Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mGN_DaYMER5abKjb8t1zGXPjL-E.roa
File: mGN_DaYMER5abKjb8t1zGXPjL-E.roa (raw, json)
Hash identifier: JBztrFZ1/0GN5K7uqMoXiF4MAfM5xK/SYPrB4aQhXTM=
Subject key identifier: 98:63:7F:0D:A6:0C:11:1E:5A:6C:A8:DB:F2:DD:73:19:73:E3:2F:E1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01899B9B35BF992077B4637D2F1C54E47B99
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mGN_DaYMER5abKjb8t1zGXPjL-E.roa
Signing time: Fri 28 Jul 2023 08:26:27 +0000
ROA not before: Fri 28 Jul 2023 08:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:9b:35:bf:99:20:77:b4:63:7d:2f:1c:54:e4:7b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 28 08:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98637f0da60c111e5a6ca8dbf2dd731973e32fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:89:53:01:11:23:bc:25:8e:2a:c1:ee:21:
ee:95:a7:8f:9c:fb:4f:43:31:05:cf:11:5f:d2:f3:
e9:48:da:c0:33:b3:7a:82:d4:58:4c:76:ed:2c:de:
ca:97:06:96:5d:d1:3f:8f:de:61:3b:be:3e:a4:90:
9b:01:d8:5b:a4:e0:79:62:8b:f7:5b:21:bd:3a:50:
2d:1b:40:79:ff:66:39:dd:1f:c4:36:d8:fe:71:c4:
ef:38:68:b8:b4:ea:a1:de:43:db:23:f0:e4:df:f9:
e7:73:01:b0:ce:e1:6d:d9:94:32:2e:7b:e0:08:2f:
c2:1f:4e:8d:bc:29:9a:20:5d:32:a5:ba:fa:8d:e8:
0c:e1:f1:99:38:04:26:c5:97:6b:6d:2c:be:3d:4c:
90:49:e7:bb:7f:5f:38:7a:02:b5:ab:2e:ac:a6:b8:
e7:89:55:41:e3:8f:40:e7:84:18:8f:47:83:a6:79:
d8:8b:00:a2:99:9b:00:dd:47:73:fd:9f:a5:1f:b0:
a7:d3:b5:28:af:9e:8d:fa:f1:a7:4f:67:de:4e:55:
06:2c:71:2e:b8:a0:d6:e9:cf:f0:54:77:86:9b:b8:
a5:56:83:a2:2f:67:ae:9c:aa:94:8f:df:d1:a7:8c:
b9:63:a0:7d:b4:e4:01:73:4c:5e:1b:0b:fe:52:33:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:7F:0D:A6:0C:11:1E:5A:6C:A8:DB:F2:DD:73:19:73:E3:2F:E1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mGN_DaYMER5abKjb8t1zGXPjL-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.123.0/24
5.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2a:e1:f2:d4:8e:08:0b:8d:51:95:82:6a:ea:db:09:7f:51:
9b:6a:00:68:54:44:da:b3:da:78:7e:e9:c5:3a:9f:dc:04:2f:
ab:e0:1b:82:16:1d:21:e7:a2:87:4d:47:89:e7:7c:73:92:9a:
c5:11:07:85:8b:e7:61:59:dd:e0:b8:59:55:a5:4a:ac:6d:c9:
32:f1:fb:72:0c:36:15:9c:20:de:ab:45:ab:be:a6:11:6c:64:
f1:32:93:b0:53:d7:f6:3a:d8:94:9f:e7:bf:e0:b5:a2:ad:ba:
2f:aa:c7:54:82:99:82:e6:d5:7f:06:25:38:1b:ec:fc:64:e8:
4b:62:c3:74:26:ff:cd:02:09:2c:54:31:59:72:08:96:a9:c6:
8e:b9:c3:0f:9c:be:e6:58:98:4a:e6:b3:62:17:f1:ae:ba:19:
1e:7b:bd:88:9b:54:19:2d:81:1c:a4:c6:70:c1:26:dd:20:26:
fd:52:7a:09:80:5d:01:82:2b:fa:d7:41:85:a3:9c:53:07:8b:
3c:76:03:e2:30:e3:1d:5f:25:d8:8f:21:60:3f:30:d4:6b:dc:
48:21:e6:ac:2b:fc:f8:1f:45:ea:96:cc:6b:6e:a5:c8:1f:4f:
ab:5f:e3:87:14:91:d5:aa:6e:af:19:af:9e:31:23:e8:aa:68:
fc:de:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:16:47 2023 by rpki-client on console-fra.rpki-client.org