Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EEQirrXps_PBIx65FqQSpWAty-g.roa
File: EEQirrXps_PBIx65FqQSpWAty-g.roa (raw, json)
Hash identifier: LP938ZQj35VGxL8Eou94nwpLwAeYz4mjYNE2pIUVqsE=
Subject key identifier: 10:44:22:AE:B5:E9:B3:F3:C1:23:1E:B9:16:A4:12:A5:60:2D:CB:E8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AAD00E1F4EF15E5F4D3829EF8CA3F9998
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EEQirrXps_PBIx65FqQSpWAty-g.roa
Signing time: Tue 19 Sep 2023 10:33:50 +0000
ROA not before: Tue 19 Sep 2023 10:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 5.105.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:00:e1:f4:ef:15:e5:f4:d3:82:9e:f8:ca:3f:99:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 19 10:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=104422aeb5e9b3f3c1231eb916a412a5602dcbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:da:4c:40:ee:31:b4:b2:6e:4d:eb:5e:84:
69:22:ea:ec:64:e1:80:9f:b8:99:79:9d:57:47:11:
a9:af:2e:22:8a:8a:f4:8c:b4:68:86:a4:d2:d8:a1:
d8:8e:55:80:6b:e5:89:8d:f9:10:ee:2e:1e:2f:10:
f0:2f:bb:9f:23:2e:8b:ca:0b:82:ad:96:d8:a3:52:
56:32:5c:d8:68:0b:6b:d4:72:0d:58:50:d1:84:25:
59:5d:7a:54:c6:87:d1:5d:8a:c4:0c:ca:65:17:74:
9a:c1:7e:6b:e0:4a:fb:2d:ce:60:dc:f3:ee:62:57:
6e:c7:0f:ea:e0:41:68:f2:e6:2e:7f:76:38:cf:1d:
43:e0:62:27:f5:8d:e4:9f:8c:06:70:a6:d2:44:3a:
16:1f:2c:cf:aa:25:e9:bb:5d:6c:0e:4e:f9:30:d3:
f4:5e:3b:3f:d5:6c:58:3b:76:01:1d:ee:cf:04:de:
5c:6d:f0:4d:77:90:5f:4e:98:27:82:64:77:4c:32:
16:9e:e2:7b:ab:94:e3:ae:55:ea:16:93:5c:17:a1:
e5:ba:97:ae:4a:95:8d:4b:9d:65:83:dd:29:6f:a5:
38:75:37:c2:c7:00:06:a4:7b:fc:d4:29:fe:28:34:
0e:c5:be:c5:3d:f8:db:a1:42:be:e5:91:51:6e:36:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:22:AE:B5:E9:B3:F3:C1:23:1E:B9:16:A4:12:A5:60:2D:CB:E8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EEQirrXps_PBIx65FqQSpWAty-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.1.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d9:79:0f:91:4c:e9:18:2e:04:90:0e:15:75:db:79:c7:62:
bf:24:33:69:a1:58:3f:03:fe:74:aa:60:c7:12:49:70:4b:32:
6f:55:a2:34:35:3d:b7:46:2e:7f:b5:e6:c5:c4:8d:f0:40:ad:
7d:36:1c:c8:39:9e:c9:07:a9:4b:fb:ea:6d:c0:a4:61:1e:60:
f5:21:d9:93:81:a8:2f:de:3c:e4:9e:1d:76:14:bb:44:8a:2e:
2e:0a:41:91:cb:42:90:be:d0:76:3d:a1:c5:9f:62:c9:cb:68:
1b:22:c1:38:d4:89:f0:a6:fe:0e:26:01:4c:d0:e7:1e:86:f4:
77:21:25:c0:b3:d4:41:ea:2e:55:1c:ec:c0:98:66:89:25:49:
00:a1:6e:fb:7d:66:0a:cd:1d:5f:b3:d8:1d:d1:a4:f3:d4:98:
ad:2a:78:bf:ae:c8:6f:f5:ee:f2:54:8a:64:4f:5d:ae:fd:ee:
85:8f:da:be:00:7a:be:2b:99:d4:04:7e:1c:94:7e:fc:3e:19:
1e:74:e7:4e:92:43:03:e1:f1:df:1c:8f:71:04:66:54:35:00:
b5:30:e2:bb:fb:f6:88:1e:c9:ba:35:00:07:58:58:8d:c7:8d:
c4:57:ec:a5:20:1c:e7:18:2a:cb:ba:e3:cd:37:b6:c3:92:c7:
82:59:6c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 18:33:32 2023 by rpki-client on console-fra.rpki-client.org