Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WZ1RfkozXlqHSMpj-H0z4yYdMHQ.roa
File: WZ1RfkozXlqHSMpj-H0z4yYdMHQ.roa (raw, json)
Hash identifier: nqt9LoppjxmwimFXFjjzCEP+srIbgzIPhKU/i7eUhWE=
Subject key identifier: 59:9D:51:7E:4A:33:5E:5A:87:48:CA:63:F8:7D:33:E3:26:1D:30:74
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187A0538A17DCBDDB3B98702AEEDA645E52
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WZ1RfkozXlqHSMpj-H0z4yYdMHQ.roa
Signing time: Thu 20 Apr 2023 20:20:41 +0000
ROA not before: Thu 20 Apr 2023 20:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.41.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:53:8a:17:dc:bd:db:3b:98:70:2a:ee:da:64:5e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 20 20:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=599d517e4a335e5a8748ca63f87d33e3261d3074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:e2:19:9e:59:c1:9f:1d:a8:ef:cc:76:b6:
45:e7:55:cd:18:80:13:a9:f4:a4:8b:ff:ba:d1:1e:
aa:63:6b:82:b0:74:0e:40:b8:09:6c:4a:ec:61:80:
2d:f8:b8:1f:09:04:53:99:1c:3c:b9:35:3b:b9:55:
43:d8:6f:04:4e:17:05:4c:3d:a9:04:8b:7e:ba:50:
9b:83:71:75:a8:44:1a:13:05:b0:86:d5:e4:7f:85:
81:c5:be:27:25:1d:cf:2f:c8:a0:54:12:27:15:b6:
4d:98:0f:68:47:33:01:69:df:dc:07:c4:8d:97:d3:
80:16:39:ec:2c:ec:10:ed:fb:a4:4f:47:0d:da:20:
a7:6f:4f:c1:59:3b:f2:c6:a6:45:a1:26:29:13:30:
e9:5b:39:8e:5c:dc:3d:cd:4b:e2:47:0f:4e:af:dd:
dc:1e:55:66:e9:88:f6:b5:81:33:dc:8a:67:0a:0a:
8b:63:04:21:f9:b2:a7:64:c2:92:ca:cc:12:e7:7b:
bb:7e:cd:2b:49:50:78:91:85:76:6d:22:c4:1e:85:
b6:48:62:97:b1:28:27:dd:8d:6f:ad:9b:68:38:15:
2a:76:d3:8e:d6:37:49:d9:0e:47:c8:0b:12:83:35:
65:8f:ef:41:38:5e:da:41:02:48:0e:a6:26:3e:c7:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:51:7E:4A:33:5E:5A:87:48:CA:63:F8:7D:33:E3:26:1D:30:74
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WZ1RfkozXlqHSMpj-H0z4yYdMHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.41.0/24
5.105.82.0/24
5.105.102.0/24
5.105.197.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e1:ce:ed:ca:39:e5:86:4f:ce:f1:51:65:f0:a4:03:a2:03:
df:a5:f9:71:f5:7c:72:eb:1a:86:9a:01:c0:7d:c4:f2:1e:8a:
6a:0d:4a:07:a1:3d:d2:3c:7b:9b:9e:75:55:e3:7c:41:2c:47:
72:c4:1d:7d:9e:a1:8c:77:80:75:1b:b9:2c:1c:ce:e0:45:37:
4f:80:be:9d:06:73:27:44:93:08:15:7c:b6:e7:f2:ee:9c:53:
ee:64:9f:24:7c:f3:31:9a:b7:87:49:25:27:c0:b7:f3:dc:fe:
bc:b6:13:0b:f3:85:fd:4d:3b:dd:bc:b4:6d:84:54:36:9c:1e:
06:84:ab:bc:81:6a:1a:c2:9f:19:98:50:1c:a3:19:4f:34:f0:
08:bd:01:ad:76:d6:5e:d1:ba:d0:db:6f:59:d0:93:e9:d3:0b:
8e:be:10:4d:6d:2b:d8:5e:5d:fa:96:4a:03:2c:d9:54:5c:80:
10:0c:5d:c6:7c:94:8c:1d:9a:fb:d1:a7:4e:4c:0f:2f:2d:04:
74:44:eb:61:d3:11:45:5e:35:e5:bb:d0:4d:53:a2:0a:58:6a:
bf:28:b4:38:01:c6:d9:65:19:d1:b1:6a:57:54:a0:99:e1:67:
43:9f:01:ce:45:7c:91:01:16:fb:a6:bb:01:f5:3d:4b:38:fc:
69:64:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org