Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c105bYzY8xHU8ppbR_RacpuAKOA.roa
File: c105bYzY8xHU8ppbR_RacpuAKOA.roa (raw, json)
Hash identifier: ukcK1zVPdUlJs6bKtFyZ7qSGgkIkI4uG2EHL+Tc309M=
Subject key identifier: 73:5D:39:6D:8C:D8:F3:11:D4:F2:9A:5B:47:F4:5A:72:9B:80:28:E0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A85B4D62518CB26DAC2658030766D4C22
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c105bYzY8xHU8ppbR_RacpuAKOA.roa
Signing time: Mon 11 Sep 2023 19:25:35 +0000
ROA not before: Mon 11 Sep 2023 19:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:b4:d6:25:18:cb:26:da:c2:65:80:30:76:6d:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 11 19:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=735d396d8cd8f311d4f29a5b47f45a729b8028e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:1c:ed:1e:57:94:51:a0:7d:fd:15:73:4e:
21:5d:2f:7c:83:70:1b:92:03:2b:28:2e:32:98:e2:
39:89:b0:75:f7:cd:06:b3:1d:39:01:9b:06:fb:01:
7e:68:a5:d4:ea:4d:08:df:be:21:77:27:19:3d:3d:
80:a5:c7:b5:11:a9:00:05:db:6f:99:a6:48:10:a4:
e9:c2:8c:b6:a3:df:3e:bb:03:e8:85:ad:d6:fc:85:
60:da:b3:56:b7:47:cf:d1:0c:63:c8:11:21:0a:69:
05:e2:5c:c1:82:8a:80:0d:ec:14:8c:fc:fc:d9:33:
aa:5f:12:c9:27:35:b6:6d:6c:54:b6:78:ff:e8:37:
69:f1:08:ff:c3:6d:ef:6e:b3:ba:16:1e:42:0f:6c:
36:8f:4d:4b:05:cb:38:85:90:69:f1:57:44:a4:4f:
62:77:5d:87:e9:2c:c9:2c:ce:d9:90:ee:60:17:97:
d4:2f:90:6a:88:fa:09:02:cc:01:1f:d6:67:f6:39:
47:3b:c7:25:8f:56:d7:72:87:7f:17:b9:b3:c2:45:
28:d0:2e:a6:4e:19:dc:b3:6b:a7:c7:ef:0f:05:2e:
7b:aa:16:d7:fb:0e:11:6c:fb:3d:74:9a:b7:52:d3:
fa:6c:40:f4:80:a5:6d:84:cf:0f:87:3f:b7:e8:06:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:39:6D:8C:D8:F3:11:D4:F2:9A:5B:47:F4:5A:72:9B:80:28:E0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c105bYzY8xHU8ppbR_RacpuAKOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5f:7d:24:e6:5c:83:0d:30:7b:dc:dd:04:a0:08:fd:27:f2:
04:4d:d8:50:a3:a7:6f:a8:54:80:cb:ba:46:52:12:1f:90:d7:
78:ee:58:af:0f:94:1e:9b:69:af:e8:b3:68:d5:1f:d5:38:03:
73:a4:4e:9c:28:94:fe:a0:53:df:0a:d0:a2:70:68:52:de:12:
8e:15:17:f5:b5:1d:83:78:4f:c4:ec:af:61:e2:67:db:76:da:
1a:7f:5d:62:65:47:1f:57:13:87:00:ba:23:5d:7d:ff:75:23:
b3:05:66:39:30:7f:0d:c4:21:94:5a:ab:5f:e4:03:f5:79:a7:
df:ee:50:03:67:b0:5a:0f:9b:c7:ed:17:20:09:fa:37:91:0c:
55:c5:b9:d0:27:0c:24:52:6c:b3:f8:72:d9:05:32:b0:2a:e0:
1d:73:62:1a:f3:87:6b:18:87:d9:fe:f0:c9:e4:83:27:02:07:
5b:ab:fd:f1:10:5a:94:11:87:52:fe:cd:a7:4c:cc:92:49:0e:
a2:31:51:7c:06:8f:a8:b8:1c:fa:eb:9c:17:2b:79:3f:92:c2:
db:4c:c6:2d:a3:36:b9:ed:88:47:0c:2f:41:fc:d1:5c:ee:16:
98:d4:be:d5:52:7c:b4:c5:a4:50:d9:c8:05:a3:fe:7d:0a:58:
ce:40:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 18:37:44 2023 by rpki-client on console-ams.rpki-client.org