Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/52SXuDZStoj6Fl6WsPmf6MDAChA.roa
File: 52SXuDZStoj6Fl6WsPmf6MDAChA.roa (raw, json)
Hash identifier: /LD+vULSOKaRdIJQnpErBdOnSRt42Eux8rcWiWZf6y4=
Subject key identifier: E7:64:97:B8:36:52:B6:88:FA:16:5E:96:B0:F9:9F:E8:C0:C0:0A:10
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B818B2E5A4267790582DFB1D2D21
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/52SXuDZStoj6Fl6WsPmf6MDAChA.roa
Signing time: Sun 01 Jan 2023 05:54:55 +0000
ROA not before: Sun 01 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 5.105.16.0/24 maxlen: 24
5.105.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b8:18:b2:e5:a4:26:77:90:58:2d:fb:1d:2d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e76497b83652b688fa165e96b0f99fe8c0c00a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:98:98:34:f5:78:de:bf:ef:be:ed:e8:14:
dc:1e:fe:10:7f:74:c4:c2:24:31:91:b6:1a:df:11:
73:1c:a4:b2:cf:ea:0e:68:0e:47:eb:19:b8:0c:1f:
0e:08:48:0f:50:ad:99:a3:7b:b4:c7:69:d3:00:33:
b3:65:8e:74:e2:a0:7e:04:6b:17:25:65:a5:3e:b9:
64:7a:2d:51:55:09:77:e0:d0:6b:56:ef:c2:e6:07:
dd:a1:4c:9f:eb:c3:47:45:22:db:50:a8:64:58:78:
3f:a2:f9:b3:a2:79:97:da:18:ae:52:cf:36:dc:01:
07:b4:2f:19:89:55:4c:0b:33:38:9f:3d:c0:7a:27:
2f:f9:d3:46:10:b3:2e:44:b4:1f:32:ff:cf:f5:b9:
f4:8d:0a:0c:71:1e:24:ec:76:39:b2:fc:cf:e9:9e:
61:af:38:88:f7:18:d2:45:f1:8f:9a:87:d5:6a:23:
d2:9a:92:c2:5a:96:e3:d8:59:a9:22:33:2d:c1:65:
80:8d:62:f6:48:bf:cd:32:86:94:94:19:7f:9a:77:
1f:71:4d:1a:62:b8:6e:5b:40:0d:ac:e5:a9:47:d9:
2e:10:ff:08:2a:35:d5:74:e1:60:60:6b:c9:26:18:
3b:90:35:64:ec:7b:c9:51:09:99:20:cd:50:e7:2d:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:64:97:B8:36:52:B6:88:FA:16:5E:96:B0:F9:9F:E8:C0:C0:0A:10
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/52SXuDZStoj6Fl6WsPmf6MDAChA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:11:07:8c:d7:5b:1b:7b:5d:92:84:01:a5:28:9b:f3:1d:5e:
95:51:46:c8:9f:59:c4:b7:99:e3:ac:86:34:2c:ab:0b:e9:eb:
27:f2:47:20:7a:2f:5f:2d:31:87:f6:9e:03:d3:f1:c0:bc:04:
bf:bc:79:c5:1e:87:8a:c6:36:60:ea:bd:9e:b7:b7:64:23:c5:
cd:74:a8:38:f0:7a:75:ff:f4:29:f3:a5:16:7d:b3:45:05:bb:
bc:29:c8:19:57:76:15:dd:a8:78:4a:bd:ad:b7:76:85:19:82:
08:81:90:3c:b3:ff:c0:7f:b2:bb:f7:19:d4:0e:5c:f2:c4:5f:
9c:08:71:f5:12:ed:56:d4:00:f7:4b:a5:a8:c1:9d:ac:1e:be:
00:9a:d5:66:7c:2b:05:bd:46:2d:75:a4:2e:36:3f:aa:b3:5d:
95:b2:03:3d:72:12:92:72:14:0a:3b:bd:a2:8d:7c:4c:0a:38:
11:e1:c4:e1:8e:32:fa:20:90:e2:66:2c:2b:7b:1c:c6:a2:db:
80:e6:4d:81:84:18:8f:86:91:09:ad:a1:0d:30:eb:22:b5:c8:
48:a0:20:7c:91:cf:3d:fc:3d:a4:17:4a:4c:fb:e8:59:e6:24:
3b:e8:72:bf:cf:53:3e:26:9d:50:d8:29:0b:10:f4:6b:5c:40:
ac:d8:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org