Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZPa-y_5tVT_BiU4olM8YzkF0vGo.roa
File: ZPa-y_5tVT_BiU4olM8YzkF0vGo.roa (raw, json)
Hash identifier: dDjwnms4IBAGfz9ZxFycku9bZ62SloeyV0cAZw5P8RM=
Subject key identifier: 64:F6:BE:CB:FE:6D:55:3F:C1:89:4E:28:94:CF:18:CE:41:74:BC:6A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185F26ED4E9EE8EF7409A049DE714BC35A6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZPa-y_5tVT_BiU4olM8YzkF0vGo.roa
Signing time: Fri 27 Jan 2023 08:53:47 +0000
ROA not before: Fri 27 Jan 2023 08:53:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 5.105.59.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:6e:d4:e9:ee:8e:f7:40:9a:04:9d:e7:14:bc:35:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 27 08:53:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f6becbfe6d553fc1894e2894cf18ce4174bc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:3b:9e:3d:a8:91:12:4f:93:e5:d8:6a:11:
b4:e3:b2:32:eb:a9:d0:a5:82:c3:bd:79:46:3a:e0:
9a:8a:4b:5d:f5:79:8f:0e:a7:30:e5:a8:d6:91:73:
df:01:33:a2:5b:20:8b:20:c4:e2:de:05:28:8c:d3:
9c:97:d3:2e:56:44:0e:5e:79:65:5e:49:ab:45:44:
0f:19:61:c9:33:d7:a1:2b:3c:f9:51:97:b5:26:71:
86:d9:c2:0b:44:84:04:b4:5d:80:22:e8:2f:d2:88:
b6:7f:ce:26:1a:f4:70:50:26:cc:55:3d:79:3b:01:
e9:b7:16:16:fa:e7:b5:37:ad:5f:80:62:5b:18:a8:
21:cd:3b:ea:ea:01:f2:24:4a:77:85:b8:25:b2:9f:
e2:f5:af:d5:60:67:38:cd:8c:6f:6f:b0:50:1d:c1:
54:81:bf:5a:8d:da:d7:d0:6a:6a:b6:9c:02:82:45:
43:ee:0a:35:f8:1e:0e:2b:96:f5:e2:2a:ca:c5:c2:
f8:3c:70:d0:a4:ff:af:40:0e:0e:d0:3c:b9:79:a9:
94:8c:b1:32:17:e6:39:81:9a:18:7c:2c:b4:7c:48:
04:b0:57:46:89:af:65:3c:8e:10:26:a6:eb:05:dd:
8f:8a:0c:c9:eb:bb:6a:ac:77:47:25:11:55:da:70:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:BE:CB:FE:6D:55:3F:C1:89:4E:28:94:CF:18:CE:41:74:BC:6A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZPa-y_5tVT_BiU4olM8YzkF0vGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.59.0/24
5.105.62.0/24
5.105.71.0/24
5.105.117.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c6:fa:04:4e:1c:7c:b1:2b:54:66:ac:eb:48:55:15:03:44:
26:a8:48:76:5e:94:1c:c5:c3:88:30:f4:71:0a:53:a7:c0:38:
96:d2:1c:1c:20:72:6e:42:98:dc:9c:eb:75:c3:09:7a:7b:0f:
ae:aa:f8:3e:2d:05:21:92:ba:5f:27:d1:ba:4e:40:60:7a:db:
3e:4a:89:dc:4a:02:d0:9e:33:22:1b:a2:0a:8d:da:eb:2c:71:
0b:b4:9b:d9:0f:67:46:de:64:1b:40:27:74:48:7c:01:fe:75:
93:6c:56:61:8a:e4:7c:5b:1a:13:26:89:fa:ce:29:23:01:66:
df:b4:99:14:bb:7c:8d:20:9a:a0:2b:9d:3d:a1:00:04:ff:19:
60:03:8d:e7:84:29:56:92:97:3f:96:77:4b:79:0d:f3:67:e5:
64:37:81:5a:0a:e3:91:8a:b6:fd:4e:e4:43:69:c3:f7:54:de:
56:f1:ac:41:e2:e1:c6:43:40:71:bd:95:62:89:5d:25:fc:40:
93:d7:3b:37:fc:25:84:ea:7f:d9:45:81:ab:bb:3b:6d:af:ce:
aa:06:73:cd:d9:1b:f9:45:b2:f7:7d:13:9e:7a:94:2a:15:aa:
54:b2:15:75:ba:2b:3f:79:74:c4:ce:e4:88:29:6d:02:5f:7c:
55:4f:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org