Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QxKaglVghA6qS-KRT6GkDNnnKSY.roa
File: QxKaglVghA6qS-KRT6GkDNnnKSY.roa (raw, json)
Hash identifier: Y5iiG6G5hmgblmUu276XmbW4f9phlElRL1+uW/Y/UaI=
Subject key identifier: 43:12:9A:82:55:60:84:0E:AA:4B:E2:91:4F:A1:A4:0C:D9:E7:29:26
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B162E981A173493364505E07EB8F0957
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QxKaglVghA6qS-KRT6GkDNnnKSY.roa
Signing time: Tue 01 Aug 2023 13:56:36 +0000
ROA not before: Tue 01 Aug 2023 13:56:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 5.105.248.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:62:e9:81:a1:73:49:33:64:50:5e:07:eb:8f:09:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 1 13:56:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43129a825560840eaa4be2914fa1a40cd9e72926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:c2:5f:37:62:56:39:54:15:02:20:0c:ba:
81:9b:78:20:bb:b7:b3:c0:5f:d0:f8:82:d3:36:68:
09:1e:9a:65:62:3e:ec:36:48:2e:58:c2:a8:d8:41:
87:6f:02:bf:85:fa:0b:fc:35:02:3b:b2:d9:ec:d9:
a5:4b:d9:44:77:1e:9d:e9:e6:7f:82:ed:3f:9c:00:
b3:43:35:5c:2c:ee:75:bb:1c:74:3c:c9:33:f3:29:
8d:9e:f7:62:7d:8e:ed:de:36:48:f4:25:09:52:01:
19:51:45:a8:bb:13:95:36:5c:9f:79:f9:28:5b:b3:
ad:0f:0e:25:22:96:e7:85:6a:68:31:54:76:ba:3c:
4a:68:eb:d0:46:a3:4e:f9:9d:1b:42:49:47:c8:19:
f8:48:46:a9:f2:d6:b9:f2:ed:88:bc:9b:7a:7e:84:
b1:71:ca:c7:ac:1a:86:ea:8f:43:59:28:94:35:d9:
50:b3:12:cc:6c:8c:e2:a1:ce:ab:6d:c6:da:6a:00:
3b:5d:55:3d:2f:a8:f1:72:aa:11:db:d8:53:50:5e:
9d:99:34:06:71:4a:bd:51:a9:fe:c6:99:58:9a:c8:
c0:08:10:f4:26:9c:a6:58:72:cb:83:13:97:4c:b3:
db:ce:91:bd:6c:b2:c1:e0:6a:19:a3:69:1c:e0:19:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:12:9A:82:55:60:84:0E:AA:4B:E2:91:4F:A1:A4:0C:D9:E7:29:26
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QxKaglVghA6qS-KRT6GkDNnnKSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.112.0/24
5.105.114.0/23
5.105.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ae:0b:37:8f:30:ea:b0:34:0b:d7:a6:ce:0a:8f:e7:27:c8:
e7:19:d9:a7:e4:f6:94:ba:83:bb:30:6c:f9:30:a3:7b:d2:59:
57:68:33:95:86:5b:78:b1:30:a6:76:91:8b:c3:ec:bc:ef:65:
aa:f4:ac:81:ec:71:ee:d8:e6:0e:bb:86:bb:24:5f:10:19:39:
23:eb:76:87:07:38:1b:69:74:e9:ca:18:f5:39:0a:2c:3c:4c:
7f:a1:ab:9d:4e:07:85:56:bb:47:e5:f4:54:ef:c6:65:ea:ec:
af:0b:81:48:ae:ad:38:24:9d:58:4a:c7:ac:e7:c4:e3:22:fa:
a9:05:5a:80:61:f0:85:2a:d2:20:74:30:52:a4:0b:d7:a7:0c:
a2:e7:ae:90:48:65:7f:4a:05:ce:cd:f3:a4:28:83:be:c6:d8:
55:2b:ae:1b:a8:26:58:d1:45:20:fc:6d:2b:47:6d:57:f5:8e:
e3:26:dd:66:f4:87:4a:c2:3b:a1:8c:5f:cf:fe:74:9b:bc:da:
83:43:36:5a:d3:5b:b1:4a:e8:9e:1a:ea:fc:c0:cb:ee:cd:c2:
b8:b8:57:fa:54:69:c0:5c:ef:bb:13:a4:38:c5:8c:82:92:85:
87:a7:c6:bb:0d:f0:fc:8c:5a:67:26:10:b8:26:9a:25:8c:a5:
77:38:4d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 10:22:38 2023 by rpki-client on console-fra.rpki-client.org