Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/o3oZzHwywjPJX-XI_CbzrfAGXe0.roa
File: o3oZzHwywjPJX-XI_CbzrfAGXe0.roa (raw, json)
Hash identifier: L+PXjKm3y9OmzeGLytpCUXtVzuvGAVpr0xRDrqrymLs=
Subject key identifier: A3:7A:19:CC:7C:32:C2:33:C9:5F:E5:C8:FC:26:F3:AD:F0:06:5D:ED
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863672A5289753FF48423F281AEF98F4C0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/o3oZzHwywjPJX-XI_CbzrfAGXe0.roa
Signing time: Thu 09 Feb 2023 13:52:08 +0000
ROA not before: Thu 09 Feb 2023 13:52:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 5.105.120.0/24 maxlen: 24
5.105.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:72:a5:28:97:53:ff:48:42:3f:28:1a:ef:98:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 9 13:52:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a37a19cc7c32c233c95fe5c8fc26f3adf0065ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:8b:80:ff:3c:fc:7b:94:23:d6:8d:4a:bb:
02:2b:c7:59:c5:e6:fd:ef:29:b2:73:38:f4:43:54:
1f:d4:cd:3d:f7:83:be:79:7f:a0:18:69:82:b8:3c:
d8:8f:07:80:3a:f0:56:b7:9a:24:f8:41:a2:2a:79:
c5:02:e4:9e:d1:b9:60:7d:e5:3c:ac:d1:f4:81:09:
33:e3:88:6a:18:25:75:99:e6:14:46:d9:a6:f6:99:
57:dd:35:43:d1:39:8b:b4:f1:ef:0a:cc:71:c7:85:
c8:ce:63:58:32:cd:e4:62:3b:cc:0e:02:91:0c:b3:
46:bf:a1:72:40:7e:c2:4b:e7:3e:8d:7f:7a:5e:06:
57:a6:6b:09:f4:be:bd:df:25:49:9f:c1:f8:93:ac:
74:23:5c:33:a1:eb:6e:c2:bf:44:bf:9d:77:bb:cd:
41:30:16:d0:51:fd:8f:05:39:82:94:6b:b4:f0:45:
1f:92:dd:78:38:5f:7f:01:2d:e4:26:36:6d:8f:4f:
58:87:af:26:21:48:02:b0:ac:34:e2:ac:49:40:d8:
85:f5:ca:33:30:bf:65:39:06:82:7b:23:ca:00:91:
c4:6c:82:d6:3e:70:03:8b:91:08:5b:6b:d4:c1:b4:
d4:06:b1:07:37:62:96:68:2e:82:d5:ae:e1:73:27:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:19:CC:7C:32:C2:33:C9:5F:E5:C8:FC:26:F3:AD:F0:06:5D:ED
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/o3oZzHwywjPJX-XI_CbzrfAGXe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.97.0/24
5.105.120.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a8:c5:1f:27:99:b0:7d:e5:5a:da:a8:18:6f:10:ab:01:ca:
fa:cb:81:fb:c0:67:33:78:c5:c7:40:6f:36:c7:05:74:18:ed:
0c:fd:42:4c:df:24:16:33:29:01:e8:35:b5:84:a2:17:be:c8:
7f:e1:17:97:31:e0:bc:26:00:a4:bf:16:79:60:15:fa:7d:d1:
20:8e:6c:3c:58:59:c7:03:a3:d1:c4:e8:18:86:0d:7a:9c:4a:
1f:b5:d1:25:0e:7c:68:0b:79:ef:04:6c:8e:af:cd:ed:7d:4c:
0f:ee:b2:74:8f:5e:48:71:11:54:9f:1c:c9:6a:19:8e:44:be:
1d:02:ce:a2:7b:69:ab:f5:f9:3b:06:42:d2:c2:07:8f:b3:01:
31:82:a2:71:6c:9b:2f:40:76:bc:ca:f5:08:86:06:98:5a:88:
14:97:aa:04:75:8d:77:ec:41:60:fb:d7:b4:bf:94:c6:e8:96:
f8:64:37:ec:90:cd:ff:d6:fe:bf:40:05:ba:1f:c6:82:fc:8d:
6e:df:a5:93:c8:05:cc:df:a2:f4:1d:fa:ca:a1:66:67:45:01:
09:29:c1:ef:2d:6e:55:05:31:f0:55:b6:fd:87:19:2d:4d:0d:
8f:4e:2e:c4:d3:53:d0:9a:ff:cc:3e:20:d9:f3:b2:79:2b:62:
af:b2:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org