Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ynY48fHPmrTE_s70m3uMZ9MPZkE.roa
File: ynY48fHPmrTE_s70m3uMZ9MPZkE.roa (raw, json)
Hash identifier: B7YXVhUCzTX7PFXR/6KndzB4a2M2wEbYF7TFuPj2mIU=
Subject key identifier: CA:76:38:F1:F1:CF:9A:B4:C4:FE:CE:F4:9B:7B:8C:67:D3:0F:66:41
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A66E12E5D627C3C61C1CDB5B4C20C714E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ynY48fHPmrTE_s70m3uMZ9MPZkE.roa
Signing time: Tue 05 Sep 2023 19:45:48 +0000
ROA not before: Tue 05 Sep 2023 19:45:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60458
IP address blocks: 5.105.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:e1:2e:5d:62:7c:3c:61:c1:cd:b5:b4:c2:0c:71:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 5 19:45:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca7638f1f1cf9ab4c4fecef49b7b8c67d30f6641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d3:d4:de:14:2b:83:fb:8f:b3:7e:dc:7f:ca:
c5:53:58:d4:75:80:7b:4b:a8:b4:15:35:39:cd:42:
4b:76:7b:91:53:9a:b7:d7:2e:a6:30:15:78:8e:0a:
94:d5:9d:ec:17:70:85:90:6a:08:e4:4e:9c:8c:31:
06:78:a2:82:80:08:7d:3a:b6:95:74:e0:0a:90:39:
ef:76:75:d1:7a:9b:13:e0:27:92:1c:bc:ac:e8:3a:
31:fe:72:f5:e4:d4:58:f1:a4:e4:27:50:0c:d5:a6:
15:4b:72:68:eb:89:5a:42:b4:ca:79:e8:9a:44:bd:
66:2f:74:9d:7d:09:53:24:66:83:c2:49:b4:8c:84:
37:9e:32:6a:5d:1a:6c:89:5b:c4:6b:43:e1:4c:c1:
54:98:b0:45:a2:48:7c:2b:8b:e3:c3:9a:6d:c1:e8:
b9:87:ca:31:91:70:00:79:ca:42:69:f0:8d:ae:ba:
e5:9a:4a:51:82:79:49:c7:b5:2f:39:7b:b4:b3:6b:
53:4c:a6:dc:68:c3:ed:04:02:59:10:3c:42:3d:60:
20:7c:46:0e:1e:0b:c9:97:d0:84:72:64:9d:d3:d6:
e0:e4:a8:bb:2b:9e:88:db:d4:50:2c:90:08:a9:e1:
6e:01:53:4f:46:d3:59:9e:1d:fc:a4:81:8a:7a:6d:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:38:F1:F1:CF:9A:B4:C4:FE:CE:F4:9B:7B:8C:67:D3:0F:66:41
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ynY48fHPmrTE_s70m3uMZ9MPZkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:02:4f:a2:01:0b:11:2a:27:56:a7:95:14:89:5a:25:0f:73:
f6:f4:01:9a:d3:0c:0d:a5:a7:66:33:71:06:40:0d:66:fd:38:
87:83:5a:95:1c:7a:a1:13:e1:e0:c1:1b:94:d6:09:eb:66:fc:
89:37:8a:e6:52:ca:4d:e8:54:d0:17:ab:c8:1a:85:6b:00:5f:
8c:e4:5a:c5:f3:5f:90:3b:b9:d4:6a:50:4f:50:c7:2b:52:58:
ec:69:d9:93:a8:64:1f:7e:f8:e0:67:0e:5f:27:ec:c4:36:13:
19:8a:82:bb:d5:e8:f4:d5:59:43:86:7d:5f:d9:55:f6:fe:1f:
fb:66:c9:ee:9f:06:6d:43:4a:fb:b2:d3:5b:72:2c:d7:09:05:
3a:53:1c:ba:59:d0:96:40:78:c4:ef:e3:86:74:06:2e:d2:58:
f7:48:f1:b5:74:0a:37:e9:f7:2e:4b:14:9b:e0:3e:5d:54:a6:
3f:96:30:c6:11:15:0b:5a:c1:b4:bf:3f:09:f7:6b:33:aa:5e:
bf:f5:4e:98:a9:d0:bd:23:8b:e5:51:9c:7d:a9:8f:8f:81:d5:
fd:41:cc:7f:37:20:7f:7f:94:e2:23:53:9c:a7:c6:e9:d1:14:
2e:81:2d:42:eb:17:71:94:2a:04:d3:dd:02:ae:4e:f7:8d:51:
ce:f0:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 12:17:33 2023 by rpki-client on console-fra.rpki-client.org