Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vtF5zyq9-GIVziMfOSiHq-uIEwU.roa
File: vtF5zyq9-GIVziMfOSiHq-uIEwU.roa (raw, json)
Hash identifier: Bu3gobigRPF6LxsC2c+9ua+ymWwFwmwAq7TivpJaA1E=
Subject key identifier: BE:D1:79:CF:2A:BD:F8:62:15:CE:23:1F:39:28:87:AB:EB:88:13:05
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188855FDBFFF779661B44CE3A45AD1902D3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vtF5zyq9-GIVziMfOSiHq-uIEwU.roa
Signing time: Sun 04 Jun 2023 07:47:11 +0000
ROA not before: Sun 04 Jun 2023 07:47:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 5.105.85.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:85:5f:db:ff:f7:79:66:1b:44:ce:3a:45:ad:19:02:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 4 07:47:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bed179cf2abdf86215ce231f392887abeb881305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:71:6f:ab:f7:c8:fd:02:08:98:38:aa:ee:
ea:db:33:15:0a:36:4e:4d:61:49:3a:22:f3:8e:e0:
94:fc:57:3d:6d:db:86:9f:43:0d:24:ad:4e:5a:05:
a9:86:f2:1f:21:c5:2f:ad:b5:87:a5:5e:fb:e0:9b:
7a:50:09:38:8b:93:7f:2f:05:81:ab:b1:18:68:56:
15:46:78:2d:84:49:e1:9a:97:55:af:16:42:6b:ee:
60:7b:6d:61:15:91:f6:eb:d0:48:fa:dc:82:d8:f8:
7b:5c:ac:69:9e:14:40:46:25:b8:90:79:3e:42:24:
93:45:d6:59:21:b1:e0:df:15:e4:36:2f:5b:3e:c7:
4b:21:8a:01:a5:ed:7c:76:b9:9c:92:90:7d:91:d5:
32:c3:ae:ce:d9:2e:59:dd:5d:19:43:e2:19:af:59:
67:4c:e4:38:b8:cd:3d:4c:99:39:7f:6d:a2:78:6e:
82:c2:6f:90:cf:62:2a:fc:ca:71:fc:0d:5a:38:04:
45:c3:93:4d:95:3b:07:fd:cd:5f:66:3e:1e:84:f2:
07:1e:37:da:03:f4:51:19:39:12:1e:c9:a0:3b:16:
c3:d3:77:82:af:fa:13:bb:64:42:d3:5d:b8:ee:01:
0b:14:07:6f:4f:97:cc:f1:d2:cf:5f:9b:3e:2e:bb:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:79:CF:2A:BD:F8:62:15:CE:23:1F:39:28:87:AB:EB:88:13:05
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vtF5zyq9-GIVziMfOSiHq-uIEwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.85.0/24
5.105.197.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2d:6f:01:50:4f:d7:8e:1c:e3:c6:13:93:29:a7:9b:d4:20:
c8:aa:07:53:1e:a3:8e:9a:b5:7d:5d:64:72:56:b4:a2:d1:ef:
28:56:65:25:e1:16:2b:df:d0:c9:42:67:3e:54:48:51:47:af:
5c:00:c2:f7:c8:73:a3:c3:be:a2:ca:77:a6:3f:44:a8:78:70:
d5:d1:bf:d3:56:a3:97:55:82:32:d4:7c:f1:4c:35:6e:5e:1c:
c1:4f:66:20:e7:b8:92:2e:38:15:2c:16:46:d7:3b:6c:f9:46:
0f:e5:78:85:07:b4:aa:be:fe:39:40:f8:c2:de:e9:f7:55:cb:
74:06:38:87:3d:44:aa:9c:57:d5:9d:6c:62:87:eb:e7:5e:94:
04:00:b4:d2:90:fd:8a:75:4d:54:41:dd:a4:26:60:f7:c1:97:
be:39:ce:06:50:8d:96:19:40:db:58:f8:ce:30:a9:7a:7b:02:
a4:ae:9b:e9:f7:0c:0d:7a:a5:60:d7:26:06:67:31:a6:83:11:
96:b1:d0:5a:fa:1b:de:5e:9e:e6:63:c8:76:10:30:c8:2c:3c:
e4:62:04:1e:4c:08:19:68:5a:dc:0f:e1:a1:b0:3f:82:e0:9b:
20:dc:90:1c:a8:69:49:ea:6d:a2:fc:ef:15:2b:a0:7b:1f:9b:
09:8f:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 3 21:05:31 2023 by rpki-client on console-fra.rpki-client.org