Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y4IF_fIxWXhtTzzfP4OPuA0IntA.roa
File: Y4IF_fIxWXhtTzzfP4OPuA0IntA.roa (raw, json)
Hash identifier: cLp5Eiqt6Zbd2IBBtUk/IbeGi20MY8900LzYVaQlzf8=
Subject key identifier: 63:82:05:FD:F2:31:59:78:6D:4F:3C:DF:3F:83:8F:B8:0D:08:9E:D0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A85B4D6D6038B0E355ADE9E8E3F731F16
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y4IF_fIxWXhtTzzfP4OPuA0IntA.roa
Signing time: Mon 11 Sep 2023 19:25:35 +0000
ROA not before: Mon 11 Sep 2023 19:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:b4:d6:d6:03:8b:0e:35:5a:de:9e:8e:3f:73:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 11 19:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=638205fdf23159786d4f3cdf3f838fb80d089ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:0a:82:ec:54:f9:52:cb:15:6f:7b:cb:f4:
99:7f:eb:10:13:7b:68:2b:57:76:69:2c:e8:8c:f2:
1e:67:c2:e5:a2:b0:f9:31:9e:bf:51:56:7b:d5:47:
56:28:7e:ec:8a:67:3f:b2:b8:84:a4:65:02:fc:15:
ab:db:c3:6d:c4:a5:72:7f:c1:ad:dd:b2:ad:53:0b:
6a:7c:52:bc:e3:be:58:39:01:09:38:14:76:df:ed:
c0:5a:0a:72:92:80:c7:87:ef:70:bb:11:81:48:c8:
5d:ae:be:d0:0a:14:89:a9:04:b2:13:bc:7b:2f:39:
ad:76:ef:40:51:97:0e:b7:58:6d:5d:2a:20:e4:4f:
ec:16:e9:c7:4d:f2:d6:ba:93:15:66:e3:4b:6f:07:
97:dd:a8:3a:59:33:17:ef:62:c3:bc:f2:6d:71:cc:
f8:26:14:a1:f0:2a:e9:89:aa:1b:6c:a6:5a:53:a4:
cb:93:ce:0d:d8:6f:f9:bd:2c:a2:d3:62:af:73:b7:
cf:52:09:cf:2a:92:b5:26:3f:ab:38:39:f3:3a:6e:
92:91:50:24:f6:67:7f:14:dc:8f:4f:19:a8:b7:93:
5f:03:ba:40:08:5c:e1:41:23:5d:2e:fb:03:6b:fc:
97:cf:60:13:98:f3:75:7f:4b:41:03:ff:40:ff:99:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:05:FD:F2:31:59:78:6D:4F:3C:DF:3F:83:8F:B8:0D:08:9E:D0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y4IF_fIxWXhtTzzfP4OPuA0IntA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.96.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ab:50:94:41:af:bc:ca:c6:6e:34:5a:e6:fb:49:90:41:94:
f8:d5:87:36:59:a7:e3:c0:b3:f0:5a:a2:9f:7e:34:48:9a:66:
b3:91:40:b9:68:8b:b1:6a:d1:b0:05:f8:fa:64:0e:7f:d5:3b:
b8:85:8d:b6:3a:ef:da:8e:a9:43:5b:07:06:16:b9:e9:a7:f9:
16:19:cd:f2:71:3e:e3:0d:10:01:88:67:f5:99:8a:f2:d5:0a:
5c:33:67:a0:a6:ef:35:84:92:58:7b:4c:5b:d9:84:29:fe:9b:
aa:e5:57:d9:54:c6:be:3f:de:02:f2:00:6e:33:03:56:e9:f3:
7e:9a:14:ea:de:a3:15:18:70:e2:e1:8b:51:b5:25:30:dd:0f:
28:55:e6:f1:40:0e:21:ba:a5:5c:ab:dd:66:e1:60:a3:c3:78:
10:62:9b:ba:68:02:6d:f6:2a:ce:9d:08:7a:68:20:9c:8f:12:
a1:bf:1c:b1:82:55:77:e5:af:a8:ef:c1:dc:83:e4:75:c2:48:
11:e6:14:77:a5:1f:02:ed:3f:a8:72:cb:2b:ec:9f:75:58:e3:
7e:64:0f:79:78:08:d5:20:18:c5:25:94:15:97:6e:f7:26:aa:
73:9c:c8:d9:d5:72:2f:69:12:e4:03:b9:28:a3:49:c7:5f:0f:
5a:59:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 18:16:33 2023 by rpki-client on console-fra.rpki-client.org