Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FQPc4dXysaljyl1WQP4mdlTaUx4.roa
File: FQPc4dXysaljyl1WQP4mdlTaUx4.roa (raw, json)
Hash identifier: ARd5Y1jurNefL/kVRUL7NqNFbbQoIWN9H1MyJ6nnelE=
Subject key identifier: 15:03:DC:E1:D5:F2:B1:A9:63:CA:5D:56:40:FE:26:76:54:DA:53:1E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189EE50E185F0B2430AE0DA6802E97E3839
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FQPc4dXysaljyl1WQP4mdlTaUx4.roa
Signing time: Sun 13 Aug 2023 09:53:45 +0000
ROA not before: Sun 13 Aug 2023 09:53:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 5.105.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ee:50:e1:85:f0:b2:43:0a:e0:da:68:02:e9:7e:38:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 13 09:53:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1503dce1d5f2b1a963ca5d5640fe267654da531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:0c:ae:15:80:ab:4c:b6:ad:30:30:95:6c:
49:67:da:5e:ad:0c:7e:4c:0a:de:61:52:0a:1a:b4:
26:7d:ee:ed:8b:d0:fb:b0:8f:49:17:e4:b5:88:07:
1e:54:3d:74:15:c8:92:61:d6:2c:55:00:6e:e3:9f:
88:b7:3e:5f:b6:9e:fe:5a:03:68:7d:9b:9d:cd:db:
65:18:8f:50:cb:b3:23:38:9c:08:50:0f:7f:4e:c0:
c3:4c:dc:a8:b2:2f:17:bf:b1:1f:f4:26:6b:d9:66:
1c:60:9d:59:fc:0b:32:a0:6a:97:78:3b:f6:80:5a:
10:9e:f2:8f:b2:6d:67:bf:ef:5b:f7:97:05:15:da:
2a:69:76:6e:91:da:40:d8:5e:22:6c:32:f7:3f:00:
c5:50:ad:c4:b9:52:71:5c:ad:b3:b0:20:ab:31:b6:
8e:45:1a:e0:57:59:09:85:16:79:90:69:ca:78:19:
53:f4:cc:e0:c5:3d:08:6f:ea:4a:fa:a2:55:5e:45:
6c:39:f4:3f:e9:01:8b:4b:d6:79:1d:1b:96:ad:0b:
d9:cd:cd:06:bd:10:53:bd:5a:96:ac:68:b1:17:79:
7a:0b:f0:51:1f:c0:1a:d9:70:43:db:84:8b:a2:7a:
b4:d6:be:6b:34:66:c6:b2:5c:47:46:85:f0:18:4b:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:03:DC:E1:D5:F2:B1:A9:63:CA:5D:56:40:FE:26:76:54:DA:53:1E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FQPc4dXysaljyl1WQP4mdlTaUx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f3:b4:29:25:e5:86:be:4b:7a:3c:6f:dd:32:3a:7e:71:7b:
c3:3f:a9:b1:66:40:19:4c:92:c7:76:8b:cc:71:56:0d:50:13:
dc:cd:02:11:99:0f:4b:db:93:b3:c7:53:4c:bf:1e:32:1f:0a:
3d:1a:56:3f:7a:f9:22:6d:4d:70:45:cf:00:fe:c1:00:8b:dc:
41:5c:56:9b:61:e3:08:72:58:04:2c:cb:b2:ad:db:48:8f:7a:
33:b8:40:a6:59:ef:27:5e:fa:ad:7e:7e:2d:91:e4:db:89:82:
59:85:c3:fb:53:f5:89:3d:1c:fd:a5:0e:62:ce:b7:c8:14:7e:
c1:a4:32:1f:69:f2:11:0a:5d:e4:4a:00:c8:b4:73:69:52:7c:
6f:30:78:b4:fe:95:30:b7:f0:42:32:20:66:fe:8d:7f:f3:c4:
ec:68:24:0c:f0:6a:b8:e3:0f:fc:3e:2f:39:b2:0b:e6:b7:f8:
c9:10:23:5f:06:d7:85:60:2a:e1:04:e8:55:af:7c:95:25:a3:
c2:1c:02:21:a8:0c:32:c9:62:f8:84:53:27:cf:50:63:3c:ff:
32:e7:ba:86:a1:54:fb:82:2c:c9:02:e0:f7:b1:92:7d:e0:1b:
3f:51:76:f9:88:e1:47:45:83:3f:2a:50:a0:2c:96:51:8f:06:
53:c0:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 10:01:26 2023 by rpki-client on console-ams.rpki-client.org