Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eLjPCi5Qr9pVHru1pK1o7NG-EDs.roa
File: eLjPCi5Qr9pVHru1pK1o7NG-EDs.roa (raw, json)
Hash identifier: f9a77TotyALIwuNX0FwEOBDzp0QbDfZ5wP0S0/sCoHg=
Subject key identifier: 78:B8:CF:0A:2E:50:AF:DA:55:1E:BB:B5:A4:AD:68:EC:D1:BE:10:3B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A1D49A65CFB57A2A8FBAE19FF9BF94EDF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eLjPCi5Qr9pVHru1pK1o7NG-EDs.roa
Signing time: Tue 22 Aug 2023 12:48:00 +0000
ROA not before: Tue 22 Aug 2023 12:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.41.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:49:a6:5c:fb:57:a2:a8:fb:ae:19:ff:9b:f9:4e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 22 12:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b8cf0a2e50afda551ebbb5a4ad68ecd1be103b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3a:bf:2c:50:86:03:12:4c:10:a3:1e:f0:8c:
d1:b5:de:9e:6b:42:14:3d:77:6a:d3:07:33:8b:22:
8b:d9:a8:68:bc:d0:b0:23:eb:99:58:48:5d:9c:59:
50:2e:a3:9f:29:10:c5:73:f8:c2:d1:a7:46:de:b7:
f4:9d:be:88:bd:bb:3c:8b:fc:4d:20:ce:cb:0c:eb:
39:00:81:8b:86:37:5a:63:ca:cf:5b:45:54:65:95:
2b:45:7d:9d:1a:12:ae:92:d7:d2:b3:54:90:85:22:
02:99:26:44:d5:72:0c:11:59:b9:ca:3e:65:9c:9b:
0e:62:46:4e:bd:e3:2e:ab:b9:31:0b:a8:fa:25:c8:
eb:c0:dc:59:db:f9:9f:91:96:d1:70:8d:74:a2:24:
8f:a0:58:c5:c9:47:0f:9e:6f:97:4c:29:d8:e0:d9:
f6:57:0e:3d:c9:bc:1d:29:d4:bc:17:f2:27:76:8b:
e3:30:c3:58:5f:da:0b:0e:fb:47:f8:ba:6a:24:11:
10:f8:d9:b3:c0:c7:57:e3:38:4b:11:ff:2a:13:c0:
08:94:12:f1:73:c5:0f:bf:0a:cd:72:ec:e7:26:7b:
ab:f2:43:3f:0a:f9:f8:73:d9:22:12:f7:21:6f:29:
de:ab:52:13:eb:49:0a:8a:15:cd:33:93:70:ff:44:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B8:CF:0A:2E:50:AF:DA:55:1E:BB:B5:A4:AD:68:EC:D1:BE:10:3B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eLjPCi5Qr9pVHru1pK1o7NG-EDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.41.0/24
5.105.50.0/24
5.105.82.0/24
5.105.203.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:86:c4:5b:20:b0:28:98:0f:de:1a:cf:d4:0c:17:e9:97:fb:
22:48:b7:f6:d9:89:59:ec:82:df:11:e2:2f:41:3c:9d:b9:21:
5a:9c:3f:5d:7b:d4:b0:2a:71:db:f3:b6:90:76:8b:95:a7:ab:
71:51:b8:fb:2b:7f:f9:90:17:2f:e3:9e:58:19:5e:de:c7:9f:
75:b8:d8:38:ba:c2:dc:3e:c9:50:5e:dd:94:ef:4e:69:33:24:
d5:74:d4:17:6f:fe:5d:e1:c2:3a:57:bc:0c:ad:35:a3:b4:f2:
2b:82:72:08:c9:3b:5e:c3:50:30:ee:de:94:71:de:17:e9:d4:
f0:68:fa:2c:13:89:cb:89:3c:02:ae:96:41:ef:f6:da:00:fc:
14:ab:2e:3f:a6:9b:a9:74:aa:de:bf:ca:2c:2f:86:aa:8d:88:
fd:73:77:45:6f:e6:40:20:88:a8:17:7f:45:bf:be:27:f2:53:
a6:99:60:8d:c1:c1:da:b5:0b:71:f0:fe:44:af:cc:a8:d2:c6:
fa:2d:87:be:21:2b:b7:ae:83:8b:1e:51:ad:85:f3:8b:99:d8:
77:e5:6b:0b:38:92:99:1e:6a:b2:c5:7d:9b:20:af:27:96:30:
0d:3c:cb:39:ac:1e:20:8e:cc:10:a0:df:ed:c7:fd:1d:7e:80:
96:9a:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 10:01:26 2023 by rpki-client on console-ams.rpki-client.org