Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QR8K41ZZfRsgrxm9Yjd2Rmq529Y.roa
File: QR8K41ZZfRsgrxm9Yjd2Rmq529Y.roa (raw, json)
Hash identifier: jfVz2AdKDWRA0TVJO+DQEH/XK1yJ//ir/X2KBK4L0gs=
Subject key identifier: 41:1F:0A:E3:56:59:7D:1B:20:AF:19:BD:62:37:76:46:6A:B9:DB:D6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188EE90F1C9D01D062157B175FE5ADA7BCB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QR8K41ZZfRsgrxm9Yjd2Rmq529Y.roa
Signing time: Sat 24 Jun 2023 18:00:56 +0000
ROA not before: Sat 24 Jun 2023 18:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204721
IP address blocks: 5.105.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ee:90:f1:c9:d0:1d:06:21:57:b1:75:fe:5a:da:7b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 24 18:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=411f0ae356597d1b20af19bd623776466ab9dbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:00:8d:93:90:ac:96:6c:ab:a2:59:39:50:
ce:36:37:bd:60:17:25:10:43:4e:9e:e0:f2:de:a5:
23:9b:0c:ff:3f:f9:3d:8f:bd:9f:b0:cc:6b:03:d7:
55:65:6f:7f:6d:d9:1b:f2:03:cd:5e:8b:fc:e5:ca:
d2:62:57:a8:bf:d8:ed:ca:6e:55:15:b8:ed:e9:75:
4f:84:ff:80:f2:26:dd:43:8c:61:84:2c:17:a1:af:
41:6d:53:4c:6e:b9:f9:57:27:2f:c0:c1:c4:7d:e9:
79:af:9b:0a:30:02:bc:88:8b:9b:ff:76:99:3d:52:
e5:40:af:2d:01:65:4f:b7:bf:15:ec:be:b5:2e:14:
a1:bd:55:53:da:c8:cb:35:2d:2e:4f:42:04:ea:5e:
d5:c9:b5:50:d9:c5:96:a4:a0:94:f0:78:55:5b:c5:
08:d8:f9:48:66:5a:ff:9f:cf:7c:fd:eb:4c:b8:1c:
87:e6:d8:13:b3:74:77:9e:7b:d8:b7:f5:11:cc:a3:
12:71:5f:a3:3a:f3:aa:d8:15:50:16:6d:9e:24:45:
57:35:7f:f0:9e:e7:43:94:86:b5:43:9e:02:16:19:
c9:5b:47:bf:cd:f6:24:1f:4d:c5:2a:8d:93:5b:f2:
9c:96:5d:55:c1:a8:63:64:f1:ef:89:e2:0b:9f:a2:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:0A:E3:56:59:7D:1B:20:AF:19:BD:62:37:76:46:6A:B9:DB:D6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QR8K41ZZfRsgrxm9Yjd2Rmq529Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:6d:56:c8:99:5f:68:7a:b2:51:d7:f2:71:e2:2b:fe:b2:e1:
e7:34:e2:0b:2a:79:59:42:cd:09:17:ab:20:b3:8f:03:1b:b4:
55:d7:4e:e6:51:cd:07:b7:70:75:12:5a:1c:c5:26:4f:f5:66:
b1:ce:1b:f0:28:88:b3:9e:c5:5c:4a:fb:1c:e2:27:22:f1:d8:
a7:d0:26:fe:1a:d7:9d:25:55:bf:b5:81:f5:01:5c:b6:84:6d:
eb:40:02:28:ac:d1:bc:f8:9c:af:4e:72:61:4d:2c:3c:97:0c:
55:09:2a:12:96:eb:27:82:91:ec:ff:b7:28:d4:82:48:74:b6:
f5:42:00:f8:dc:75:a4:53:ae:08:93:a2:a0:90:08:8a:c0:87:
77:91:a4:dc:bf:b7:b5:fd:60:54:39:03:15:e6:20:3f:03:66:
30:0c:df:32:73:e7:cc:c3:17:10:86:fb:23:d3:fe:dd:3f:95:
84:96:df:47:02:2d:e3:e7:a2:76:64:53:ec:56:2f:1c:6b:96:
e8:97:19:e1:45:e8:a0:c8:a3:c4:de:f6:18:fb:0e:3f:9e:de:
57:b8:a7:66:0f:e6:f1:db:5c:25:11:cc:a8:ff:33:28:1b:28:
39:b9:5e:32:33:5c:f1:b1:5b:53:61:d0:e8:36:a6:e7:a2:71:
e9:e7:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:03 2024 by rpki-client on console-ams.rpki-client.org