Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6fiZNhyfb9a5h4HZ_zQXo68tY-o.roa
File: 6fiZNhyfb9a5h4HZ_zQXo68tY-o.roa (raw, json)
Hash identifier: OTCX8GOAk6JweEtnvmgmU/L29UnKpTvkJeUQ8MjwHnI=
Subject key identifier: E9:F8:99:36:1C:9F:6F:D6:B9:87:81:D9:FF:34:17:A3:AF:2D:63:EA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A41C7C20D5F98867D172570D16DD08295
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6fiZNhyfb9a5h4HZ_zQXo68tY-o.roa
Signing time: Tue 29 Aug 2023 14:52:04 +0000
ROA not before: Tue 29 Aug 2023 14:52:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211138
IP address blocks: 5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:c7:c2:0d:5f:98:86:7d:17:25:70:d1:6d:d0:82:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 29 14:52:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9f899361c9f6fd6b98781d9ff3417a3af2d63ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:01:aa:86:6c:94:06:a2:31:e0:68:4b:84:
64:39:46:61:0b:b4:69:f8:41:31:c2:e4:51:1f:d6:
05:e9:80:03:a7:00:ae:65:b1:4f:53:93:47:4f:63:
8b:a5:b6:04:9f:e4:14:72:50:ac:3e:af:44:4c:65:
c9:7a:f5:ae:50:d6:cd:41:9d:a3:3e:a7:3a:45:c0:
78:22:86:76:02:ae:ad:ee:d4:f4:2c:b7:ab:0b:07:
4a:76:40:fe:45:bf:be:4d:58:1c:b7:7d:21:18:68:
1d:0e:ac:12:22:a3:b1:fd:bf:f0:bc:dd:8d:83:e6:
a0:8a:68:09:30:0c:3b:49:41:69:d5:6b:f1:a7:08:
f9:07:ac:fd:4e:fe:4c:6f:1e:75:4c:27:5c:dc:4a:
f7:f0:35:1c:50:b9:6d:a6:e3:b4:02:93:05:fe:25:
fb:7f:b1:aa:58:d2:b8:b7:39:5f:2b:e5:eb:27:fe:
76:22:88:66:18:91:0d:f6:17:76:8c:15:bb:b7:2c:
d6:78:f2:b4:91:6c:76:be:2d:12:e7:d2:6a:5b:be:
dc:53:86:69:58:8f:8a:c0:76:02:6e:ac:e9:16:2a:
fd:91:3c:01:e2:46:0a:36:bb:a0:d9:4f:c1:91:66:
14:4c:85:96:fa:17:5f:db:07:bb:6d:a5:c3:e9:22:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F8:99:36:1C:9F:6F:D6:B9:87:81:D9:FF:34:17:A3:AF:2D:63:EA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6fiZNhyfb9a5h4HZ_zQXo68tY-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
Signature Algorithm: sha256WithRSAEncryption
94:73:b6:a2:01:99:a1:b3:9c:d3:c0:87:03:17:3c:2d:c6:01:
8f:0f:5a:fb:7a:e7:15:16:33:f6:34:2f:5e:a1:40:8d:09:15:
f7:d3:69:52:90:70:7b:d2:48:4a:9a:47:a4:1f:d7:06:b5:00:
45:52:66:be:63:b9:ba:af:cb:01:99:85:82:7f:76:b3:b2:8f:
f8:ad:30:27:29:56:15:95:58:9e:17:0c:1f:5c:a7:b0:df:53:
8b:1c:c0:17:a3:db:18:53:18:38:99:e2:d3:4d:59:24:49:fa:
1f:84:0a:b1:b9:d7:5a:54:86:2b:c5:61:42:61:74:fd:6f:91:
f8:56:b7:a9:dd:0a:23:2e:a5:19:fe:65:c1:c8:35:0b:37:b2:
f8:c0:f4:57:e4:46:5a:cd:eb:98:14:a9:b2:3a:50:63:13:8e:
0d:3f:07:4e:15:42:ff:8c:cc:3a:d3:5d:db:9d:4e:be:e6:d5:
4a:d3:56:11:00:86:2c:c6:76:95:fa:8f:ba:f0:12:bf:6c:76:
66:8a:5d:83:f8:53:d0:2c:d4:8a:4e:e3:7d:88:04:2b:49:ac:
91:83:e9:d3:3e:32:ec:8e:25:9e:60:ab:3a:70:98:c4:95:18:
59:be:f6:cc:85:64:ed:eb:54:48:32:46:e1:1a:5d:88:de:36:
ee:85:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 18:24:17 2023 by rpki-client on console-ams.rpki-client.org