Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hyeVhNzPCXIaHPNZZSzRwXxNCZA.roa
File: hyeVhNzPCXIaHPNZZSzRwXxNCZA.roa (raw, json)
Hash identifier: U/iJi9VxqG3PV5SuBmr2FuFHnuAo+nbBpGWTbXdBLR4=
Subject key identifier: 87:27:95:84:DC:CF:09:72:1A:1C:F3:59:65:2C:D1:C1:7C:4D:09:90
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B9481E2AC2005A4B0692270A1A4F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hyeVhNzPCXIaHPNZZSzRwXxNCZA.roa
Signing time: Sun 01 Jan 2023 05:54:55 +0000
ROA not before: Sun 01 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 5.105.231.0/24 maxlen: 24
5.105.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b9:48:1e:2a:c2:00:5a:4b:06:92:27:0a:1a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87279584dccf09721a1cf359652cd1c17c4d0990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:4f:9a:3b:14:5f:a6:a6:81:ee:02:bd:6b:
22:66:8b:7f:0f:cf:25:0a:55:8f:c7:cd:68:04:bc:
c6:ca:8b:e1:59:63:40:76:0b:6a:c1:1c:1f:1f:4a:
24:fe:3f:e2:71:d9:10:a1:1d:93:fd:39:4f:5b:66:
37:3e:5b:e8:3b:2d:16:55:70:ee:d7:b3:97:fa:2c:
c2:ec:31:1c:16:71:50:7c:f0:f5:71:58:e7:7c:37:
7e:ef:f2:77:ad:e2:58:f6:42:5d:0d:e2:d6:f7:a4:
70:d0:20:57:c1:0f:08:e5:8c:a6:14:1c:8a:d7:99:
40:8e:c2:b9:71:79:4a:76:20:00:0e:2c:b3:ba:2a:
29:21:3d:2c:6e:1c:dd:d0:c3:4a:4f:fa:94:ec:b5:
bf:97:52:7a:5d:18:9a:94:c2:d3:af:d8:3f:34:a0:
6c:03:eb:cb:c8:80:2b:74:a9:ce:e7:f7:7b:f3:ce:
98:18:f3:22:f5:86:4a:54:d4:30:a5:8d:52:1e:b3:
fc:f7:a5:40:a8:b8:50:f7:e0:eb:2a:bc:01:3b:d3:
25:ba:7a:85:01:42:22:72:75:53:ac:14:50:ed:d1:
d7:6e:d4:83:d6:ac:bf:90:1b:69:6c:a6:d1:12:e3:
5c:25:81:ea:c7:3b:da:0e:5a:ff:eb:71:8e:a6:e2:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:95:84:DC:CF:09:72:1A:1C:F3:59:65:2C:D1:C1:7C:4D:09:90
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hyeVhNzPCXIaHPNZZSzRwXxNCZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.231.0/24
5.105.237.0/24
Signature Algorithm: sha256WithRSAEncryption
17:34:32:71:dc:77:d9:f4:d2:78:ce:7c:27:18:16:22:d0:39:
3a:27:67:8a:f9:40:a8:18:5e:c9:12:3c:9b:53:e4:02:f0:f0:
c1:ad:53:d2:67:f1:47:2b:c2:b4:a8:3f:37:a1:c5:3c:06:4c:
4e:b6:b1:9a:80:d0:ea:b6:46:56:7e:0a:a9:50:5a:af:43:cf:
0b:91:a9:59:dc:d4:cd:d4:32:0d:f7:8c:5a:76:6f:63:00:5f:
73:28:6d:d8:f7:13:a4:47:9c:2e:ff:48:d8:dd:3a:5d:ec:3a:
98:51:c7:17:25:04:35:16:4a:6c:f7:de:aa:a3:f3:99:80:85:
49:df:19:90:a1:d2:4d:e0:96:e7:a6:e8:84:14:fd:af:e7:7d:
a0:6a:e6:52:7e:16:3d:50:98:27:fc:22:49:66:9d:cf:94:8f:
df:d0:33:49:74:2f:b9:71:ca:47:36:f5:0a:7d:91:76:7d:2f:
59:7e:84:51:6e:ba:39:f4:ee:c2:51:92:35:95:3e:a4:87:af:
98:fd:d2:a7:e1:10:ed:08:c2:50:26:28:31:ef:1d:12:dd:05:
ad:d0:35:05:d6:75:8f:75:26:d1:93:0f:86:2f:b5:f0:53:bc:
e1:d8:a3:96:94:1b:4a:eb:9f:c0:00:6f:e9:6c:ba:51:d9:26:
54:6a:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 21:10:36 2023 by rpki-client on console-fra.rpki-client.org