Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LrzXaR7PAfyB4BdwyZasOPgWgiw.roa
File: LrzXaR7PAfyB4BdwyZasOPgWgiw.roa (raw, json)
Hash identifier: jrtKf8W8baSTfDG9z4vXc+3v9LWgkFoHJXhd/rgg+IM=
Subject key identifier: 2E:BC:D7:69:1E:CF:01:FC:81:E0:17:70:C9:96:AC:38:F8:16:82:2C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5BAC75688A55F57D2FD3C24B7CC81
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LrzXaR7PAfyB4BdwyZasOPgWgiw.roa
Signing time: Sun 01 Jan 2023 05:54:55 +0000
ROA not before: Sun 01 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.17.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:ba:c7:56:88:a5:5f:57:d2:fd:3c:24:b7:cc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ebcd7691ecf01fc81e01770c996ac38f816822c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:ed:d6:db:ae:b6:f6:e5:75:74:d6:3b:fd:
a8:9d:57:ef:39:ef:9f:dc:33:70:a0:7e:26:3c:06:
c4:3e:61:43:aa:82:19:66:46:eb:d1:a1:e4:49:f6:
70:13:7a:5e:14:dc:1f:0b:da:c3:82:ed:42:fe:d1:
af:9e:cf:f8:78:7a:1b:d5:d1:1a:14:2c:27:25:31:
d2:43:58:7f:7e:8d:81:b1:02:1c:d7:e1:ca:22:85:
db:c0:42:3b:7c:d3:7f:da:5b:75:78:f0:a5:e8:f2:
dc:7d:a7:8c:3b:3c:92:ab:0f:9b:59:ba:76:4a:c8:
fe:ac:81:1b:01:73:f4:c4:ab:f6:11:2e:7e:53:c3:
30:10:da:78:95:02:db:39:d2:c3:60:ae:2f:33:8f:
30:8b:25:c2:cb:8f:9b:7d:88:77:01:f2:7e:e5:36:
b4:8e:ec:3a:50:56:aa:c4:1d:33:66:d6:fd:36:15:
6d:f9:1b:9c:0c:00:1b:99:27:1b:c6:c2:fa:df:59:
65:25:8a:de:80:dd:0c:1c:1d:8d:ba:1b:06:31:6c:
5e:ee:5b:a9:06:d3:ce:3d:57:83:76:23:cb:8f:0a:
8f:49:8d:cf:5e:5a:8e:51:de:86:8a:63:4f:c9:8c:
68:ec:43:85:07:98:66:8c:81:6a:48:b8:32:8e:95:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:D7:69:1E:CF:01:FC:81:E0:17:70:C9:96:AC:38:F8:16:82:2C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LrzXaR7PAfyB4BdwyZasOPgWgiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.17.0/24
5.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b6:65:4d:c4:6a:cd:ed:5d:75:0d:7d:77:c9:c1:2d:39:a0:
3d:57:44:f4:86:cc:dc:1d:77:fb:87:3e:a9:dd:9a:59:05:99:
0f:ee:f3:e0:b7:71:1a:1c:fb:02:21:4a:2b:75:72:7c:6d:b6:
bf:f6:aa:83:a4:3a:fb:8e:d7:0a:09:8a:da:70:67:56:c6:af:
1c:08:60:f7:d8:38:3b:99:81:49:2d:98:73:c1:6d:8a:b3:95:
24:b1:40:e8:9d:7b:53:0d:c9:6f:a1:85:af:20:fa:c7:e1:f9:
64:ac:89:f7:a8:4a:65:63:4d:83:d2:c8:95:35:52:7d:4b:61:
69:31:b0:24:64:b4:1c:64:47:ca:47:9a:0f:cc:52:13:d0:74:
e7:31:64:d9:c3:da:15:2a:c6:84:d7:f7:bb:29:4f:ac:d0:0d:
1a:d5:71:64:13:91:46:64:99:f3:23:e3:9b:e5:85:73:11:34:
8e:2e:8e:f7:3f:70:98:4d:40:9d:f1:da:fe:fe:49:ad:ee:69:
9c:4a:81:49:d4:07:12:2b:c5:5c:b3:f3:92:10:7c:2a:68:2f:
3e:98:4a:7e:d4:d2:4c:f0:1e:d5:90:33:57:d4:c8:03:06:d6:
f9:01:5f:1c:df:46:6f:da:78:56:5c:f4:7f:4d:35:21:12:10:
0c:6b:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org