Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t-wHTe0OmrFHmTI9UB9MUiSTpjU.roa
File: t-wHTe0OmrFHmTI9UB9MUiSTpjU.roa (raw, json)
Hash identifier: luWHbmMSmxv4Mthn4seP3EMdUlfWPLSX1cw6fRNmPwI=
Subject key identifier: B7:EC:07:4D:ED:0E:9A:B1:47:99:32:3D:50:1F:4C:52:24:93:A6:35
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889AE0052BD1181919EF513A63EC2FD45E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t-wHTe0OmrFHmTI9UB9MUiSTpjU.roa
Signing time: Thu 08 Jun 2023 11:59:12 +0000
ROA not before: Thu 08 Jun 2023 11:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 5.105.121.0/24 maxlen: 24
5.105.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:e0:05:2b:d1:18:19:19:ef:51:3a:63:ec:2f:d4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 8 11:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ec074ded0e9ab14799323d501f4c522493a635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c7:0b:5c:a9:a5:05:61:03:da:85:d8:d1:a4:
8b:c2:8b:1b:83:84:27:39:c8:41:c4:48:94:80:22:
3f:ee:03:91:10:cd:dc:26:3d:be:4b:23:c7:f9:97:
01:ff:81:b4:df:c6:05:36:ee:c9:fc:52:de:81:6e:
33:14:c3:0c:3a:c1:47:65:ec:eb:76:4d:4f:36:01:
b9:75:93:95:8d:6d:8a:08:34:f4:1a:3a:f5:5b:8c:
14:3d:1a:26:37:2b:d5:29:8e:1b:a1:00:4c:e2:72:
3a:ab:4a:45:f3:c2:1d:02:f6:03:d1:9d:ec:29:52:
e7:bc:5a:54:97:64:d2:cf:f1:1f:e9:4d:8e:b4:91:
89:58:a1:34:66:ba:e8:d9:61:b5:97:7e:5e:d8:9e:
8a:00:0d:4a:94:b2:bb:aa:00:49:7e:9f:60:cd:2e:
3f:29:8a:e5:a7:1c:c0:ea:c5:6f:b5:3f:ee:ab:d4:
39:05:71:f5:c9:bb:0f:9a:c8:66:0e:e1:09:69:1d:
c8:ff:cb:9f:98:c3:32:a5:34:89:26:f4:39:df:71:
91:9f:3e:ff:64:82:f6:3a:ff:0d:f6:7b:94:69:d5:
93:de:23:62:72:0b:b5:85:c5:90:54:11:62:7f:67:
4d:96:12:3e:ee:ef:c4:de:92:4e:e6:cf:1d:e4:d1:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EC:07:4D:ED:0E:9A:B1:47:99:32:3D:50:1F:4C:52:24:93:A6:35
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t-wHTe0OmrFHmTI9UB9MUiSTpjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.119.0/24
5.105.121.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ca:3f:57:f1:ff:93:e1:e8:a8:eb:4c:97:24:7d:f8:c5:5c:
9f:5b:d4:0f:fe:2f:cc:a7:80:9b:f5:78:56:e2:2b:bf:16:46:
4a:a2:6c:6f:4a:dd:c8:8f:1c:7a:e2:24:06:92:c3:49:d2:8d:
c3:8b:15:a3:c2:9b:c0:02:83:64:bb:ba:ff:37:3d:15:b3:ae:
11:35:c1:0c:45:96:2d:8a:ab:e3:18:d4:1f:b8:d4:02:01:54:
f8:30:c9:00:c6:f8:ea:07:cc:2c:1c:61:b7:fe:38:34:92:d8:
b5:27:af:98:96:e9:a9:f9:a1:9c:d9:0b:91:be:88:2b:18:86:
6a:8e:b4:e1:e5:0b:80:15:0b:9f:1c:91:c6:59:27:55:8c:a1:
e4:29:86:6b:38:e1:63:95:a9:19:bd:21:61:20:ff:37:ee:1e:
26:80:c7:58:ef:dc:19:41:31:a7:2b:cc:5e:bd:69:f3:78:82:
04:08:24:aa:ab:27:4e:a7:44:3a:f3:e1:e5:d2:a1:e3:86:26:
46:57:88:12:b4:99:66:fc:46:97:cd:14:1a:cc:56:b6:ea:73:
b9:52:cb:27:bd:53:b9:06:53:a9:db:05:28:f1:18:8e:c8:06:
04:ac:c0:c1:3f:b5:e1:c7:b3:90:fa:bf:54:09:0f:29:e0:fc:
a0:f9:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org