Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Si1_GPntgfhknotT9cIfHGLwEQw.roa
File: Si1_GPntgfhknotT9cIfHGLwEQw.roa (raw, json)
Hash identifier: NgOohOSR0IPiI+iqSs9xPy6sOhpfE0yf/It00RMStKA=
Subject key identifier: 4A:2D:7F:18:F9:ED:81:F8:64:9E:8B:53:F5:C2:1F:1C:62:F0:11:0C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018774E8D40A35EA752F61B0F6A222B16254
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Si1_GPntgfhknotT9cIfHGLwEQw.roa
Signing time: Wed 12 Apr 2023 10:00:28 +0000
ROA not before: Wed 12 Apr 2023 10:00:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:e8:d4:0a:35:ea:75:2f:61:b0:f6:a2:22:b1:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 12 10:00:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a2d7f18f9ed81f8649e8b53f5c21f1c62f0110c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:e3:d4:b5:9f:fb:9f:1c:45:00:b2:d2:e2:
bd:34:8b:7d:99:ce:ac:b5:6a:2c:9b:d3:14:b3:65:
01:35:9f:39:a0:c8:25:0d:8d:56:92:e0:45:77:7d:
a9:5d:da:23:96:25:10:42:f6:6c:7a:a6:9c:08:e3:
94:34:5b:58:ae:0f:8c:e5:5c:3e:ab:bc:b5:cc:a9:
17:94:bb:91:55:da:1d:83:6a:c1:f4:b7:95:1f:70:
04:b4:ef:5c:4f:d1:67:b0:29:b6:e7:4e:c4:f4:e2:
6e:4b:8a:56:97:39:09:d6:3a:ea:44:9a:d7:7b:f9:
45:96:ae:13:c7:84:79:06:d9:24:58:8b:58:dd:c9:
7a:41:7b:58:1a:ea:17:4d:c2:be:68:60:9d:d0:d5:
c1:fd:cc:33:d4:51:17:67:f0:2a:6e:6f:9f:72:ec:
d1:f7:d5:c6:1b:e2:a3:92:e2:2c:dd:80:f9:5c:da:
de:9a:e8:3e:54:62:01:7a:06:3d:90:4b:7f:fd:36:
fa:9f:40:7f:18:5e:e0:4c:cc:a3:6f:ad:05:f8:45:
c7:9f:d2:b9:b5:da:1b:aa:a1:dc:17:b8:db:1b:ad:
b1:26:9e:c4:89:66:0d:d4:15:4d:cc:e7:34:68:be:
fa:9b:d2:bd:ec:70:6c:23:48:d0:63:38:8e:c2:d7:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2D:7F:18:F9:ED:81:F8:64:9E:8B:53:F5:C2:1F:1C:62:F0:11:0C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Si1_GPntgfhknotT9cIfHGLwEQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.84.0/24
5.105.98.0/24
5.105.105.0/24
5.105.158.0/24
5.105.188.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5b:56:a9:d6:56:5a:c7:9c:71:d3:a8:1d:b5:54:2f:9e:8d:
fe:14:c8:cf:0d:c2:e1:9a:82:a9:0d:93:ab:c7:dd:2a:c6:85:
f5:f7:74:a0:0e:29:45:54:41:28:40:8a:da:9e:50:03:ff:11:
ce:31:3b:8d:f0:a9:cb:fc:d8:ce:7b:e1:60:34:2b:9a:e4:6c:
7e:58:ef:56:f7:f2:16:fd:1c:3b:d4:60:c6:2e:b6:d4:67:ef:
df:95:44:84:d8:fa:c1:95:1f:e9:61:0f:d0:93:98:fa:f0:5b:
6f:34:e1:5a:cf:64:e9:25:86:ec:57:04:57:ee:66:8c:f1:16:
07:17:d3:47:74:f6:5f:1a:3d:f1:c4:46:01:c6:f4:44:13:2d:
cd:e7:5a:9e:97:9c:7b:15:a1:ac:85:f1:8c:62:4f:6c:8a:9c:
7e:2d:9f:b0:e3:97:0f:90:31:12:e6:fb:a0:7a:77:99:c4:f2:
85:d8:e4:36:4c:8a:a1:bf:cc:a0:2c:92:fe:f4:55:fa:64:b1:
81:9a:3e:18:d5:2c:b9:89:a2:d2:da:fd:d2:20:d9:bb:8c:75:
47:9e:51:0f:c7:96:ab:a4:15:66:ac:ee:4b:e0:12:6d:76:86:
a6:d4:27:84:df:20:a9:32:12:7c:5c:06:aa:a3:03:d0:a6:9a:
fa:be:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org