Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e-wdiO6MqEkHwRUYrJXc5nsQZZY.roa
File: e-wdiO6MqEkHwRUYrJXc5nsQZZY.roa (raw, json)
Hash identifier: UmFKl8W57kBjADQ+Dhndu5XVP30vVDQqc8yhKcPRTCE=
Subject key identifier: 7B:EC:1D:88:EE:8C:A8:49:07:C1:15:18:AC:95:DC:E6:7B:10:65:96
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188FD0EABF166268AFF87A8F55DC439AEE2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e-wdiO6MqEkHwRUYrJXc5nsQZZY.roa
Signing time: Tue 27 Jun 2023 13:32:57 +0000
ROA not before: Tue 27 Jun 2023 13:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 5.105.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:0e:ab:f1:66:26:8a:ff:87:a8:f5:5d:c4:39:ae:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 27 13:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bec1d88ee8ca84907c11518ac95dce67b106596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:7d:c6:49:8f:04:f5:8d:de:ba:9c:07:ba:
cd:e6:de:c4:ac:04:09:e6:7d:4a:54:d8:a4:bb:87:
f7:5c:da:58:42:5e:14:17:9e:e3:c5:4c:92:0d:11:
58:64:d7:0d:12:39:7b:d8:0c:07:63:23:6f:17:80:
19:e0:d7:1a:02:82:c0:c6:d2:32:9c:7e:58:66:9a:
96:c7:e7:b8:38:33:11:0e:9b:7f:5b:ce:3a:f2:f2:
4d:b8:62:cd:dc:fe:32:ed:15:be:d9:20:3e:50:2c:
d6:34:d0:98:54:9b:ea:38:38:df:5d:16:d1:f5:51:
c4:38:f3:65:01:b0:cf:70:a6:f6:ad:cd:c8:84:75:
0d:a4:39:74:02:5a:53:e1:23:13:cf:7b:33:4e:78:
e6:e2:fb:8b:6c:8a:20:00:45:81:ee:4b:16:db:ae:
46:21:12:1a:33:d5:29:64:ab:ff:2b:8a:3a:d4:aa:
7c:09:f0:85:7d:e1:70:c2:42:63:65:3b:55:45:ba:
53:ff:3a:c5:a5:d1:a8:01:3d:d8:54:74:7c:0d:81:
60:bb:a2:4b:32:5d:74:2c:a1:2b:e8:85:ad:ec:13:
7a:b3:6d:5e:08:57:b2:25:dc:0e:bf:59:57:6e:41:
ba:02:97:1f:80:d3:36:a5:b5:8a:db:a1:92:15:13:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:1D:88:EE:8C:A8:49:07:C1:15:18:AC:95:DC:E6:7B:10:65:96
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e-wdiO6MqEkHwRUYrJXc5nsQZZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.220.0/24
Signature Algorithm: sha256WithRSAEncryption
47:8a:84:fe:3f:40:cc:7e:6f:61:a2:11:a8:74:57:ab:77:e4:
e7:0a:13:a7:54:88:28:76:3d:9a:3c:1f:cf:ce:c0:a5:3c:b8:
e1:cb:7b:12:a1:d2:d2:6f:00:83:cd:56:d8:49:87:e3:13:83:
d6:18:84:cb:77:3b:ba:03:00:29:f3:5a:64:d0:f0:87:2a:7a:
65:f1:80:45:e3:b6:ca:1c:69:a5:09:11:72:21:38:33:7b:11:
94:4d:54:32:b1:1c:3d:29:c2:6d:80:c4:51:6a:49:73:d3:5c:
8e:f2:79:13:f7:a4:44:00:8e:ad:76:83:31:1b:9d:ce:72:a2:
d9:00:ff:cd:7f:d3:f0:f3:c4:2c:1a:c6:d6:b3:80:63:04:42:
36:f9:ee:8f:ed:08:96:38:0e:b2:dd:9d:78:88:ca:1c:c5:32:
13:69:15:cb:2d:9d:ed:f5:9f:ab:5e:21:a8:41:aa:92:5f:e2:
eb:8c:3d:e6:73:44:c0:c2:09:01:69:2b:d4:49:5a:0a:f3:75:
fa:a0:fc:4d:99:e8:21:96:7e:c8:83:66:ea:7e:d8:dd:84:b2:
81:3a:ee:c6:51:3f:01:fc:5e:87:ef:cf:b2:1a:b1:7f:4e:f6:
31:f9:64:b9:46:ea:ed:28:b7:f7:ea:26:a4:37:31:21:34:7b:
e2:60:d1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 09:00:47 2023 by rpki-client on console-ams.rpki-client.org