Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uaEOPPrr43_9zxEdQ0mKcnuid2E.roa
File: uaEOPPrr43_9zxEdQ0mKcnuid2E.roa (raw, json)
Hash identifier: D6ESY42WmhNmYWyelszLqSchnIXMqPHegfFPVOb/sKM=
Subject key identifier: B9:A1:0E:3C:FA:EB:E3:7F:FD:CF:11:1D:43:49:8A:72:7B:A2:77:61
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889BA96D07342D77E56ED139042FEBFCBF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uaEOPPrr43_9zxEdQ0mKcnuid2E.roa
Signing time: Thu 08 Jun 2023 15:39:11 +0000
ROA not before: Thu 08 Jun 2023 15:39:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43072
IP address blocks: 5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:a9:6d:07:34:2d:77:e5:6e:d1:39:04:2f:eb:fc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 8 15:39:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9a10e3cfaebe37ffdcf111d43498a727ba27761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:cc:82:eb:fb:c9:d4:c1:30:c0:fe:95:ac:
08:a8:cb:33:16:33:1a:77:94:4c:5d:fe:34:1c:39:
70:ab:84:24:cb:6b:5c:a7:72:39:8c:fd:95:41:7c:
46:6c:36:6a:7f:c2:e4:07:e2:c2:71:2f:91:99:b3:
30:3d:cf:5b:0d:12:9a:68:19:99:ef:6f:c4:19:63:
e9:b0:e5:56:f8:62:c7:45:82:91:55:f5:9f:aa:4b:
c3:82:7e:78:02:f4:b2:81:ba:99:e4:db:2f:b1:33:
32:75:a3:2a:29:41:d5:d4:4e:e7:4e:e6:0e:05:61:
b4:11:07:5d:55:94:c4:6b:be:bb:0a:74:ce:32:6f:
14:1d:19:2e:48:54:a0:3c:c4:55:3f:1a:2e:dc:26:
79:87:41:33:e8:33:55:e7:03:1b:ff:ac:65:92:5c:
90:3f:64:b3:c5:b5:34:7d:01:1e:7a:ee:af:98:96:
2f:74:c5:bb:66:59:7b:36:96:ee:9a:fb:fa:21:fc:
ad:8a:ec:88:32:92:30:3c:0c:1d:f6:5c:2c:d9:72:
8a:de:dd:10:87:71:c9:5f:c4:aa:35:a4:d4:56:11:
ed:e9:13:14:e5:05:67:e6:83:75:50:7e:9a:7f:a8:
1f:b7:87:29:db:95:c8:25:c8:dc:f2:9b:be:b7:c9:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:0E:3C:FA:EB:E3:7F:FD:CF:11:1D:43:49:8A:72:7B:A2:77:61
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uaEOPPrr43_9zxEdQ0mKcnuid2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.62.0/24
5.105.117.0/24
5.105.165.0-5.105.166.255
Signature Algorithm: sha256WithRSAEncryption
56:c8:40:41:88:73:9b:1f:a9:4b:7f:34:7c:68:1d:83:a8:8c:
30:2b:a1:15:6f:f8:f9:ca:e7:15:d9:5a:9e:3d:a2:61:6a:a0:
ba:94:bc:41:a7:1d:07:c5:ff:40:b0:69:f0:aa:6e:d0:19:a5:
26:ab:60:fb:90:77:20:70:15:f2:67:37:7b:f0:f4:05:52:03:
61:18:69:20:61:78:25:ff:5e:c3:ad:49:2d:13:f2:bc:e0:c1:
41:73:af:87:90:f2:17:43:d8:8b:8e:8f:9d:ce:39:af:b6:6f:
76:db:ea:0c:ef:00:be:65:c2:62:1d:a9:c9:2e:b3:64:f0:04:
de:ba:07:44:eb:bf:e6:06:6c:99:df:9e:d4:c3:99:88:5b:08:
69:50:4e:40:fd:5b:60:a0:2e:d5:07:11:3b:b9:52:bf:18:92:
69:98:dd:d9:e9:e3:10:29:18:94:76:c1:9b:27:cd:bd:54:79:
2f:4a:ad:aa:b7:bf:46:08:4f:ed:00:32:a9:99:f4:17:d3:26:
fc:02:e3:e3:46:13:14:10:30:a0:2d:6a:b3:60:07:1f:aa:da:
40:4e:e8:92:f4:0d:99:7f:df:80:09:fb:43:e2:ba:93:a0:93:
10:80:1d:70:ee:b1:2d:2d:54:5e:52:10:80:cb:92:ad:1a:f1:
37:ce:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org