Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eYK0lv4aRtlP9--_KHWTi3w0ZA4.roa
File: eYK0lv4aRtlP9--_KHWTi3w0ZA4.roa (raw, json)
Hash identifier: 1QMB80isiDCmu0M4tDsJcok56RRXn7Fuj5fZcxUT9kQ=
Subject key identifier: 79:82:B4:96:FE:1A:46:D9:4F:F7:EF:BF:28:75:93:8B:7C:34:64:0E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AC32689745BDF709E26B8001B9F22AEA0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eYK0lv4aRtlP9--_KHWTi3w0ZA4.roa
Signing time: Sat 23 Sep 2023 17:46:37 +0000
ROA not before: Sat 23 Sep 2023 17:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:26:89:74:5b:df:70:9e:26:b8:00:1b:9f:22:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 23 17:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7982b496fe1a46d94ff7efbf2875938b7c34640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:cd:8a:41:e6:fb:33:c5:3b:5d:d2:a3:a4:
08:9f:e0:4b:52:1a:1f:24:86:0e:fb:20:4c:a7:4b:
ac:20:16:75:43:d7:41:ce:9e:04:a2:9c:84:cb:a7:
44:a2:89:65:82:5f:d1:30:57:b4:13:60:46:22:d4:
04:6c:75:38:5f:f3:ed:55:f3:1a:93:47:2d:92:08:
7c:e0:2a:52:dd:c7:08:d4:b6:cb:7b:5b:1a:d6:e6:
76:0f:ad:04:e1:0d:26:78:18:7b:fd:ba:55:6d:1b:
b7:a4:8c:aa:37:de:93:bc:b3:00:65:9a:d9:21:73:
a3:33:86:93:dd:55:17:72:85:7f:68:84:10:37:be:
0a:8e:f6:c9:61:7d:25:dc:73:85:fa:27:89:2c:e2:
bc:45:5d:52:4a:11:a1:63:34:37:de:22:a3:3b:35:
c0:cf:a9:ef:3d:11:f1:c8:5e:03:30:fe:6b:e8:ec:
0a:86:3a:6b:4e:3c:d3:d1:d8:b3:9f:f0:2e:24:4b:
f4:99:56:c3:f3:2c:2c:e7:c2:1f:46:bb:ce:e5:67:
6f:0d:99:a0:25:01:f0:c3:1c:e6:3a:c3:91:ef:a8:
93:4b:59:b3:23:35:7f:70:2d:09:75:79:fb:9d:c5:
83:a9:c0:89:41:c5:f7:ba:1e:c6:62:2b:4b:70:8e:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:82:B4:96:FE:1A:46:D9:4F:F7:EF:BF:28:75:93:8B:7C:34:64:0E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eYK0lv4aRtlP9--_KHWTi3w0ZA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:95:cb:95:03:8f:c3:90:46:16:1b:f3:3c:3f:09:0c:91:61:
40:35:48:a9:63:a0:33:f5:cf:0c:a8:6e:46:e0:a7:85:67:90:
f0:5a:34:1a:b6:3b:bd:f1:10:b7:6e:19:c4:03:18:43:d9:32:
45:59:4f:03:0a:73:f0:3c:b0:2f:cb:98:61:a3:13:98:2e:63:
f0:0a:4f:0d:c6:7e:b1:16:db:89:dd:4a:31:0a:5f:f3:78:29:
5d:6a:62:0f:af:9e:11:f8:11:52:da:65:fa:f5:c6:e6:fe:2d:
80:1f:11:e1:27:cb:1c:52:87:20:f5:e7:5f:5a:f3:9b:4d:0c:
64:69:45:37:5d:de:9c:79:eb:b7:24:65:e6:04:1f:dc:0b:e0:
ae:40:a1:f2:fd:e3:5a:fb:dd:fe:31:bc:36:43:76:21:e2:5d:
0f:0b:91:e9:bb:94:ab:9f:6a:34:2f:e9:64:8d:0f:e1:61:26:
cc:06:f5:cc:df:bb:aa:d3:bb:3e:2c:6b:58:3e:ca:b3:1d:76:
ed:ca:cc:23:1a:1e:6e:ae:1e:84:2a:4a:d6:1d:d1:4a:24:85:
61:05:87:dc:f9:51:78:3b:6a:1d:d0:26:2b:d0:d2:a1:6f:7e:
80:1d:f7:97:61:9e:7e:07:40:cd:c3:5b:6e:4e:cf:ea:9d:5a:
29:b4:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 18:24:17 2023 by rpki-client on console-ams.rpki-client.org