Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZypsOOouO_G1-Qidu-nPHM_ea0E.roa
File: ZypsOOouO_G1-Qidu-nPHM_ea0E.roa (raw, json)
Hash identifier: RkydWB23wD+WwBtdpsbjlc15R/iqJHQnR9KfouaSB/s=
Subject key identifier: 67:2A:6C:38:EA:2E:3B:F1:B5:F9:08:9D:BB:E9:CF:1C:CF:DE:6B:41
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B275E99427F8E4D34406108805BA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZypsOOouO_G1-Qidu-nPHM_ea0E.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198356
IP address blocks: 5.105.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b2:75:e9:94:27:f8:e4:d3:44:06:10:88:05:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=672a6c38ea2e3bf1b5f9089dbbe9cf1ccfde6b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:7a:b4:b7:d8:0b:5f:64:28:f5:33:f5:98:
91:bd:ad:c8:ea:05:6c:b1:e2:cc:ee:44:82:f4:f5:
e9:2d:a9:b3:26:03:a7:a6:9c:49:56:c0:40:b8:83:
87:61:e7:d8:09:fc:d5:42:2c:8d:d4:4c:05:cc:98:
01:32:7c:16:9e:1d:09:9b:31:49:f0:6c:8a:71:64:
ad:4f:b1:cf:24:d5:ac:ed:e4:0f:1a:2f:ee:51:f5:
67:dd:45:7d:31:57:64:52:ec:8d:f5:96:ec:a2:6f:
39:14:c9:3a:09:f5:5b:80:b0:72:94:2b:88:b1:ef:
65:91:7d:8a:12:d2:2d:d2:7e:c8:1b:0c:55:e6:88:
5e:c9:a7:3a:a5:be:ed:16:a9:3c:a4:12:6b:a7:08:
ec:9f:60:c0:db:12:5b:5d:4a:b8:cf:25:cb:71:91:
bb:90:1d:79:70:af:f2:29:60:1e:ef:f8:98:e3:56:
30:0a:68:a2:97:a9:0b:87:49:99:d0:65:98:80:0e:
4b:e7:ec:a0:0b:43:06:cf:3c:04:77:a7:69:fe:a6:
d5:04:ab:0f:15:d2:be:6e:55:a4:8b:bf:a1:31:56:
5a:e6:32:cc:0c:a6:a7:0a:75:16:e5:2c:62:38:91:
f6:a9:c1:96:29:14:7a:1f:e9:59:da:34:8e:e6:a1:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:6C:38:EA:2E:3B:F1:B5:F9:08:9D:BB:E9:CF:1C:CF:DE:6B:41
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZypsOOouO_G1-Qidu-nPHM_ea0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:94:a3:8c:6d:4c:d0:27:ec:09:7c:c5:22:4a:7c:80:92:e1:
ab:5d:40:7a:cf:a9:6e:04:31:4a:a0:68:82:01:a1:db:1b:25:
7f:fb:26:ba:3e:79:d3:ba:b7:8f:89:59:ce:ac:e1:2e:f2:98:
99:f1:ed:b8:c0:2a:50:19:84:f9:96:5a:c9:83:6d:e1:82:d8:
58:8b:0a:21:60:9a:29:f6:db:1d:15:6c:c9:f2:91:2c:4a:fb:
92:ac:00:48:84:dc:1e:4c:50:97:8a:e5:2c:5b:cd:5b:4c:97:
8b:91:7f:29:e1:6b:c5:aa:fa:dd:8a:95:c9:25:d6:3b:df:34:
a0:db:05:89:54:7d:58:bc:b5:b7:30:f7:93:0f:5a:f7:c8:a5:
98:35:38:1e:1a:3a:4d:ba:64:c8:29:c4:d7:53:1e:4c:81:4f:
70:18:fb:a1:53:dd:5c:8c:d3:02:e6:6f:0e:be:1b:33:3b:8d:
f9:25:6b:5f:77:5c:0a:01:30:4e:8f:14:b6:1a:0d:12:b8:51:
e0:27:28:53:43:2e:8f:c2:0b:f9:a0:63:90:96:fd:fe:c2:53:
f4:1a:05:38:83:e2:e2:98:b8:d1:ca:5a:d1:02:bc:0a:80:5d:
28:e5:ff:e4:77:8e:eb:6e:23:29:3f:e1:0e:80:dc:7d:08:af:
a1:86:c5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 18:16:33 2023 by rpki-client on console-fra.rpki-client.org