Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mJ3UxjOeGHWMC092PMiYl7YVUCQ.roa
File: mJ3UxjOeGHWMC092PMiYl7YVUCQ.roa (raw, json)
Hash identifier: lUP0JOViTPCPvF99MNO4gG0rYRl7dv4IkU+y4MizNL4=
Subject key identifier: 98:9D:D4:C6:33:9E:18:75:8C:0B:4F:76:3C:C8:98:97:B6:15:50:24
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189028240C538C6058048AAAC7FC2D72D6F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mJ3UxjOeGHWMC092PMiYl7YVUCQ.roa
Signing time: Wed 28 Jun 2023 14:57:17 +0000
ROA not before: Wed 28 Jun 2023 14:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 5.105.40.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:82:40:c5:38:c6:05:80:48:aa:ac:7f:c2:d7:2d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 28 14:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=989dd4c6339e18758c0b4f763cc89897b6155024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:f7:b3:cf:3c:67:8f:3f:e5:6e:62:ba:48:
c8:1d:76:23:06:33:12:4a:55:63:b5:97:a2:6c:e6:
76:d2:69:3a:2c:94:a6:04:c8:e8:d5:5a:54:24:7d:
4d:cc:22:74:8e:79:a9:cf:a7:d7:00:b9:7d:48:09:
af:84:fe:9e:60:d9:fe:c2:f0:f3:de:e3:6a:29:5e:
2c:ce:d7:71:ac:ee:97:4c:79:90:e1:c2:00:49:73:
87:3a:dd:da:fd:89:19:ac:0c:87:07:0b:a5:16:ec:
26:56:25:18:03:57:e3:82:ad:61:ad:3c:67:68:b0:
ec:9d:4e:d5:f9:3d:55:d2:33:9d:f6:c0:9d:3b:46:
a6:5b:ea:54:4c:0d:01:f3:bb:e7:6d:89:cd:fd:88:
71:82:a7:27:de:3c:53:19:84:da:56:e1:02:c9:6c:
8a:cc:8c:1b:8d:16:3a:18:bb:f0:fc:a9:55:ca:f8:
61:c1:59:7b:05:a8:af:dd:65:68:ff:cf:84:ef:bb:
ea:b0:cf:e4:25:7e:d2:ad:55:1c:50:a1:51:6b:c5:
52:ed:c0:99:e0:4c:6d:5c:8d:71:e0:2a:06:fe:94:
a6:30:de:8b:55:91:96:7a:86:dd:dd:e5:ae:33:f7:
a2:62:03:05:17:bd:bc:8a:3b:d4:30:70:b8:8a:c9:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:D4:C6:33:9E:18:75:8C:0B:4F:76:3C:C8:98:97:B6:15:50:24
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mJ3UxjOeGHWMC092PMiYl7YVUCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.40.0/24
5.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:6f:fb:e1:0a:a2:88:21:70:a1:37:4d:0e:de:83:f7:d5:d0:
d4:88:69:0d:22:d9:99:71:da:03:dc:be:79:dd:98:35:d4:95:
73:df:11:58:66:3d:68:63:85:1a:d6:f4:f5:36:9d:2c:01:2e:
63:23:f2:e6:4e:2e:83:d8:21:5e:41:d4:0d:01:97:c4:69:49:
ad:a7:42:cd:2b:b2:9b:55:15:03:95:dc:f2:8a:5b:12:1c:f8:
56:5f:64:07:00:c8:20:f8:20:e6:93:da:07:6e:b4:2a:e8:5a:
f4:10:c8:b5:7e:d6:16:6a:3a:06:9c:a9:3f:70:f8:9d:15:28:
25:0f:63:ef:35:e3:b6:28:8e:80:cc:38:62:3e:97:6f:0c:05:
87:92:33:76:a0:65:38:a8:97:b3:ac:88:cc:97:07:ca:f5:d1:
8b:aa:4f:9f:d2:39:2a:c1:be:d8:3a:e2:3c:76:49:2b:ea:7d:
7e:c2:6f:3a:c2:9c:94:37:92:9d:14:e9:b7:33:1d:26:24:60:
02:a4:dc:37:e3:b7:c3:b2:e1:f9:e8:0c:be:f7:db:dd:0b:29:
b9:ab:c8:c6:f7:33:34:fa:41:53:ea:ae:6a:8b:be:42:0f:48:
6b:27:25:12:ab:f0:f9:28:ba:56:87:25:25:73:8c:78:38:eb:
bc:74:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org