Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e2ZrNWTyhCZfQk_W5rbwzj82IIM.roa
File: e2ZrNWTyhCZfQk_W5rbwzj82IIM.roa (raw, json)
Hash identifier: nbXZAeHRa9P6WHRN7UB6RxTathSnfrV5ENSIF61s98I=
Subject key identifier: 7B:66:6B:35:64:F2:84:26:5F:42:4F:D6:E6:B6:F0:CE:3F:36:20:83
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A3C2D5E4315FC166F0D26BBBD40B0DBFF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e2ZrNWTyhCZfQk_W5rbwzj82IIM.roa
Signing time: Mon 28 Aug 2023 12:45:20 +0000
ROA not before: Mon 28 Aug 2023 12:45:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 5.105.121.0/24 maxlen: 24
5.105.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:2d:5e:43:15:fc:16:6f:0d:26:bb:bd:40:b0:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 28 12:45:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b666b3564f284265f424fd6e6b6f0ce3f362083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:83:a6:63:12:c0:ac:72:c3:93:4f:38:cb:
2b:91:b5:a5:d4:e2:19:d4:ec:98:47:41:7a:a6:0b:
14:de:59:6e:3a:2d:0a:a1:15:28:96:0d:8e:5a:64:
f3:85:4d:9d:19:04:5d:b2:be:94:6f:90:91:f0:e3:
77:a9:c6:f5:57:c5:7a:9f:8b:a8:57:5f:97:9a:50:
66:7b:e9:9c:e1:e2:b2:53:9e:c1:6c:a4:5a:84:ee:
2b:f9:1b:b1:89:01:e9:82:73:66:f6:27:05:ce:73:
9b:4c:c9:6e:4e:5e:10:10:36:b6:68:f9:7a:53:f1:
8a:75:17:2f:66:fc:b9:81:87:02:11:72:34:6a:e2:
21:31:33:65:ca:50:f0:c1:8d:1e:65:fd:88:27:bc:
c0:d7:50:b9:e8:e0:5c:2a:d3:e8:d9:c5:23:01:04:
f8:5c:69:a3:71:1c:21:90:3a:d9:7a:e3:43:0b:88:
01:52:77:82:1a:32:32:05:5c:f2:86:42:4a:69:39:
18:89:64:69:8b:01:f5:f8:ef:fa:53:91:09:2a:d1:
c9:4d:88:71:93:1a:88:cb:7f:89:52:14:75:9f:38:
1d:bf:2f:21:fc:41:15:94:95:ee:f2:05:8f:c5:35:
f5:57:88:8b:d0:24:01:4f:b4:ce:9a:56:32:58:a6:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:66:6B:35:64:F2:84:26:5F:42:4F:D6:E6:B6:F0:CE:3F:36:20:83
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e2ZrNWTyhCZfQk_W5rbwzj82IIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.119.0/24
5.105.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f1:19:94:da:ec:78:83:03:3a:7e:ed:d2:3e:95:4a:73:08:
b8:c7:29:a2:40:ca:cb:6c:67:1b:54:31:50:10:29:21:27:b9:
e1:7b:00:5d:f7:d3:57:6a:8d:b7:7b:a8:89:32:a2:00:06:20:
20:20:1d:0f:5b:03:4e:4e:89:b0:05:2f:08:eb:80:62:44:a8:
03:ff:3b:ab:18:53:72:6f:cf:e2:db:01:4d:94:80:b0:b0:be:
02:3f:18:f1:ed:11:1e:17:98:11:c6:ff:06:51:ce:92:9a:30:
6e:16:8d:af:52:f3:87:4c:22:b6:f6:da:38:c4:08:ed:d9:8a:
48:52:df:ae:16:8c:5b:5f:a7:74:82:da:4b:f8:0b:cd:c5:ff:
00:ad:91:a9:30:1c:58:d1:c9:41:59:ee:1c:70:2e:61:cd:d9:
9d:60:7e:55:1a:28:4c:1f:a0:50:dc:c7:de:9e:f7:c1:eb:8f:
76:46:8e:33:43:c6:04:d4:f8:01:0d:db:13:f9:0a:88:2b:95:
d5:56:83:b7:67:7e:4a:de:e4:55:45:11:5e:9a:73:1a:4e:dc:
11:b2:bd:a4:0c:a3:c6:54:91:2a:c5:dc:91:53:ec:8a:12:5c:
a3:d0:7e:c7:75:e7:99:0d:46:3d:ce:5f:bb:65:a5:a9:14:7b:
bd:fa:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 21:10:36 2023 by rpki-client on console-fra.rpki-client.org