Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f-Ne-wEtQgC9msrDEDQz1m19zGM.roa
File: f-Ne-wEtQgC9msrDEDQz1m19zGM.roa (raw, json)
Hash identifier: YAuhwuv6UZrgmSrjfRon4zo1G1wGGWWJjw4Wba77ytU=
Subject key identifier: 7F:E3:5E:FB:01:2D:42:00:BD:9A:CA:C3:10:34:33:D6:6D:7D:CC:63
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B1B6980B1709EC8B48AD09BF4E2C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f-Ne-wEtQgC9msrDEDQz1m19zGM.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 5.105.25.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 08:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b1:b6:98:0b:17:09:ec:8b:48:ad:09:bf:4e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fe35efb012d4200bd9acac3103433d66d7dcc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:d7:54:a8:0a:64:be:38:29:24:87:61:74:
ae:4b:c7:ec:aa:42:90:a4:12:32:2f:34:8b:06:d3:
52:0b:8b:b3:06:02:79:49:0e:32:eb:07:10:34:32:
fb:62:53:df:f3:da:08:e2:6b:4c:bf:9f:dc:2f:48:
95:b2:fd:42:23:b5:c0:47:df:21:47:da:94:81:2d:
24:87:27:4c:52:83:58:47:f8:8c:1c:34:18:cd:29:
e6:3d:d4:a9:1f:08:d9:63:1f:3a:fe:bc:5b:99:d4:
ae:b9:00:43:a4:0e:cb:77:03:a5:77:38:6e:99:fd:
a4:2e:05:1c:d1:e3:a4:0a:92:5c:2b:44:d2:a3:9f:
c2:29:11:06:0c:58:5d:ed:f5:c7:1a:87:1b:f8:65:
0f:cf:5e:37:a5:69:84:60:1b:7a:b8:fd:c1:1d:0b:
46:c6:80:90:70:2b:f5:1d:97:08:95:4e:9d:ee:d9:
84:db:b6:94:87:cd:bf:58:4e:dd:d7:b7:c6:66:6c:
6d:59:11:0a:26:ff:23:5e:34:c0:b4:b2:6a:f9:f4:
69:24:85:2b:76:94:93:62:e1:33:dd:d0:9e:67:06:
02:d3:a0:43:0c:e0:ac:31:f1:b1:32:a5:c0:96:38:
ae:27:f4:93:f5:e1:de:b6:f6:aa:23:7a:9f:68:0b:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:5E:FB:01:2D:42:00:BD:9A:CA:C3:10:34:33:D6:6D:7D:CC:63
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f-Ne-wEtQgC9msrDEDQz1m19zGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.25.0/24
5.105.59.0/24
5.105.62.0/24
5.105.71.0/24
5.105.117.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4f:7a:a8:dd:73:de:b8:63:1b:46:1c:73:56:a3:ac:48:ee:
d9:5a:b2:3c:c1:93:5d:55:ea:b2:41:9e:ca:9b:67:b0:c2:00:
06:b2:81:5e:38:95:78:3a:91:a3:8d:c2:21:46:97:5d:0f:0c:
38:fe:d7:4a:18:87:e5:4b:91:04:a9:22:c4:d1:fa:3a:f4:d7:
e8:73:df:28:24:d2:85:b4:79:46:64:d1:bf:e3:98:e6:95:b8:
ac:17:c4:d8:32:b3:e2:f8:b9:57:7f:7a:92:04:5c:9d:23:97:
ba:53:fd:47:16:d0:ac:5b:ae:df:6f:61:f4:51:e6:8a:b5:8e:
3a:28:62:9e:df:50:00:a9:6d:cd:82:3a:37:d6:5f:01:83:82:
a8:8f:00:70:13:98:a5:e7:c4:e4:04:18:16:30:83:10:b9:5c:
2d:29:1a:be:fd:c9:1b:e1:18:a6:da:4a:87:60:d4:9b:45:d2:
07:c4:50:3b:61:4b:e8:87:e0:a1:57:d9:75:59:e2:c2:66:ce:
2d:6d:91:b5:f9:b2:16:fc:a7:2d:63:79:be:6c:cf:56:08:27:
bb:1f:7b:b8:9c:be:5f:b0:4b:88:43:57:fd:fc:1c:11:5f:95:
41:a8:83:2a:11:d2:ca:47:b7:b6:2d:60:c1:97:b2:cc:49:03:
24:2e:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:28 2024 by rpki-client on console-fra.rpki-client.org