Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GjiXe5_tw7E4OAUX7jbQOBT8_iw.roa
File: GjiXe5_tw7E4OAUX7jbQOBT8_iw.roa (raw, json)
Hash identifier: MH8ed3QuSfuArV3LCL39biPaRX46e1J8n8noydY4mjc=
Subject key identifier: 1A:38:97:7B:9F:ED:C3:B1:38:38:05:17:EE:36:D0:38:14:FC:FE:2C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188309D9792D6004A8871C71C698FA2907B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GjiXe5_tw7E4OAUX7jbQOBT8_iw.roa
Signing time: Thu 18 May 2023 20:46:54 +0000
ROA not before: Thu 18 May 2023 20:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210993
IP address blocks: 5.105.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:9d:97:92:d6:00:4a:88:71:c7:1c:69:8f:a2:90:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 18 20:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a38977b9fedc3b138380517ee36d03814fcfe2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:33:de:33:ac:3d:82:ec:a4:a7:cd:85:ee:
17:8d:41:9b:e5:15:c3:f8:92:9c:fa:af:f4:7e:87:
9b:e1:4e:c2:51:1c:61:61:57:3d:40:1e:b8:58:f5:
3c:f2:35:a5:a5:7f:b9:1d:af:5a:80:85:2e:61:51:
39:5f:3f:b9:4e:20:bb:9a:3f:66:62:f4:76:aa:f0:
36:d7:fd:c3:8a:f0:2b:48:ec:66:ca:8a:a6:ff:2e:
e6:f0:d6:91:e1:a0:2b:36:b5:cd:1e:a9:e6:7a:cd:
d2:7f:f0:fe:c9:bc:e7:b9:30:66:78:b4:8b:bc:49:
8e:aa:75:c9:c6:46:49:de:c2:c0:6c:5f:c7:e3:27:
73:b5:a6:bd:7c:12:d1:3d:64:7c:f4:e7:68:18:96:
3e:59:0a:31:90:ab:dd:49:fb:fb:01:5b:bb:a0:7c:
4c:93:a9:67:7d:b4:ac:e8:90:25:b8:2e:19:fb:e2:
01:f1:a5:f6:33:ce:ca:9e:72:79:bb:be:8c:57:7f:
46:a9:19:7a:eb:38:a8:81:9b:21:30:72:d9:46:be:
14:e9:80:ac:cb:42:72:ce:d8:ae:9e:f3:70:23:9a:
84:f9:da:2d:a5:13:b1:4d:c4:a1:2d:b0:58:0a:82:
7f:da:ec:18:7c:77:7a:d4:81:b6:42:05:8c:15:9f:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:38:97:7B:9F:ED:C3:B1:38:38:05:17:EE:36:D0:38:14:FC:FE:2C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GjiXe5_tw7E4OAUX7jbQOBT8_iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:cd:58:44:54:5a:af:cc:1d:43:4a:fd:da:27:81:a5:e5:ac:
fb:ea:60:24:fc:f1:11:62:8d:02:5d:02:13:cf:3e:51:21:fe:
87:bb:50:00:75:6d:97:e6:ba:50:37:a5:e3:bb:16:44:24:6b:
85:67:8a:e7:94:ed:18:2b:86:73:eb:60:73:f8:21:39:e3:1c:
98:7b:58:1d:f9:1d:d0:b8:99:aa:d8:80:03:92:9d:70:5d:32:
12:1f:48:30:4a:09:f6:af:8e:a2:cd:dd:a2:d6:b5:35:d4:73:
21:86:f3:df:8a:14:d9:a0:c3:08:99:3d:84:f2:c6:d2:3b:fb:
f4:a7:6c:a5:49:88:72:54:25:b0:6a:d7:d3:fa:5c:fb:cb:dd:
16:f7:f9:ae:be:45:f7:23:ba:26:1c:c9:10:e7:31:38:b9:78:
09:8c:80:37:27:2e:5b:21:f5:d8:25:78:5d:86:1c:1f:20:b5:
dc:49:e4:3f:bd:cf:c3:aa:3a:49:97:a3:87:08:3f:e7:55:21:
dc:de:6a:98:c3:8c:c3:84:6a:88:47:91:8d:3c:45:84:d7:62:
b5:06:7c:84:05:a7:6b:5a:c2:e9:a8:9e:40:08:40:8e:10:91:
f3:ef:cd:56:78:27:0b:4e:0d:b6:25:8e:f9:df:1b:3c:ba:c4:
20:87:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 12:14:43 2023 by rpki-client on console-ams.rpki-client.org