Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PirtL47D9yNCTUDQaQV4cuc3HX8.roa
File: PirtL47D9yNCTUDQaQV4cuc3HX8.roa (raw, json)
Hash identifier: hrYvXvws5hHw0jWb93cTwcg7ka5gq4lMVMrSpAad6YM=
Subject key identifier: 3E:2A:ED:2F:8E:C3:F7:23:42:4D:40:D0:69:05:78:72:E7:37:1D:7F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01859B7254EF7E5C38924133702F15F048A4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PirtL47D9yNCTUDQaQV4cuc3HX8.roa
Signing time: Tue 10 Jan 2023 11:30:39 +0000
ROA not before: Tue 10 Jan 2023 11:30:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:72:54:ef:7e:5c:38:92:41:33:70:2f:15:f0:48:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 10 11:30:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e2aed2f8ec3f723424d40d069057872e7371d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:a5:62:01:41:77:08:cb:5b:4e:77:8a:15:
b7:36:de:cb:6e:a0:f8:be:cb:7d:90:3c:33:ac:0d:
d9:6b:eb:65:be:61:ec:4b:5d:a6:1b:92:ca:b8:2f:
a5:6e:8d:a9:e5:5f:2a:82:43:7b:f1:79:11:5b:48:
c0:56:5d:aa:9f:03:db:8a:9c:28:fd:40:fb:d6:02:
93:43:6a:17:60:b9:ec:47:ae:ad:b8:e2:db:58:5c:
65:ca:5f:ce:16:60:ea:c5:de:85:50:89:10:45:2a:
3a:74:4c:d1:5f:ca:39:fb:9c:ee:9e:a6:df:60:37:
df:57:fc:a4:6e:d4:b4:08:9c:14:8c:0a:15:54:f7:
fe:6e:ea:60:14:99:c4:74:0b:5d:76:1e:a1:36:f9:
76:f0:b1:b2:5b:39:02:5f:63:06:31:cf:fb:4c:01:
49:65:ee:15:16:80:b5:ab:40:a4:bb:94:06:89:31:
12:52:bb:07:e5:cf:53:de:0c:8a:3d:b3:f6:33:bd:
c3:60:c8:49:8c:64:9d:c6:73:79:77:39:0d:c1:b4:
89:82:11:bc:9d:4b:ee:51:d5:52:83:19:e3:bc:97:
76:e6:77:a3:b8:ce:f4:6e:78:ee:26:01:f1:6b:e5:
b5:ce:d5:14:98:2d:17:32:86:0f:2d:21:45:e6:38:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:ED:2F:8E:C3:F7:23:42:4D:40:D0:69:05:78:72:E7:37:1D:7F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PirtL47D9yNCTUDQaQV4cuc3HX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
77:16:06:e2:a0:38:d1:ac:a2:de:8d:dd:ff:f4:0a:e2:22:8d:
28:0e:0e:95:4b:be:e1:cb:7a:16:e2:11:ea:22:21:81:ea:c4:
0f:48:32:cc:db:07:d5:90:14:89:a2:ca:da:df:97:d9:88:1c:
92:54:ce:59:9d:3c:79:e3:31:0c:07:8e:98:ae:ff:18:f6:1a:
03:4b:10:e3:e3:3c:dd:02:70:ac:bb:ad:e7:ee:28:91:59:66:
ac:b5:58:4d:cb:f1:d5:eb:15:e9:01:8c:0a:60:71:f4:df:e1:
9b:57:af:18:bc:a0:52:96:51:e1:31:ad:62:3c:3c:b5:85:1d:
15:cc:0f:0a:a8:9b:23:bc:16:e6:d0:4b:e7:7e:f8:f9:53:d8:
90:ef:ba:66:16:f9:4a:e1:17:ff:ca:17:39:4c:cd:aa:93:ba:
b7:2d:83:a8:39:52:9a:0d:66:08:75:44:5b:28:b7:3c:d5:a2:
bd:83:66:4d:b4:9e:c5:34:7e:5e:f9:44:9b:24:f6:3d:2b:ee:
bf:83:f5:36:42:92:74:15:67:70:53:a2:2d:be:ec:03:9d:d0:
82:3c:16:f8:d3:37:88:01:e5:18:c6:9c:68:99:53:63:94:66:
b2:16:19:0e:d8:dc:7f:7c:32:f2:03:8a:7a:5b:11:dc:be:22:
d0:82:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org