Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_0V57brLe5dqbYy20l_bT3mjs_Y.roa
File: _0V57brLe5dqbYy20l_bT3mjs_Y.roa (raw, json)
Hash identifier: qC779AMADgn8xXApg71NeuN+yK0OSUx8FCs1Zyo2sis=
Subject key identifier: FF:45:79:ED:BA:CB:7B:97:6A:6D:8C:B6:D2:5F:DB:4F:79:A3:B3:F6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189965B36F0FFE427F7F59CEA508EBCE951
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_0V57brLe5dqbYy20l_bT3mjs_Y.roa
Signing time: Thu 27 Jul 2023 07:58:27 +0000
ROA not before: Thu 27 Jul 2023 07:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.34.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:5b:36:f0:ff:e4:27:f7:f5:9c:ea:50:8e:bc:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 27 07:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff4579edbacb7b976a6d8cb6d25fdb4f79a3b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:47:e8:39:04:2a:71:02:d7:16:47:7e:01:
28:3e:03:24:71:52:5f:9f:c7:b0:9c:77:63:be:c8:
e1:9a:79:60:29:91:19:3c:05:5f:ca:11:ef:cd:61:
e7:11:de:3a:f4:f4:31:39:81:97:c4:ec:11:a9:76:
5c:ba:a2:57:99:d0:b3:7a:23:4d:be:26:05:ac:8a:
f8:37:a2:55:11:61:d4:59:ff:66:30:b7:ec:db:91:
0b:41:f4:f2:de:3e:00:16:ab:dd:60:7c:02:da:0f:
5c:89:8a:99:6b:86:e3:e7:aa:3a:a2:1c:f3:a3:ce:
5d:16:fb:c4:2e:15:34:a0:49:4d:ec:13:b0:37:94:
4e:22:6d:d0:a5:91:ab:a4:91:ba:1d:56:36:2f:b4:
9c:39:fe:9e:a1:61:a0:fa:6f:f6:4d:2f:e1:b7:bc:
e1:f1:d1:22:41:1b:44:fc:64:e9:a0:bc:ff:1f:13:
27:e5:2b:25:82:21:1e:8a:ec:9d:a5:08:9e:bf:f2:
e4:ce:c1:86:7f:e5:a4:81:6a:01:30:fb:94:87:67:
da:63:8f:8e:67:26:61:1b:9c:07:16:2e:2a:2a:d4:
78:0d:8b:ff:fc:f9:4f:82:55:33:6d:5c:dd:e7:b1:
a0:f1:06:be:5d:b2:cf:63:54:70:bf:eb:87:e7:0e:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:79:ED:BA:CB:7B:97:6A:6D:8C:B6:D2:5F:DB:4F:79:A3:B3:F6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_0V57brLe5dqbYy20l_bT3mjs_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.34.0/24
5.105.41.0/24
5.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:18:55:59:52:1d:5b:ef:e9:5f:e2:99:d0:88:f0:92:82:38:
e2:a7:e7:0a:21:79:96:98:ce:47:98:78:fe:50:2c:5d:62:d1:
9d:b8:3b:57:da:24:33:a6:f8:ec:4e:ef:9f:a4:fc:59:f8:a7:
b9:45:e7:e5:da:c0:b7:2f:13:fb:0d:46:9b:62:d1:56:c9:7a:
cb:cd:78:80:ec:e8:7b:90:8e:1f:90:85:4c:2e:bc:d2:5a:4c:
48:3b:ef:c5:32:90:5e:ad:58:d9:00:ec:3d:1f:7f:44:9f:b2:
1a:79:28:2d:9f:84:6c:d3:e7:6e:36:cd:d3:c2:7c:f2:e3:59:
f8:ff:9d:25:fa:07:d7:16:3e:3b:4e:b5:07:c7:92:24:df:4d:
30:31:a8:5c:40:82:fa:b3:cc:be:f0:90:fd:a2:3a:9d:4f:70:
ed:92:4f:cb:9d:33:1c:32:4a:13:8e:15:22:ea:d2:fb:ee:01:
69:39:00:ea:15:2e:c6:ba:2b:06:e4:cf:79:28:7c:2c:59:a2:
ab:04:7d:b0:df:4f:bb:9a:ef:18:a4:62:f8:0b:23:4d:12:15:
42:c5:32:95:29:01:f5:91:6b:df:53:24:c4:c6:a7:b0:2f:8b:
6d:e3:a4:af:7b:0d:f9:b9:d7:2c:a6:89:fb:31:72:90:85:a0:
46:2c:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 08:44:15 2023 by rpki-client on console-ams.rpki-client.org