Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JojrHr3glJQpm89Fgg6TKjTKckA.roa
File: JojrHr3glJQpm89Fgg6TKjTKckA.roa (raw, json)
Hash identifier: BpAe9NNLEqaRSAUDxBCx7IqA7N0DJXtKICeOWYbXB4E=
Subject key identifier: 26:88:EB:1E:BD:E0:94:94:29:9B:CF:45:82:0E:93:2A:34:CA:72:40
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889AE1D8AC1E9E26DC463CC3107421570E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JojrHr3glJQpm89Fgg6TKjTKckA.roa
Signing time: Thu 08 Jun 2023 12:01:12 +0000
ROA not before: Thu 08 Jun 2023 12:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43072
IP address blocks: 5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:e1:d8:ac:1e:9e:26:dc:46:3c:c3:10:74:21:57:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 8 12:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2688eb1ebde09494299bcf45820e932a34ca7240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0d:3d:b0:a6:da:d1:33:7b:18:be:ac:93:ea:
97:35:4c:4a:3c:69:b2:cd:5e:9c:1a:33:3f:36:69:
f7:97:90:40:3e:be:6e:ed:eb:5a:77:72:58:3e:9a:
c6:47:aa:3e:65:30:6c:45:b8:b0:3d:8d:1e:06:6c:
b4:8f:48:aa:be:e2:df:14:2f:c0:20:b5:68:1b:83:
66:bf:44:bd:78:ef:8a:5f:ea:da:37:1d:6e:a1:d4:
a2:da:af:83:82:3c:5e:a1:a3:1a:32:7d:65:f8:cb:
79:8b:1a:1f:d4:af:74:b7:0f:56:10:08:d9:cc:2e:
a5:47:6b:88:a3:ae:19:8c:ac:cd:11:db:98:ac:0e:
a4:77:6f:93:e7:4b:2a:5f:7c:48:c5:17:a6:1b:ab:
72:a7:42:90:32:c0:78:31:b4:c0:9d:57:a2:a7:6e:
01:0e:84:43:1c:e2:52:3c:fc:64:10:4c:2b:01:e8:
f0:89:51:b2:0a:3d:f0:6d:ad:c5:46:8a:01:42:f6:
40:ed:48:f2:f8:63:46:7a:33:27:c8:a3:cb:2a:ca:
31:ff:4f:0e:a5:03:ac:d7:79:6a:b0:02:e4:e9:7f:
f9:c4:ec:66:17:6e:6a:59:15:3d:3d:fe:cf:d8:81:
bc:05:21:31:a2:50:d1:f5:24:5a:9c:ef:ab:4c:73:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:EB:1E:BD:E0:94:94:29:9B:CF:45:82:0E:93:2A:34:CA:72:40
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JojrHr3glJQpm89Fgg6TKjTKckA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.165.0-5.105.166.255
Signature Algorithm: sha256WithRSAEncryption
bd:c5:d0:c9:60:c0:21:17:7c:17:f5:28:f3:29:79:06:db:bb:
e2:59:73:0e:c2:d8:a5:1d:1b:96:ad:c1:f0:b4:71:08:22:dd:
d9:e6:68:03:6f:86:3d:b4:e9:34:67:66:52:cc:a8:ca:e0:de:
d4:a1:44:50:e2:3d:38:b6:12:ac:bf:86:8b:88:d7:f7:65:3d:
78:45:99:d5:97:0b:6a:1a:2f:6b:87:fb:fc:a5:15:f4:6e:35:
45:41:7e:e6:dd:2a:0d:28:9c:ba:b1:dd:bc:d3:83:32:90:65:
72:ff:19:fe:9a:93:41:bf:f4:a3:69:a3:9f:28:74:ea:f6:29:
32:08:23:6c:51:fe:cf:19:04:a0:ab:ea:67:98:48:ce:d7:5f:
a7:25:20:48:89:e2:5d:51:3a:48:bc:85:2c:fc:0c:b6:df:48:
b3:32:64:ce:96:01:83:5a:ac:0d:57:75:cc:17:1b:6f:53:06:
b7:c8:10:87:88:a1:15:c8:2a:69:8e:05:fe:9a:9b:e8:60:04:
01:6f:ca:34:fb:64:4a:0f:71:a5:c6:f2:66:d7:e3:91:05:87:
ab:75:d7:39:1f:62:4f:e1:38:74:9b:bd:bb:7b:ee:24:a6:50:
90:cd:33:2d:5e:ec:99:a9:75:ca:e8:bf:16:e8:fb:70:53:b5:
4f:d2:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org