Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fFOgVlrgisbyds1KVtKtZzJI-vk.roa
File: fFOgVlrgisbyds1KVtKtZzJI-vk.roa (raw, json)
Hash identifier: Z0kHFvsM6Wo0fecY7PNGO+Wy3YWsONDR45K7wRdWIPI=
Subject key identifier: 7C:53:A0:56:5A:E0:8A:C6:F2:76:CD:4A:56:D2:AD:67:32:48:FA:F9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C418A2B1D430018528917009FD610650
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fFOgVlrgisbyds1KVtKtZzJI-vk.roa
Signing time: Thu 27 Apr 2023 19:02:41 +0000
ROA not before: Thu 27 Apr 2023 19:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:18:a2:b1:d4:30:01:85:28:91:70:09:fd:61:06:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 27 19:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c53a0565ae08ac6f276cd4a56d2ad673248faf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:17:5e:c3:ac:91:b3:e4:42:2d:ba:14:81:
50:dc:32:0c:57:2f:45:78:94:53:23:46:1c:5c:fb:
01:2f:54:77:3a:ee:d0:9c:5e:f4:f0:c4:64:38:d4:
7d:83:e7:98:c3:71:07:10:cf:d4:fb:9e:15:5d:df:
60:cf:3a:7b:7f:bb:77:71:10:e4:ae:c5:cd:c7:61:
e3:1d:bd:6b:00:36:83:1c:03:f7:c8:20:2e:bb:f3:
c6:64:d4:6a:88:6f:ec:af:9f:7f:f7:ee:d3:57:f3:
90:a6:45:99:39:84:52:d8:1b:06:36:16:31:80:5c:
8d:5b:f6:f8:72:10:d1:54:0c:5f:cb:46:6c:cd:49:
f4:4c:1a:75:37:2a:7b:d9:ac:cf:36:bd:3d:d2:4c:
94:e1:46:e0:8c:cc:a4:a5:bd:03:1d:11:19:da:bf:
98:cd:62:80:76:15:63:be:8f:31:4f:26:c0:db:c3:
31:a0:0c:df:0d:10:be:e4:ea:14:22:8f:61:37:3d:
51:a1:5e:18:38:dc:fc:fe:cd:73:a1:68:b6:54:eb:
9d:14:8a:40:fe:33:15:55:e7:b0:fb:46:fe:5e:1c:
21:91:6f:0b:22:e2:74:8b:84:54:d9:88:f5:68:ec:
54:9f:14:c8:97:de:fd:ab:8c:75:e4:3f:0d:e4:21:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:A0:56:5A:E0:8A:C6:F2:76:CD:4A:56:D2:AD:67:32:48:FA:F9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fFOgVlrgisbyds1KVtKtZzJI-vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/24
5.105.63.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5b:a0:b2:62:19:60:20:4a:bc:b7:d3:b8:26:f6:c1:7f:b5:
4b:06:73:37:32:84:c4:ec:8e:11:c9:01:f9:72:4f:62:42:1b:
be:bf:6e:eb:24:db:7b:4e:5d:df:59:8b:7f:3e:11:87:86:0a:
c9:5b:e6:42:e5:51:87:6e:bb:44:19:d9:2c:36:0d:a5:2c:aa:
4a:ed:46:cf:93:9b:63:ec:c9:af:e4:e5:7e:ab:df:3a:74:e9:
6d:b3:59:a5:b3:68:84:76:84:25:1d:d9:97:8a:43:8d:20:2c:
d0:11:0c:58:3c:94:f7:69:c0:a5:df:33:b0:df:4f:a5:a2:d2:
ed:c1:88:8d:c2:71:bd:29:67:df:8c:4f:3b:9f:97:a5:74:e9:
ca:ff:6a:10:a2:92:b9:b7:43:17:09:65:25:b5:72:c6:d1:4a:
20:98:f5:54:16:88:f7:24:e1:18:8d:0e:30:37:0e:6c:10:92:
9c:57:2e:34:fe:c6:40:ac:4a:99:68:68:55:61:77:d0:4d:8c:
10:ce:be:6f:74:ce:b5:84:01:7e:c8:d3:79:4b:15:06:53:ff:
c7:62:4c:e5:43:5d:95:22:4e:5d:48:17:45:39:d7:e4:c2:51:
ad:e9:0f:7e:3d:a6:60:92:3d:e7:4a:bc:29:2f:1c:00:7b:31:
fd:89:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org