Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mwm_rZlD0Y07GAQKeToCl_q0ABQ.roa
File: mwm_rZlD0Y07GAQKeToCl_q0ABQ.roa (raw, json)
Hash identifier: 3RU8pv5gQrY18n26vOEfBQVxxPnXMD3lFIH6ubQSLO0=
Subject key identifier: 9B:09:BF:AD:99:43:D1:8D:3B:18:04:0A:79:3A:02:97:FA:B4:00:14
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01878E50EF3D5101B5E07E9CE527AAB97BAB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mwm_rZlD0Y07GAQKeToCl_q0ABQ.roa
Signing time: Mon 17 Apr 2023 08:24:41 +0000
ROA not before: Mon 17 Apr 2023 08:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 5.105.125.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:50:ef:3d:51:01:b5:e0:7e:9c:e5:27:aa:b9:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 17 08:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b09bfad9943d18d3b18040a793a0297fab40014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:cc:c8:56:7f:72:97:1d:ec:9c:9c:72:40:
be:a1:e3:51:39:bf:db:5e:a8:65:85:b3:58:15:81:
0d:2c:1b:38:3e:a8:93:b5:55:aa:14:af:d0:6b:80:
79:00:4b:85:49:ad:0f:3c:c5:07:d9:11:c6:67:40:
44:f4:34:bd:55:cf:66:73:6b:7d:85:18:dc:40:f1:
ad:cb:d6:ed:bf:aa:1f:09:9d:0a:c4:0c:4c:4a:de:
de:3d:a5:f4:42:06:5c:ee:ad:ff:83:87:a6:4d:fa:
d7:21:6c:be:5e:ce:c2:b8:22:81:2a:7d:f6:27:5b:
34:18:2e:62:f6:ca:eb:05:f6:65:0b:2c:05:1c:7c:
01:8d:e7:67:ba:63:4a:4b:81:3c:31:b7:02:99:cf:
0d:67:c4:75:14:2d:0b:34:2d:22:0a:e3:94:09:82:
e0:6e:4c:8e:6d:8d:d1:5e:0f:b4:96:ba:90:35:53:
b3:2b:c3:a0:2b:b6:90:72:75:a0:54:5a:60:1b:7e:
19:29:5f:fd:9b:36:a2:4c:e8:6f:61:88:13:e4:19:
bf:ae:40:31:a6:fe:f0:14:56:28:8e:2a:05:40:38:
0c:88:04:93:f8:c8:34:e3:f3:4b:f0:08:05:e2:78:
23:1e:a7:62:b6:4e:88:d8:a2:48:db:16:14:8d:6e:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:BF:AD:99:43:D1:8D:3B:18:04:0A:79:3A:02:97:FA:B4:00:14
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mwm_rZlD0Y07GAQKeToCl_q0ABQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.28.0/24
5.105.125.0/24
5.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0c:62:dd:03:9f:e9:21:72:b0:12:52:04:1c:e8:42:e3:15:
6c:08:60:f7:5e:c0:61:06:44:73:60:7a:b5:93:75:9f:b6:bd:
b8:16:6f:52:4f:a3:59:c1:c6:7a:94:85:d4:f6:68:15:cf:fc:
74:80:0b:9e:5e:6b:bf:93:75:5e:51:a6:1d:74:2e:93:55:62:
31:a2:c6:f8:6c:bb:8d:40:3b:26:73:59:1c:33:00:79:47:c5:
23:6d:bf:6b:96:7f:a8:45:1d:f6:ba:37:d4:0c:72:c1:52:64:
4c:c1:67:b6:1d:f3:5b:51:a2:fe:20:ab:d1:8f:66:4e:ee:8b:
9b:81:4f:a5:7d:ab:e3:ad:9b:33:93:49:8a:c6:f4:6b:f9:79:
61:71:f5:9e:73:5b:b2:37:18:d7:90:bf:5a:0b:a8:80:c8:20:
99:dd:a3:09:91:65:8d:f5:5e:4b:e8:01:85:f4:5d:da:11:85:
70:77:7f:54:fd:d8:e7:21:cd:2b:32:9b:47:1e:b6:4b:a2:43:
5e:33:8f:dc:15:00:cf:2f:14:6e:33:e0:d6:9f:44:f5:61:1b:
5b:4d:00:44:ab:bc:a9:86:a8:ed:68:0b:a7:93:05:cd:e4:a7:
94:a8:64:5a:ce:cc:df:7c:a1:8e:fb:ea:e5:72:37:05:ca:a9:
b4:04:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org