Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dzdMHn19-HL0Q0BbaSiCshtCpBU.roa
File: dzdMHn19-HL0Q0BbaSiCshtCpBU.roa (raw, json)
Hash identifier: hG1iIB5A8YGmErISdNat4W3BGvFMx17OzwHkZeLiD/c=
Subject key identifier: 77:37:4C:1E:7D:7D:F8:72:F4:43:40:5B:69:28:82:B2:1B:42:A4:15
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889287320783D7EC4C177A22D03F8934CD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dzdMHn19-HL0Q0BbaSiCshtCpBU.roa
Signing time: Tue 06 Jun 2023 21:05:13 +0000
ROA not before: Tue 06 Jun 2023 21:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.37.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:87:32:07:83:d7:ec:4c:17:7a:22:d0:3f:89:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 6 21:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77374c1e7d7df872f443405b692882b21b42a415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:2e:b2:32:8f:24:4e:84:29:93:c8:d8:11:
3d:16:e5:be:c9:e3:00:fc:c9:fe:c7:61:50:b3:17:
2d:b2:5d:b3:bf:fc:70:e2:6b:5f:06:7d:38:30:27:
d2:37:09:bd:87:6b:77:7c:2a:b1:e5:4c:0f:15:dc:
59:e1:a5:f4:15:0a:d1:75:ef:3a:cb:d1:69:78:2f:
57:ee:d3:f9:d1:45:0d:ba:2c:07:01:33:2c:6c:96:
8d:7a:d6:80:96:02:f7:af:c5:cf:f2:ff:d1:20:07:
19:9b:46:12:1e:75:a2:ac:be:e0:8d:3b:1b:0c:bc:
9e:0e:54:8d:a7:71:24:28:48:57:b9:55:cb:0b:f1:
ab:9a:b0:ad:f6:9b:6a:46:53:f4:ff:da:7e:df:68:
a1:b0:d4:88:2b:0a:89:a5:54:1d:9b:27:3c:a6:a0:
4c:95:97:8d:49:53:91:b6:5e:7e:7d:72:d4:a9:1a:
f8:55:8c:4a:95:9a:fb:97:78:56:b1:56:f4:5e:bf:
9a:fe:2d:9d:13:9c:83:80:dc:46:41:9c:a6:11:dd:
47:96:2f:52:df:e3:9e:40:a6:9c:5e:84:f9:32:c5:
74:de:ee:ef:d3:f3:76:87:95:ea:b3:f6:e5:0d:66:
d6:39:c4:72:a5:d8:cf:46:e3:8b:8b:46:18:a0:c7:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:37:4C:1E:7D:7D:F8:72:F4:43:40:5B:69:28:82:B2:1B:42:A4:15
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dzdMHn19-HL0Q0BbaSiCshtCpBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.32.0/24
5.105.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:79:3e:09:5a:a2:41:75:44:a6:f3:4f:0f:d0:88:04:0c:01:
b2:e4:e3:5c:2f:f2:fd:1b:3c:11:5c:c5:46:c4:09:b8:08:99:
cd:45:93:4e:08:1f:dc:f9:dc:9d:c2:6a:24:12:72:54:e6:ab:
31:ff:c8:a3:cb:56:f0:f4:7c:92:fb:39:ae:80:13:f4:3c:e9:
a0:6c:25:12:26:ff:44:18:af:fe:ea:63:a0:c7:83:17:e1:6a:
92:64:34:4d:fc:cc:6a:14:c1:72:88:3d:52:76:79:88:3e:80:
2f:2a:b5:30:f3:46:08:ae:1c:e5:c2:e6:11:ad:12:ea:a3:1c:
d4:c3:16:fe:4d:7e:8b:7b:06:f6:11:00:a3:a9:bf:23:dd:c9:
eb:18:02:99:31:a8:6f:58:de:18:8c:b2:03:fa:a0:11:1c:d3:
78:a9:8b:d7:a3:d1:8d:79:b8:c5:21:c3:b7:6c:51:8e:5a:cb:
22:9b:1d:83:27:2a:fc:8a:23:f5:90:89:b7:4b:4c:56:ac:3b:
c9:70:f6:2d:08:a7:0d:63:55:7e:b5:14:ce:3f:5d:f2:e7:ce:
14:27:b7:6d:4c:ca:9c:65:47:dd:30:bf:98:d3:eb:e0:d8:8a:
25:b5:34:84:2b:80:f8:17:52:f2:00:83:7d:b1:fe:71:c6:5b:
d4:ac:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org