Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WcDqocgzAJZQChBnzp7Rx3WcQ5Q.roa
File: WcDqocgzAJZQChBnzp7Rx3WcQ5Q.roa (raw, json)
Hash identifier: YN0yGus2TmheCjtFdurT5bL5ayKeptdyR6FHtUMmUfA=
Subject key identifier: 59:C0:EA:A1:C8:33:00:96:50:0A:10:67:CE:9E:D1:C7:75:9C:43:94
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B558BC3DC7474E76B9276518C9C98D4E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WcDqocgzAJZQChBnzp7Rx3WcQ5Q.roa
Signing time: Wed 02 Aug 2023 08:23:58 +0000
ROA not before: Wed 02 Aug 2023 08:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.34.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:58:bc:3d:c7:47:4e:76:b9:27:65:18:c9:c9:8d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 2 08:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59c0eaa1c8330096500a1067ce9ed1c7759c4394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:46:0d:7b:92:1e:07:90:15:b6:4d:18:cd:
2e:97:b5:11:52:2e:e3:5b:33:78:ea:cc:31:ec:fc:
a2:2e:5d:1b:7d:73:75:22:80:89:7e:21:6c:81:c9:
d1:e1:f4:54:9b:f8:19:e3:92:57:c3:b4:e9:6e:b2:
db:84:f5:b9:e7:c7:5e:49:01:3a:6b:7b:11:7c:a4:
93:9f:b4:11:06:cd:95:17:b9:44:f8:85:be:74:95:
ec:f7:60:61:3e:12:82:28:81:3b:ee:4d:bc:af:ef:
01:7a:d9:51:a6:e3:d5:52:85:20:97:cb:12:60:59:
56:76:06:d6:43:1e:42:8e:18:5c:cb:e1:73:e8:15:
bf:e3:33:86:50:80:a3:5f:f8:14:ca:a6:6f:75:ed:
ff:b9:0a:ef:92:b3:50:5a:93:87:24:f1:68:bb:cd:
88:bf:4b:26:ee:ee:6d:fe:10:d0:4a:ba:00:36:fd:
0f:01:0d:78:77:b6:c8:4d:ad:ab:fd:fd:83:b2:2c:
f9:82:b6:fb:62:92:91:93:22:e8:be:96:6e:a7:86:
a4:04:c1:c5:6d:2b:cc:06:f4:08:d5:63:5b:6e:ac:
2f:09:88:3c:57:c8:94:98:e8:54:77:57:c3:4f:cc:
d1:7d:cc:95:4b:c6:42:7d:09:0b:5d:2f:6a:a8:13:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:EA:A1:C8:33:00:96:50:0A:10:67:CE:9E:D1:C7:75:9C:43:94
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WcDqocgzAJZQChBnzp7Rx3WcQ5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.34.0/24
5.105.41.0/24
5.105.82.0/24
5.105.203.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5b:97:5b:d1:97:9f:78:f8:b6:87:57:0c:19:51:c5:95:03:
c6:cf:57:9c:d8:b6:23:90:cd:be:b7:6a:42:0c:51:c3:53:9e:
0b:49:13:e0:ec:97:be:dc:a5:dd:d3:3f:8c:44:ea:6e:e1:f3:
a5:86:8e:69:b7:f9:19:bd:b6:44:f1:95:38:f8:e4:7f:e2:a7:
64:b3:45:47:f6:31:45:20:12:38:c5:9b:b2:c8:fc:dd:31:a1:
2f:27:1c:33:bc:4c:d1:55:f5:9a:e7:ee:cf:5e:40:f3:31:a1:
6a:8e:65:c6:7d:3d:fc:1f:25:f8:10:a1:2a:6e:5a:6c:bb:bc:
0d:d7:c1:05:59:f2:b8:34:d5:1d:17:2b:91:79:6f:19:d7:1d:
e8:0a:39:27:2d:48:cc:5d:43:89:6d:3b:54:70:98:4d:b7:00:
03:a0:02:99:95:3c:9e:01:7d:2b:01:05:5b:aa:0f:2e:a8:68:
a2:36:d0:64:26:bc:e6:c4:53:69:c0:5e:98:3e:fe:d7:c8:7a:
49:f0:04:10:9a:7d:57:5f:2a:78:60:6d:9e:51:40:33:4b:e9:
8f:4e:89:48:38:41:4e:09:75:0b:b3:0d:3f:c4:31:e9:70:cc:
e1:87:53:2d:c9:a2:d0:86:2a:16:7e:71:d1:cb:c4:9b:43:ac:
2e:3c:a0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 09:25:18 2023 by rpki-client on console-fra.rpki-client.org