Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WhZFMfZ6_GpRXlqPb9lj66cuRzo.roa
File: WhZFMfZ6_GpRXlqPb9lj66cuRzo.roa (raw, json)
Hash identifier: 2eELNkZTHuX6bKM069ogiBWLq8JEq+gUtXdQiGNumcg=
Subject key identifier: 5A:16:45:31:F6:7A:FC:6A:51:5E:5A:8F:6F:D9:63:EB:A7:2E:47:3A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A65CF705A2D8524C50B786C1EBC0D2FAD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WhZFMfZ6_GpRXlqPb9lj66cuRzo.roa
Signing time: Tue 05 Sep 2023 14:46:48 +0000
ROA not before: Tue 05 Sep 2023 14:46:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60458
IP address blocks: 5.105.195.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:cf:70:5a:2d:85:24:c5:0b:78:6c:1e:bc:0d:2f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 5 14:46:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a164531f67afc6a515e5a8f6fd963eba72e473a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:71:cf:03:a9:db:56:11:25:3d:2d:05:b3:
67:28:4b:b3:5b:e0:2d:9e:40:d5:cb:bc:7d:4a:d0:
6d:31:d0:9f:f1:de:d2:cd:c6:cd:b5:45:62:e5:df:
a6:08:35:23:71:79:ee:5c:1f:ec:6b:f8:18:bd:cf:
98:fb:94:4b:2b:dd:2c:36:3f:b3:70:c1:23:84:50:
3d:90:ed:03:f7:b8:a9:93:93:bc:86:94:04:a2:21:
b0:e0:c5:9d:ec:72:b5:81:8b:cb:b9:ee:ef:99:ab:
cb:cd:ce:6a:c7:b9:b3:69:3d:e7:fc:d9:0b:0b:a8:
35:6d:6f:4f:b2:b3:1d:49:be:10:21:ee:e3:52:12:
cf:2b:f3:89:28:8e:ef:91:bf:d4:b8:c4:da:e6:09:
cb:41:fb:b8:af:64:70:d1:7e:64:c4:41:b5:36:b1:
0c:1d:2e:e9:fc:81:85:56:1d:87:0a:2a:ed:b0:83:
bc:18:0c:3a:8f:f3:36:cf:2c:e5:e9:2d:e5:4e:96:
f5:4c:cf:08:f8:92:e7:a9:91:16:20:c1:8e:af:56:
a5:eb:c9:40:03:1e:a0:bb:a5:b2:a9:40:95:f0:b9:
82:0a:37:a8:c1:7c:c6:ce:f1:8b:c2:b4:86:51:81:
80:ce:7b:bd:bf:5d:8a:48:1c:79:88:0f:4e:03:b6:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:45:31:F6:7A:FC:6A:51:5E:5A:8F:6F:D9:63:EB:A7:2E:47:3A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WhZFMfZ6_GpRXlqPb9lj66cuRzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.195.0/24
5.105.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:63:03:50:be:08:d2:ef:a0:78:f8:ef:3b:4d:8c:6f:33:f5:
d7:01:9c:c7:36:f9:e0:9b:be:05:11:41:05:b2:67:d6:90:c9:
a1:4d:8b:ed:80:a1:72:73:44:83:f8:13:13:ad:45:f3:59:69:
3f:1d:08:5d:37:50:ad:2d:5c:4a:22:40:4b:88:a3:2e:6b:35:
3f:a5:63:ba:1c:98:e1:b6:c9:09:07:a5:63:af:35:05:27:c7:
17:dc:9d:75:02:42:e7:49:be:10:d3:4e:13:1f:eb:3f:0c:22:
4a:98:4d:a5:0d:55:52:6e:ba:0c:c1:b7:2b:b6:80:91:14:ef:
97:a0:57:5c:70:f9:da:0f:13:3b:96:16:6e:3e:47:f2:14:59:
ce:59:9c:8f:b5:4d:59:c5:ba:54:9e:74:fb:77:49:36:1c:0a:
a9:21:d3:b1:1e:36:3b:6c:c0:44:eb:ec:83:80:a1:45:d5:04:
b1:3d:3e:4a:b7:99:73:5b:8b:39:f3:59:bc:dd:1e:0e:5c:bc:
47:dc:e5:50:b5:81:57:7c:1d:a1:40:94:0e:03:64:30:72:aa:
8e:79:70:0c:e8:2f:ba:53:3c:7f:3c:85:18:dd:73:0d:97:96:
b4:36:7a:d0:9c:95:f7:0f:05:57:d7:a4:16:84:c0:e4:a8:d1:
55:ca:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 20:08:15 2023 by rpki-client on console-ams.rpki-client.org