Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YvVzIlTrOgimaPWiHntoGY-Uuzs.roa
File: YvVzIlTrOgimaPWiHntoGY-Uuzs.roa (raw, json)
Hash identifier: PCcdch5azbQ832hJl2+zYbPA89SaaiZamICdn09jQ64=
Subject key identifier: 62:F5:73:22:54:EB:3A:08:A6:68:F5:A2:1E:7B:68:19:8F:94:BB:3B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187319435EEB86015FB2B5A9FCD87AAE413
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YvVzIlTrOgimaPWiHntoGY-Uuzs.roa
Signing time: Thu 30 Mar 2023 08:13:29 +0000
ROA not before: Thu 30 Mar 2023 08:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:94:35:ee:b8:60:15:fb:2b:5a:9f:cd:87:aa:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 30 08:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62f5732254eb3a08a668f5a21e7b68198f94bb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:96:36:e6:75:80:03:5e:13:e9:c3:76:b7:
b3:e4:c3:f9:4c:68:7f:b0:05:8f:c6:ac:dc:a4:f1:
d3:1e:14:7d:02:25:8d:e4:f1:f9:fd:dc:ab:b9:30:
ed:e4:99:0c:1b:fd:75:a5:a2:50:d3:85:0f:92:cc:
c4:a3:4d:03:e4:35:85:c0:08:14:d8:c5:a3:68:e3:
f3:c2:b4:d9:f5:b3:ec:32:21:49:b9:ca:d4:18:d5:
5a:ed:51:8a:d6:45:9b:da:c5:3b:f8:79:ea:57:dd:
d3:e2:50:35:62:49:c1:2d:ab:c7:53:29:d1:95:fa:
b8:1f:63:18:26:c4:20:7b:ae:ec:de:13:81:9c:41:
e5:85:b6:1a:60:b6:0c:4f:1e:f3:18:23:5a:a2:5c:
30:46:da:8e:8a:50:68:e4:9b:3e:e5:4e:89:92:c9:
81:08:6e:2a:6a:f5:77:10:5d:f0:d7:2a:65:76:57:
19:12:74:9e:d2:be:62:da:ef:0a:5e:aa:46:8c:da:
83:de:7f:23:ce:c4:da:d8:d8:2b:89:0a:c4:30:db:
b2:df:ed:e4:ad:5d:54:4f:8b:1a:86:5c:8c:f6:3c:
1b:d3:4c:63:8a:93:a5:8f:d8:14:ef:c8:21:e4:b6:
95:80:8b:e1:0d:83:c5:c6:ed:48:ad:4b:6b:c5:7c:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:73:22:54:EB:3A:08:A6:68:F5:A2:1E:7B:68:19:8F:94:BB:3B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YvVzIlTrOgimaPWiHntoGY-Uuzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.63.0/24
5.105.85.0/24
5.105.184.0/24
5.105.200.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cc:70:e7:c7:fd:9e:8b:c5:99:cb:0a:41:86:72:d1:0b:f5:
ba:f4:2a:d9:d1:37:01:63:9e:ec:e5:fd:c4:0a:ea:81:02:c6:
27:3c:b1:00:9b:27:a8:d6:59:88:0b:78:95:cc:5b:1d:39:12:
2a:a9:bf:cc:08:75:53:c7:08:eb:b3:a1:45:df:4f:f9:24:a4:
35:ed:64:4e:4f:18:27:a0:e4:58:48:85:a3:e5:df:87:27:1f:
f6:ae:9f:93:5a:55:ab:b7:02:7c:5b:57:de:51:57:1b:26:56:
9e:85:aa:0a:27:a0:ba:0f:71:a9:84:c5:84:5c:f3:96:9b:43:
c6:fd:26:95:02:5b:73:54:35:ed:35:a0:db:df:70:90:1d:72:
94:d4:d5:a7:1b:17:1b:9c:1b:48:a5:fd:70:9a:20:5b:8c:4d:
b0:51:9a:0c:da:e4:1a:22:ae:22:0c:72:53:57:74:bd:aa:79:
9f:fd:63:44:1f:1f:6b:10:8c:8b:c7:b4:44:e4:1d:66:c5:79:
21:21:03:76:79:66:3e:de:72:00:db:63:76:4d:24:87:e9:8e:
2a:8c:78:18:f1:1b:78:80:52:d0:5d:8c:d7:c5:8d:51:a0:4b:
78:61:cb:38:05:d2:c1:3e:73:fb:46:f9:32:c7:ac:b6:7e:98:
28:ba:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org