Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/zmyYC35LQKdyvS6iyPdW-2qkLYU.roa
File: zmyYC35LQKdyvS6iyPdW-2qkLYU.roa (raw, json)
Hash identifier: 9Ulm4uJ+yLGlOBnGnf+ibrZOfCmBaEBLsBF3+T4QcGc=
Subject key identifier: CE:6C:98:0B:7E:4B:40:A7:72:BD:2E:A2:C8:F7:56:FB:6A:A4:2D:85
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01859739179CB6721EF20E8D7A2CC1AA0193
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/zmyYC35LQKdyvS6iyPdW-2qkLYU.roa
Signing time: Mon 09 Jan 2023 15:49:39 +0000
ROA not before: Mon 09 Jan 2023 15:49:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.23.0/24 maxlen: 24
5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:39:17:9c:b6:72:1e:f2:0e:8d:7a:2c:c1:aa:01:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 9 15:49:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce6c980b7e4b40a772bd2ea2c8f756fb6aa42d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:91:7b:3c:90:5a:f3:03:29:f1:a7:d8:1c:
82:b8:e0:1b:93:41:4b:e4:cf:8b:c8:47:6d:21:f5:
c5:4d:00:6e:c7:ca:0b:42:24:b7:63:cd:df:b9:db:
85:f3:60:7b:1c:46:62:41:54:b5:30:74:6a:0b:c7:
8d:36:07:fa:f8:b0:f3:5b:00:89:47:d9:d3:4c:8f:
6e:90:b8:d5:fd:52:67:42:7b:c4:0b:23:cc:1e:5c:
08:7b:20:54:c3:4d:10:07:97:78:3d:5d:57:ae:40:
d4:2e:bb:90:0e:59:11:bf:4f:b5:6b:e4:7f:d3:51:
4a:f2:9e:15:59:67:c5:3e:fa:a8:49:00:16:dc:57:
de:d5:3d:bc:d4:f9:f0:ff:db:14:a2:1b:c6:f0:5d:
55:a3:e3:be:51:6f:d6:c2:2b:3e:dc:6e:2f:32:3b:
75:3d:f9:5a:09:18:50:05:42:b6:fe:d2:55:c7:e1:
4a:6d:12:59:4f:a9:f0:b4:60:db:b2:7e:59:f0:0a:
4c:a4:45:ad:11:be:17:55:21:4a:63:3f:aa:30:52:
2a:ec:1a:df:c9:89:34:7f:35:db:47:fb:08:a3:f1:
ab:d0:7f:82:6e:cc:55:4b:c9:ae:a4:84:53:b6:57:
3e:dc:47:43:f5:91:db:ec:b2:e4:0d:12:b0:2e:e3:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:98:0B:7E:4B:40:A7:72:BD:2E:A2:C8:F7:56:FB:6A:A4:2D:85
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/zmyYC35LQKdyvS6iyPdW-2qkLYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.23.0/24
5.105.90.0-5.105.93.255
5.105.222.0-5.105.225.255
Signature Algorithm: sha256WithRSAEncryption
b3:64:68:7e:91:11:56:88:70:6c:65:08:c8:5e:52:14:3f:9c:
24:b3:b6:68:aa:79:c5:75:58:e3:02:2b:b2:3b:a2:f4:2e:cb:
aa:04:88:ce:04:32:64:eb:4d:82:52:70:4f:0f:d0:82:ca:69:
34:50:d8:95:dc:ff:bc:18:a3:db:48:91:74:43:8e:9c:3c:93:
5c:ee:1d:f6:79:14:7b:c6:7f:89:05:7a:50:be:fb:a1:ea:ba:
df:7b:b4:3a:4c:77:9b:80:2c:dd:37:1f:27:b8:ca:fb:e3:95:
a3:ef:76:a7:7b:b9:bb:8e:61:6b:fa:eb:17:a2:20:2b:3d:af:
33:32:d7:54:c9:ec:a6:08:de:3f:a7:84:c3:ff:d6:f7:21:5d:
62:25:45:60:d6:6e:1d:13:f1:12:00:6c:71:42:c0:4f:45:64:
02:ec:58:1a:c6:47:19:90:4c:1f:3f:8b:b1:e3:a9:e5:73:83:
00:7f:4c:10:63:b1:d1:4f:64:25:b2:8d:1b:d2:d8:5d:33:46:
c7:a1:45:0a:8a:f0:c3:e0:0f:23:55:a7:ed:fc:51:94:51:1e:
a1:52:7d:01:72:d6:c5:ff:db:62:29:d6:17:46:83:57:66:04:
97:1f:97:e8:28:ff:69:da:aa:ae:7f:16:d2:6f:88:8d:07:76:
07:c3:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org