Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YmNvOr4E899mXL0_o7G721bwBGs.roa
File: YmNvOr4E899mXL0_o7G721bwBGs.roa (raw, json)
Hash identifier: //n3HPB6KmKbKtCckVwGshWPzhKUA3iLjQydaWmun+8=
Subject key identifier: 62:63:6F:3A:BE:04:F3:DF:66:5C:BD:3F:A3:B1:BB:DB:56:F0:04:6B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188F37DA319D25A0F3F3D70AF56A328121A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YmNvOr4E899mXL0_o7G721bwBGs.roa
Signing time: Sun 25 Jun 2023 16:57:57 +0000
ROA not before: Sun 25 Jun 2023 16:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 5.105.101.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f3:7d:a3:19:d2:5a:0f:3f:3d:70:af:56:a3:28:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 25 16:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62636f3abe04f3df665cbd3fa3b1bbdb56f0046b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:71:32:1b:6b:3c:ed:46:0e:38:93:42:46:
df:ce:b4:8f:aa:ca:71:f8:a1:74:e6:a6:47:87:c9:
01:70:6e:90:ce:0b:aa:a3:9c:e3:7b:ab:65:c8:72:
39:da:64:07:cb:7c:2c:f3:10:c3:f7:fa:bc:a0:c7:
f9:60:37:14:a4:65:1c:a3:84:a1:39:ce:6d:61:a6:
82:18:11:82:cf:3a:33:12:99:35:10:51:08:5c:ae:
d3:67:4f:d2:5d:00:6a:c4:f9:de:c3:9a:2c:16:50:
95:dc:a8:e8:c4:46:b2:8a:ed:aa:71:57:05:fe:11:
35:13:3c:a6:3d:b5:d7:82:44:1e:13:52:81:b3:e1:
d0:1d:cd:27:ed:ce:43:5f:57:fb:78:cc:fe:23:a1:
39:97:7f:74:ee:4a:7e:d2:0f:48:03:2f:ff:cf:74:
60:d7:45:26:85:49:3a:b6:80:4d:55:ad:33:6b:81:
a6:b8:3e:4e:68:b5:d8:48:d3:ac:c2:d3:21:31:e3:
f6:fa:30:73:05:f6:e3:5b:32:8d:a1:76:df:2e:7e:
b4:77:60:8b:fb:78:da:38:02:a0:6b:d9:c8:f7:69:
52:d9:0e:54:bc:18:a4:22:68:90:0d:c5:63:b7:8e:
0f:ea:f5:ed:d1:6c:4b:22:51:7f:c5:3f:87:e8:b4:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:63:6F:3A:BE:04:F3:DF:66:5C:BD:3F:A3:B1:BB:DB:56:F0:04:6B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YmNvOr4E899mXL0_o7G721bwBGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.101.0/24
5.105.220.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cc:ea:98:ce:41:2a:e1:38:1a:6a:21:a7:92:3b:a8:93:0c:
fa:ec:e2:c2:84:22:52:53:78:29:b7:0a:0a:e9:21:33:6a:78:
75:98:14:2f:86:a9:37:8c:55:f7:95:ba:b2:35:92:87:e1:84:
75:c8:33:5f:83:42:e3:7b:2f:d3:a2:97:07:98:5b:01:11:e9:
bb:71:5a:12:41:08:4b:95:b9:f2:58:dc:98:7b:cc:78:9f:18:
40:06:31:37:8d:d6:2b:b4:ea:d8:a3:46:0a:48:62:21:a6:43:
ee:bc:64:3a:76:06:09:1a:28:9a:f7:af:7b:9e:b1:39:8d:ed:
a1:7e:19:6d:c7:be:0c:53:d5:f0:b7:e2:a6:eb:f9:25:43:7a:
d4:d4:43:41:89:db:57:a6:25:58:3b:8b:67:a9:a9:71:76:bc:
4e:f1:a5:00:b1:bb:f7:2f:7b:87:a9:2c:7d:8a:2f:22:22:38:
fe:63:e7:01:70:ae:b3:f9:39:5b:63:78:67:fb:8c:49:db:c5:
cf:2a:25:74:e5:1c:5a:37:97:18:9b:5e:47:4a:83:44:ca:62:
0e:4f:ca:8c:06:e4:d3:f7:07:67:e3:6a:04:42:46:f3:5d:bd:
d1:8b:b3:7d:aa:7d:51:99:95:25:25:c1:63:e3:2b:f2:73:a0:
32:d4:a6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net