Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dcPe6JaI9JAlLv5MyJEUMhz7EAU.roa
File: dcPe6JaI9JAlLv5MyJEUMhz7EAU.roa (raw, json)
Hash identifier: xvwwxkgQqOIDMYRrgbWmpDx2G4LRvbUgOn90OsFOYak=
Subject key identifier: 75:C3:DE:E8:96:88:F4:90:25:2E:FE:4C:C8:91:14:32:1C:FB:10:05
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01896AB8DA98141F239798539B6157DA0725
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dcPe6JaI9JAlLv5MyJEUMhz7EAU.roa
Signing time: Tue 18 Jul 2023 20:37:26 +0000
ROA not before: Tue 18 Jul 2023 20:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 5.105.128.0/24 maxlen: 24
217.67.78.0/23 maxlen: 24
5.105.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 05:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:b8:da:98:14:1f:23:97:98:53:9b:61:57:da:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 18 20:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75c3dee89688f490252efe4cc89114321cfb1005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:f1:9b:e4:46:cc:be:98:47:d3:2f:0f:1a:
b4:10:5f:f0:94:a6:f2:ba:03:17:d4:6e:28:f9:a7:
d4:01:ec:39:70:e3:8a:f3:d6:9e:2d:e3:38:29:b2:
6a:d0:95:c0:3c:e5:10:3e:b9:7a:f6:21:ae:ec:2e:
99:39:6a:f9:2f:33:c6:f9:e7:dc:7c:c2:1f:c7:66:
20:64:9b:4f:ec:a7:61:ff:29:ad:3e:8d:42:ff:ea:
88:4f:29:ff:70:8e:26:cd:72:af:2b:7b:a6:a0:72:
fb:03:c3:0d:34:e4:08:0d:b4:65:06:27:84:a8:98:
9f:74:cd:a5:64:4e:7c:8c:e6:8b:0c:ae:e9:66:26:
bc:ab:c2:5b:13:5a:26:80:9e:a7:50:29:e8:a8:1e:
9a:7d:bd:70:03:43:88:64:06:cc:9f:1a:66:d7:d8:
e6:75:f9:ba:a3:31:fd:eb:8b:7d:bf:24:2e:81:b2:
4a:8e:6d:68:b1:06:92:dd:fe:c9:e6:8d:f2:61:27:
ce:20:77:1c:bd:76:26:ef:30:ad:f6:46:44:3b:f8:
b0:18:9c:16:c7:c0:e1:a4:d6:26:5c:f5:11:73:33:
60:85:2c:da:71:b7:d6:0f:37:4a:79:95:5a:4e:cf:
92:c8:59:0d:f9:9b:82:7d:0c:d8:44:d7:7b:5b:30:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:DE:E8:96:88:F4:90:25:2E:FE:4C:C8:91:14:32:1C:FB:10:05
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dcPe6JaI9JAlLv5MyJEUMhz7EAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.128.0/24
5.105.206.0/24
217.67.78.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:c9:62:1c:95:0a:49:59:17:80:4b:c0:1e:20:2c:ba:d8:ca:
8e:94:f4:51:b5:f6:49:81:1d:53:af:69:09:a1:9f:02:8e:93:
3d:71:9f:1a:07:d9:0e:1a:d6:65:ac:9f:df:a2:88:37:01:0c:
aa:6f:f2:d7:0d:25:9c:d8:5f:f6:38:06:8c:27:c7:41:8c:96:
ff:ce:5e:8a:93:f7:50:4e:df:ba:f6:d4:03:a1:cd:10:77:fa:
fd:1a:23:5c:59:93:91:b7:27:27:a7:3f:4e:6d:32:33:a1:14:
7a:2e:77:c5:0c:55:b2:c4:e8:41:e6:21:e1:a7:97:d8:1a:f3:
26:d6:b4:b9:13:ba:9e:cc:59:a1:00:4b:b5:4d:95:de:81:45:
7d:d8:19:8d:79:6b:51:9d:f0:8f:1d:d4:af:70:b9:f4:03:d7:
30:d7:bb:02:41:ec:5e:ec:fb:b4:00:2a:c3:ab:df:ec:7d:8c:
63:b0:d9:de:85:18:a1:4d:c5:78:67:b3:35:0c:c1:b9:a3:22:
8a:f7:09:92:16:80:8c:ea:c1:2d:65:82:cb:f4:ee:34:85:62:
63:a0:69:cc:58:91:db:82:a7:a8:2d:f2:8d:7a:5c:bc:56:3a:
f5:f3:4c:74:fb:f1:2f:48:66:25:e1:a9:a9:d9:a2:12:0a:4c:
85:c6:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:58 2024 by rpki-client on console-ams.rpki-client.org