Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mIkzhSAmvLlKIt_Jd-yjVsXflpE.roa
File: mIkzhSAmvLlKIt_Jd-yjVsXflpE.roa (raw, json)
Hash identifier: 3LNtuhIm0OYXGrbWpXJaUaY2wMqjJEgaoNBf8yUhuvE=
Subject key identifier: 98:89:33:85:20:26:BC:B9:4A:22:DF:C9:77:EC:A3:56:C5:DF:96:91
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889AE0057E312370CC9C6718F8E64CE0B8
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mIkzhSAmvLlKIt_Jd-yjVsXflpE.roa
Signing time: Thu 08 Jun 2023 11:59:12 +0000
ROA not before: Thu 08 Jun 2023 11:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:e0:05:7e:31:23:70:cc:9c:67:18:f8:e6:4c:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 8 11:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=988933852026bcb94a22dfc977eca356c5df9691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:bb:8c:5e:4a:16:49:c2:d8:4b:d2:f2:9b:
22:7b:bc:fc:df:35:62:1b:7e:be:7b:61:82:dc:85:
74:e8:0f:29:7d:8d:03:0a:ee:e0:41:7d:55:d8:98:
8b:c1:6c:e9:4e:16:a5:5f:79:f6:30:b5:30:3b:37:
9e:ae:f1:27:06:58:6b:af:0b:2b:81:28:1d:35:58:
6e:dd:97:7a:8a:d7:d9:17:43:67:e4:05:4f:10:f2:
dc:a0:c5:4f:f1:82:00:24:51:ce:14:02:7b:ad:7e:
2a:21:8d:bf:be:59:f6:14:a7:03:62:23:81:9c:00:
e7:27:e7:2a:da:dc:07:96:30:b2:ae:78:56:99:89:
4e:6a:36:9b:10:25:90:2a:43:12:08:3b:e0:4d:eb:
4d:89:af:e9:51:f2:0a:05:ad:9f:28:c9:8b:62:b7:
e6:f4:75:e3:95:7d:f0:35:20:fd:d0:be:b1:cd:c6:
83:bb:4a:21:ab:c2:13:8c:6c:15:0e:52:7b:1e:7b:
b2:fa:a9:5b:97:b5:b8:27:47:bf:12:bf:fe:6d:46:
b5:b2:2d:8f:0f:ea:48:a2:45:07:e7:f6:85:7e:ed:
0e:62:97:b8:9c:41:a3:70:6e:df:e7:58:26:5a:1d:
41:5c:73:25:31:a3:1e:82:08:a1:3c:34:ee:8b:be:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:33:85:20:26:BC:B9:4A:22:DF:C9:77:EC:A3:56:C5:DF:96:91
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mIkzhSAmvLlKIt_Jd-yjVsXflpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.22.0/24
5.105.45.0/24
5.105.47.0/24
5.105.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:38:24:54:23:2e:64:a1:99:bd:c6:fa:b2:5b:d5:09:88:e9:
3a:bb:fb:e6:7c:54:89:db:95:ad:b3:6a:39:41:ed:0e:9e:f4:
cc:1f:02:ca:93:9a:19:db:db:4c:40:83:5c:88:38:0b:82:0f:
c3:04:8b:48:80:bf:f1:bb:84:7c:d7:50:db:31:a4:60:49:0c:
23:1e:22:1b:be:a2:59:cf:c6:61:c0:50:88:2a:ec:56:85:f5:
47:b2:4a:52:94:33:94:e6:4a:a3:c0:65:af:5b:64:ed:02:14:
60:38:09:48:79:db:90:d9:cd:fc:17:c2:a3:6f:92:31:6e:2a:
16:61:e4:f7:e4:69:56:74:98:90:07:fb:16:3e:49:6d:7c:7d:
09:df:35:6a:d3:37:8b:0d:18:36:c7:9d:bd:b3:7b:e3:7e:e3:
98:15:51:74:3d:16:9f:cf:56:8b:27:79:db:c8:8d:80:36:bb:
b9:91:d5:2f:74:89:c4:f2:a6:21:0b:39:7d:10:11:67:94:42:
74:bb:a9:65:b2:e0:23:81:52:f2:f6:52:76:f3:2f:71:05:de:
41:7f:7d:4e:cd:2a:43:c3:c9:d2:e4:05:c5:a0:d9:60:42:10:
0a:99:37:c5:c7:4d:96:b1:0f:0e:0c:e3:a9:db:07:51:a4:5c:
02:77:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org