Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tEkGHmXlbPWJUK2lLDYi4ZqdNA8.roa
File: tEkGHmXlbPWJUK2lLDYi4ZqdNA8.roa (raw, json)
Hash identifier: y/dlWTwQNCl1Z1X9g8Y2DerkRTYQNpiO42mr1ZaFew4=
Subject key identifier: B4:49:06:1E:65:E5:6C:F5:89:50:AD:A5:2C:36:22:E1:9A:9D:34:0F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187D6932A30AC62D783B8FF5DC784DE7D99
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tEkGHmXlbPWJUK2lLDYi4ZqdNA8.roa
Signing time: Mon 01 May 2023 09:09:41 +0000
ROA not before: Mon 01 May 2023 09:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.84.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:93:2a:30:ac:62:d7:83:b8:ff:5d:c7:84:de:7d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 1 09:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b449061e65e56cf58950ada52c3622e19a9d340f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:a4:cc:8f:3d:b1:42:44:d6:3e:fc:0e:8a:
10:87:c1:d5:c8:6b:69:79:b7:98:42:f1:67:4e:f0:
ce:57:38:9b:27:53:a6:ea:3e:47:3b:8c:dc:89:07:
38:e1:b8:17:d1:7c:50:9d:f4:2a:59:9c:bd:ce:09:
df:2a:46:4d:8e:f8:6f:f3:38:77:60:12:70:ba:26:
d0:f6:1a:fa:d5:5b:01:a9:92:b9:4e:c2:c8:f5:50:
07:21:50:10:8a:ab:8b:6e:0d:19:f9:c1:b1:99:82:
47:65:e4:e4:91:5d:1f:3d:1e:89:a6:5e:60:9f:22:
da:be:f0:36:0c:d5:e6:fe:bd:29:a6:c4:a0:ed:67:
b7:22:5a:f6:ec:85:f8:18:f2:df:9e:db:a8:3e:6b:
37:53:48:02:0c:d6:aa:00:0d:ad:04:90:79:81:ba:
ec:2b:d4:62:1d:82:7f:b6:ce:77:42:15:4a:3c:94:
b4:e4:c6:05:a0:fc:60:bc:18:9b:df:a0:0f:1c:3c:
fe:3a:6d:e2:b1:71:f2:9f:dd:a2:bb:03:e0:4d:19:
e0:3b:07:e6:72:ef:d0:bd:0a:92:99:0f:7b:b5:57:
12:02:bf:bc:08:f2:5e:f2:82:e6:19:19:d5:9c:75:
83:e0:e6:db:8c:f0:c6:e7:f9:0f:f4:82:3b:35:3b:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:49:06:1E:65:E5:6C:F5:89:50:AD:A5:2C:36:22:E1:9A:9D:34:0F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tEkGHmXlbPWJUK2lLDYi4ZqdNA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.84.0/24
5.105.98.0/24
5.105.105.0/24
5.105.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f8:13:da:fb:56:a2:77:7f:35:9c:c3:92:0e:1c:39:0d:a1:
23:fc:33:35:ff:d6:19:27:df:84:7f:76:88:95:20:17:2b:e1:
1d:c9:56:a8:7e:32:98:e9:79:b8:0d:b3:4d:24:34:83:4b:2c:
04:77:27:80:34:2a:cd:1f:36:f6:42:a0:84:f2:83:41:e1:3e:
ba:4d:f5:e6:91:78:f8:13:ac:35:cd:58:c1:59:54:68:76:a0:
8c:d8:c6:bb:bd:69:c8:1e:08:f1:82:53:ad:7f:97:01:80:7c:
c0:f7:50:d5:7b:34:d5:9f:30:d0:e1:6d:6d:82:8a:6f:0e:a7:
d1:e3:22:2c:66:5b:d6:58:48:24:fe:8d:a2:c5:69:15:5c:14:
22:91:6d:e5:c9:4c:76:a6:c3:98:a0:8b:f7:d1:3e:d3:12:9f:
74:0c:9c:ee:17:8d:40:47:9c:76:65:0f:62:11:45:74:37:d6:
04:b6:2a:12:13:e2:63:c2:6b:de:ad:dc:51:07:9b:e1:8b:1f:
68:95:00:22:7b:2b:04:be:66:7d:73:8f:97:56:2c:97:0c:39:
1a:05:ba:20:ad:5e:68:5f:f5:58:35:b0:31:0c:5c:2e:37:c9:
ba:a1:cf:a4:aa:fd:74:35:7c:73:23:0a:75:c1:c3:58:59:27:
61:4d:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org