9:36
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186516B9F32B7C4E5D8825F30A16D848787
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/S8fugCHIF5Zrk4eUHjOPtmG06TY.roa
Signing time: Tue 14 Feb 2023 19:34:12 +0000
ROA not before: Tue 14 Feb 2023 19:34:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 5.105.120.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:6b:9f:32:b7:c4:e5:d8:82:5f:30:a1:6d:84:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 14 19:34:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bc7ee8021c817966b9387941e338fb661b4e936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:76:0b:6d:60:18:3b:cf:da:f3:96:88:0d:
35:77:96:94:d3:36:c0:56:d3:d0:0e:c5:b9:71:1d:
de:79:5a:11:c5:70:0e:3f:9b:8c:ab:30:ff:7a:1a:
d2:7b:d9:91:67:bb:39:72:a0:99:b1:56:a5:b2:fd:
64:02:4d:da:2f:1b:9d:01:63:34:a7:be:4c:3b:62:
09:2f:c5:5a:6d:6d:82:63:fc:c6:a9:95:a8:34:93:
59:d8:b9:52:e4:f3:b6:0f:b0:d9:e6:78:44:70:9d:
19:b9:d1:73:18:59:30:70:45:e6:e1:3b:09:bc:b6:
32:ba:18:27:07:6d:ac:ee:8b:2d:58:f3:79:5b:27:
d3:50:2c:12:86:85:d7:8d:82:e8:e2:6c:af:69:e2:
57:dd:c4:24:dc:51:04:67:5a:f3:46:50:c9:3f:6c:
d4:f1:f1:6e:f8:5d:b4:bf:87:25:7d:9e:39:e0:9d:
55:bf:41:96:f9:c9:68:93:ec:68:0d:aa:15:6d:08:
cd:3c:5b:91:f2:72:0a:1a:3d:5d:f2:fc:a3:2b:5d:
36:51:ff:bc:54:dc:e9:6c:01:d7:9d:84:7e:ef:a4:
8c:6a:f8:cc:7c:1b:69:1c:0f:5d:26:16:0c:3c:1e:
24:09:bc:c1:c2:04:b3:81:00:db:0c:10:ba:02:0f:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:EE:80:21:C8:17:96:6B:93:87:94:1E:33:8F:B6:61:B4:E9:36
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/S8fugCHIF5Zrk4eUHjOPtmG06TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.74.0/24
5.105.97.0/24
5.105.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:54:a6:4a:96:9a:bb:15:35:1c:5e:1e:74:94:6a:16:43:81:
7b:e7:83:73:66:bd:61:95:8a:80:09:54:c4:b7:b0:43:1c:08:
f0:c7:08:6e:a8:2a:d3:02:ca:61:34:4a:18:fa:af:da:39:1e:
7b:7e:9d:38:ac:a8:a9:ca:34:98:46:2e:f8:c7:b4:25:f2:dc:
24:54:fb:c0:7e:3a:8b:6a:91:20:63:90:de:ff:e6:77:a2:07:
e2:33:51:a9:b9:99:af:5d:c6:2d:47:36:59:14:3c:c3:9d:fe:
d7:52:d0:d0:1a:ff:f4:27:a5:c0:f9:9b:fd:2f:c9:47:4c:ef:
02:fb:91:07:2b:c7:91:72:88:a5:67:c6:03:82:8d:23:04:86:
b5:4a:87:fb:82:ae:37:cb:a0:4f:72:0d:dd:bb:ae:70:26:e6:
df:de:af:b0:c9:6b:c9:a0:53:54:32:b8:f7:1f:c8:ba:59:fa:
3a:66:83:8e:cd:83:93:d0:10:8e:b4:26:73:f8:1c:01:9b:e5:
68:5d:73:24:d1:e8:ca:27:f7:e5:c6:1d:a4:24:d1:51:7e:0e:
20:65:8b:33:d3:57:0c:a9:b4:a9:f6:44:bf:ea:b8:6e:1b:30:
b2:f9:f4:b2:16:83:c3:eb:7c:62:7d:d2:ea:d4:66:8a:0f:96:
fa:fd:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 11:05:47 2023 by rpki-client on console-ams.rpki-client.org