Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/CvC1_HGjL07E9f06PE1gAgGQKIc.roa
File: CvC1_HGjL07E9f06PE1gAgGQKIc.roa (raw, json)
Hash identifier: NpsY0mQxJcI4ud58Y/JFOHh/Aef7Fe7l0RdJtVV3+Cg=
Subject key identifier: 0A:F0:B5:FC:71:A3:2F:4E:C4:F5:FD:3A:3C:4D:60:02:01:90:28:87
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188E360451A3938ABFACF414E7E3C58AD2D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/CvC1_HGjL07E9f06PE1gAgGQKIc.roa
Signing time: Thu 22 Jun 2023 13:51:57 +0000
ROA not before: Thu 22 Jun 2023 13:51:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 5.105.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:60:45:1a:39:38:ab:fa:cf:41:4e:7e:3c:58:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 22 13:51:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0af0b5fc71a32f4ec4f5fd3a3c4d600201902887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:38:c1:40:70:99:9b:c0:b9:da:9c:1f:24:
3d:2e:82:1d:d7:1d:0c:a0:b2:f6:75:3f:76:7d:e9:
38:02:bb:16:a1:0c:a4:af:9a:98:3b:88:e8:5e:ed:
cc:67:ca:70:b0:38:e4:30:18:ae:cf:a5:10:47:44:
b6:85:f4:1b:76:c1:e7:c8:72:b2:f3:14:77:d5:85:
06:a2:2d:7a:38:cc:6e:f8:ba:21:1d:de:c4:81:dd:
eb:1d:69:a0:48:29:14:53:11:fa:2e:23:f4:25:63:
93:d7:36:3e:27:7e:a0:cd:a7:ba:40:8c:a6:09:3d:
c1:1f:67:25:b5:67:85:52:22:e3:6b:e0:c9:86:2f:
96:be:12:35:fe:91:58:b9:86:b1:75:ab:e7:9a:2d:
e1:a1:93:e0:8c:77:1c:b2:39:a8:25:cf:cd:0c:18:
7f:d4:53:47:00:54:95:77:54:59:f3:1b:8d:2d:56:
1b:a1:12:02:27:a8:54:12:51:52:a9:fd:c7:54:ac:
b1:ce:c8:4d:fa:2b:7e:a6:d2:a7:4d:a0:0d:57:55:
a4:3d:67:55:e0:05:d6:e6:34:bd:15:f4:9b:93:e5:
8b:5c:9a:6b:b0:ec:6d:4a:20:fe:fc:02:dc:63:4c:
bb:a4:8e:2a:16:47:fb:24:6f:c4:23:4e:4f:af:ae:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:B5:FC:71:A3:2F:4E:C4:F5:FD:3A:3C:4D:60:02:01:90:28:87
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/CvC1_HGjL07E9f06PE1gAgGQKIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.128.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b5:87:10:b5:d3:f7:b4:af:3e:af:aa:1a:05:7d:e5:9d:69:
ba:43:de:fc:aa:e2:56:6d:b3:73:9b:22:dc:6a:20:0e:52:1d:
cf:ea:a5:7e:c5:0d:b9:c7:e2:c3:b2:4c:99:4e:62:99:46:80:
c7:9a:b5:36:e6:de:f5:89:4f:dd:b3:32:17:78:bf:4d:f0:6e:
c8:63:de:63:26:44:05:09:8e:e1:39:36:39:9a:76:bd:b1:56:
46:e0:2f:1c:a3:83:b4:c2:6a:a6:8e:a7:84:eb:e0:bf:53:38:
7c:3d:22:1c:9a:45:21:71:f2:94:7b:ca:e4:fc:f1:0f:34:a0:
84:a8:34:37:c2:19:fa:d3:0f:88:8b:f9:d4:17:76:a4:94:83:
b5:87:77:62:08:70:99:d8:70:df:94:9c:b3:f0:1a:3a:db:e9:
ff:83:95:f3:49:bb:85:0a:4b:87:b6:87:ad:13:5b:6c:f7:0d:
e2:a8:25:cd:1a:b7:85:0b:9e:c2:b2:43:6d:a4:15:48:5a:92:
60:49:48:e9:a3:ae:5e:eb:60:27:48:32:8f:96:4d:46:69:59:
68:62:68:1c:27:d6:5c:a2:51:05:69:50:4c:e1:6e:49:a2:79:
8b:3a:c4:6c:f5:28:8d:d5:8f:af:9b:19:2c:d1:5e:27:66:1e:
ff:27:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org