Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/agasIzFOmfo8crpCzBxxbCF8aSw.roa
File: agasIzFOmfo8crpCzBxxbCF8aSw.roa (raw, json)
Hash identifier: PTFwa+abCXcNyDhcQCTtOL8r/WpMfbdEuNzDespWaPo=
Subject key identifier: 6A:06:AC:23:31:4E:99:FA:3C:72:BA:42:CC:1C:71:6C:21:7C:69:2C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189BB0FBE838E9B908DD9A25FCC58CBC4AD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/agasIzFOmfo8crpCzBxxbCF8aSw.roa
Signing time: Thu 03 Aug 2023 11:01:58 +0000
ROA not before: Thu 03 Aug 2023 11:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 5.105.228.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:0f:be:83:8e:9b:90:8d:d9:a2:5f:cc:58:cb:c4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 3 11:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a06ac23314e99fa3c72ba42cc1c716c217c692c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:4a:b1:ce:09:2d:f8:d3:8c:6e:46:42:3c:
6b:e4:42:12:06:eb:a1:75:c0:cf:d5:f7:a7:d0:34:
62:2a:08:01:28:8e:6e:fc:4b:70:43:33:22:ae:cd:
17:be:aa:3a:71:2b:b6:eb:4f:0e:d6:f3:dd:7c:47:
00:69:38:71:9d:d2:9d:a0:a0:d3:6d:1a:3d:90:7a:
02:8a:92:26:8d:33:20:80:bd:b7:91:de:99:89:23:
fd:2a:3d:40:f9:87:88:fb:6a:d7:9e:37:a4:e0:68:
ca:ab:f5:08:69:7e:71:87:0e:8b:93:16:0c:87:20:
a3:e3:e3:40:83:f4:e8:64:78:3c:78:20:a5:8f:0d:
fd:7d:61:25:fb:93:5e:67:3a:bc:96:f3:cd:f4:a8:
00:62:7a:77:4b:50:a6:27:ef:86:29:42:53:e1:93:
40:ef:60:7b:9b:4a:19:fd:3f:57:4a:e0:05:7d:03:
4d:ee:25:f4:81:40:9e:32:71:2d:c7:2b:25:f1:fe:
7f:5a:6e:62:f5:cd:fb:de:33:6c:bc:71:9b:0b:cb:
79:4c:5f:1a:de:57:dd:a4:30:7a:3d:a1:61:2c:b4:
ec:67:52:01:d9:f5:ca:e3:d4:8c:de:61:21:58:85:
05:00:86:9e:f5:82:ee:e8:12:fb:17:3c:7f:21:61:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:AC:23:31:4E:99:FA:3C:72:BA:42:CC:1C:71:6C:21:7C:69:2C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/agasIzFOmfo8crpCzBxxbCF8aSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.117.0/24
5.105.170.0/24
5.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d7:c7:a8:2f:2c:2a:44:0c:2c:53:09:f0:db:e0:ed:91:4c:
8c:3e:eb:9d:98:37:60:0c:f8:0e:9f:79:d8:87:52:6e:5e:3b:
35:db:ab:ac:c4:dd:5e:d8:3b:62:a9:5b:2f:43:39:32:78:b1:
f3:ea:bb:f1:4a:4c:1f:f7:14:17:64:e7:33:89:53:84:81:13:
a9:b7:3c:37:09:98:25:64:3a:21:9b:56:60:0a:4b:80:9d:2a:
40:a6:cf:86:44:b9:93:04:29:d4:69:45:de:6e:d6:e4:ae:42:
15:aa:2e:21:5d:95:7d:3d:21:08:b4:ce:f9:c3:13:eb:03:f8:
bd:98:7b:96:70:28:ad:7d:0e:f1:75:83:31:04:ee:f3:31:9d:
d0:e9:07:56:0b:f3:cc:d1:d1:d3:c5:ea:4e:d3:9a:fb:11:79:
7e:20:62:c8:3c:2d:e5:7b:87:fa:5e:5c:bf:15:51:dc:e7:2a:
c1:6a:70:3d:73:f8:05:dd:a2:1f:6c:14:64:c4:3b:20:ee:f2:
f3:a7:b1:73:eb:9b:2e:73:94:40:ca:6f:fe:97:5b:7d:df:d9:
f2:a7:f3:e5:4a:b7:e1:73:f1:a3:b5:9f:dc:0c:a4:a4:72:a0:
4b:e4:7a:65:fc:32:ff:08:13:38:37:ee:2c:9c:8e:69:4c:85:
5c:82:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 18:45:09 2023 by rpki-client on console-fra.rpki-client.org