Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TiUwYtxGGBKycVu5NXCxI3n4z4o.roa
File: TiUwYtxGGBKycVu5NXCxI3n4z4o.roa (raw, json)
Hash identifier: be081MyCGIwvxC8KDKo7i9LMDRlrOzmYsljENpwAfqk=
Subject key identifier: 4E:25:30:62:DC:46:18:12:B2:71:5B:B9:35:70:B1:23:79:F8:CF:8A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186A6981411B1BFDB7A3F3B902D2165A07C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TiUwYtxGGBKycVu5NXCxI3n4z4o.roa
Signing time: Fri 03 Mar 2023 08:30:29 +0000
ROA not before: Fri 03 Mar 2023 08:30:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 5.105.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:98:14:11:b1:bf:db:7a:3f:3b:90:2d:21:65:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 3 08:30:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e253062dc461812b2715bb93570b12379f8cf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:f0:6b:5b:97:d1:17:12:33:60:2b:94:57:
16:26:67:c5:75:6f:62:a2:f7:58:ea:92:61:45:0b:
b5:f9:98:94:56:9b:75:dd:f2:a9:de:7e:06:1b:3b:
a1:4a:0b:78:d8:2f:b9:b3:9a:f8:3c:1b:04:1c:b6:
cf:3e:0e:a1:b3:57:43:99:e0:d4:1f:45:ef:e8:11:
4a:a1:71:96:a6:9d:c3:fa:79:88:a8:24:ee:9b:bf:
c9:21:50:83:e1:57:7e:e9:36:96:ae:23:15:33:1d:
8c:26:2a:63:bc:5c:79:33:b7:85:35:8d:cd:91:42:
2b:76:a0:8a:a6:18:71:ff:28:c8:f1:26:75:af:20:
9d:f2:ac:24:92:d2:3e:b2:e1:2c:f7:8d:11:f4:9a:
0e:6d:54:d4:fe:6c:80:06:00:d7:37:b7:cc:8f:7d:
cf:ee:3b:cd:48:bf:1a:a7:9c:5f:cb:d9:50:e3:33:
45:4c:7b:3c:6d:33:10:7c:7e:62:dd:22:f3:ac:e7:
66:1b:79:dc:bd:7e:39:db:3e:37:db:90:4e:a8:88:
8c:13:05:90:2f:b0:f2:51:c3:29:51:a9:ab:98:13:
57:53:50:07:7b:c9:fe:5b:c8:9f:fd:f5:e8:12:26:
dd:76:34:b8:45:97:66:8c:02:ff:52:3c:87:4f:1f:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:30:62:DC:46:18:12:B2:71:5B:B9:35:70:B1:23:79:F8:CF:8A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TiUwYtxGGBKycVu5NXCxI3n4z4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
Signature Algorithm: sha256WithRSAEncryption
53:99:00:74:95:da:a2:b7:98:66:12:ae:60:cf:7c:2c:cc:6d:
de:c7:4c:a4:09:51:91:e6:40:92:97:7e:04:f3:a7:11:b4:a6:
7f:ff:db:22:24:ad:86:c4:65:1c:4e:04:0c:52:ce:ef:3b:c1:
f9:0e:a6:0a:3c:da:fd:db:c6:87:18:48:8b:39:d7:9b:cc:0d:
8f:50:69:f9:4c:9e:e1:a6:00:fa:ca:0b:4b:55:71:37:73:46:
3c:9f:23:5d:bd:97:c7:a9:5c:52:94:fb:c2:1e:2c:28:f4:d7:
10:04:5b:35:a3:83:d4:55:da:65:dd:4a:27:e5:cd:f7:7b:99:
b7:37:8a:3d:7c:9e:41:d5:ab:80:8e:c2:d3:f6:42:a9:84:c6:
0e:4e:9c:5c:33:6b:70:21:a1:82:47:dc:be:0a:65:24:92:cd:
f6:70:cf:fe:9f:a9:db:55:ae:65:58:05:2c:ca:7b:e1:a8:8f:
bb:01:09:4a:51:e7:72:88:ec:7d:9e:bc:4a:49:10:14:06:d7:
27:7a:91:6a:23:aa:f3:ed:7a:be:6f:d1:56:92:a7:bb:8e:61:
30:b3:f9:41:9d:9b:88:92:a7:ea:a2:d5:3c:c9:a9:e2:03:43:
9a:25:e9:df:c9:9d:f9:85:4f:9d:4b:2e:69:7b:1a:c7:5e:4b:
16:57:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 11:03:39 2023 by rpki-client on console-fra.rpki-client.org