Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jwOKcy9QQtRn5fsjE4CU33UlYz8.roa
File: jwOKcy9QQtRn5fsjE4CU33UlYz8.roa (raw, json)
Hash identifier: E3WorV8t8HbtR4neoqwggwSeAV+hiasD4lq3rotcf14=
Subject key identifier: 8F:03:8A:73:2F:50:42:D4:67:E5:FB:23:13:80:94:DF:75:25:63:3F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01860759CD48A88BBA0CE313C8C44EEC97B5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jwOKcy9QQtRn5fsjE4CU33UlYz8.roa
Signing time: Tue 31 Jan 2023 10:22:51 +0000
ROA not before: Tue 31 Jan 2023 10:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400536
IP address blocks: 5.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:59:cd:48:a8:8b:ba:0c:e3:13:c8:c4:4e:ec:97:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 31 10:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f038a732f5042d467e5fb23138094df7525633f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:a3:bf:4a:b0:88:a4:c9:02:3f:40:f0:2a:
87:6d:51:1d:c8:48:35:e3:2a:ab:6f:b0:04:d5:cb:
69:55:26:86:41:4b:f9:62:f6:72:75:71:de:b7:84:
17:cc:22:a0:33:b8:a5:6c:00:40:4c:f4:a3:5a:af:
2f:81:ce:e0:f2:e3:c8:31:78:10:2f:dc:09:dd:7b:
c4:59:7a:12:81:4f:39:22:67:97:2b:cf:82:ee:e9:
50:ae:b8:1e:4f:36:bc:5e:83:43:93:dd:78:ff:1b:
6d:03:7f:fe:d9:5a:b3:75:f8:6d:ac:ce:f8:24:23:
12:83:f6:be:c0:ae:6d:9e:8d:4c:be:cb:a2:4b:90:
52:ca:bb:0b:07:55:22:b4:db:1a:8a:ef:10:b5:d2:
65:ef:a6:62:b8:f1:9a:da:96:25:1f:35:cc:83:70:
0d:09:c9:3f:b0:57:72:d7:57:ac:67:f3:28:7f:14:
5c:0e:4a:7b:20:64:9c:47:49:f3:4d:cf:af:96:57:
f6:05:cc:ff:e8:d0:6d:d3:53:75:94:aa:1f:28:5a:
ab:e0:52:21:63:89:1a:16:e6:ba:3b:c9:96:c1:17:
dc:88:4c:c0:96:0b:d2:0c:f7:85:2c:51:28:7c:58:
17:d2:65:ca:2a:7f:29:bf:ea:c8:44:82:f8:d9:55:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:03:8A:73:2F:50:42:D4:67:E5:FB:23:13:80:94:DF:75:25:63:3F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jwOKcy9QQtRn5fsjE4CU33UlYz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ed:7a:49:e3:3d:5e:13:aa:6d:2b:b9:6d:49:55:b0:49:84:
9b:34:c5:8e:8a:aa:c9:6b:56:64:ec:85:e8:b8:d9:32:0e:54:
73:7f:85:4e:e3:f7:85:e2:28:6f:14:d2:12:d3:bb:dd:e1:af:
92:90:35:df:eb:5b:a1:41:fa:d2:3d:39:21:ea:f7:eb:41:31:
4e:22:cc:bc:eb:4e:db:d3:c4:7b:a4:c5:a5:da:cc:12:50:55:
ea:b1:fd:9b:cc:68:c8:6d:90:b5:7f:96:bf:fc:da:22:06:68:
b7:59:3a:9a:9e:76:a1:47:c7:06:01:79:d0:b0:24:06:f0:6d:
02:fa:55:ad:79:27:9a:1f:ab:26:01:31:1f:46:33:7f:f4:41:
82:da:e7:cb:e2:13:7d:03:09:3c:0a:ff:10:f7:e7:1f:7b:3d:
bb:c1:57:a8:b8:13:81:35:58:67:5e:d0:38:63:89:af:f1:2c:
61:9c:bb:06:e4:51:5b:88:97:54:d3:b1:f8:71:5f:80:d8:7f:
49:5f:97:8a:3e:12:f8:49:c7:c4:27:0c:bb:ea:1c:32:3b:38:
73:86:68:9d:88:1a:0b:d4:00:ac:a1:a2:0a:c5:25:5c:d1:0c:
36:d1:43:4d:df:9c:ff:c3:97:3e:63:97:d9:0b:d9:8f:a7:32:
2a:53:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org