Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U5IntNRNX7FFHV_fUcEbMtKxGOU.roa
File: U5IntNRNX7FFHV_fUcEbMtKxGOU.roa (raw, json)
Hash identifier: NeLcw+nVe0zG8wgXyIlzcgA4ZFaEZ5hfIq3v/l8//2Q=
Subject key identifier: 53:92:27:B4:D4:4D:5F:B1:45:1D:5F:DF:51:C1:1B:32:D2:B1:18:E5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018848659E44CEB19F150A3FC152B4390766
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U5IntNRNX7FFHV_fUcEbMtKxGOU.roa
Signing time: Tue 23 May 2023 11:36:39 +0000
ROA not before: Tue 23 May 2023 11:36:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 5.105.128.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:65:9e:44:ce:b1:9f:15:0a:3f:c1:52:b4:39:07:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 23 11:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=539227b4d44d5fb1451d5fdf51c11b32d2b118e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:3f:3f:9f:42:4c:b4:f5:58:c6:1d:a8:2b:
68:7c:68:96:6c:3a:c6:d7:ab:ff:6c:49:95:05:aa:
5f:7e:c3:69:82:f7:15:e1:8d:d2:d4:7b:9e:56:f9:
ae:6d:8f:d8:5c:db:e8:67:5b:48:85:04:3d:29:fd:
51:56:25:51:58:b7:a9:d8:c8:f8:68:56:98:47:96:
82:44:a2:26:94:da:68:70:03:6f:3c:4a:f4:d7:3b:
0e:cd:bd:bd:ab:ab:9d:c0:fa:2e:fd:85:3a:cb:ff:
ac:70:e1:b8:e2:1b:82:03:fe:a6:f2:9f:92:ad:ff:
7b:13:a4:78:50:4b:6b:8d:27:c7:ce:cb:f0:6b:f4:
f7:0f:58:62:ba:cb:c6:f4:c0:39:b6:11:10:af:30:
8a:91:c9:98:d1:b4:4a:90:6f:bb:d2:88:4c:eb:4e:
8c:05:b7:7e:bd:0e:fb:7e:ce:3b:de:78:83:10:e0:
28:e2:63:10:d2:f0:2e:86:59:d5:fc:1a:90:f6:da:
5a:ac:9b:c0:ed:5e:04:af:cc:60:36:7f:d8:ba:e1:
65:c0:1a:8d:a4:ba:d3:2d:51:48:55:10:75:53:9b:
aa:6e:1a:9a:d8:63:d4:f1:51:ee:86:b0:6f:b7:5a:
2f:d2:3a:81:cd:30:85:42:df:4a:57:c3:31:39:23:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:27:B4:D4:4D:5F:B1:45:1D:5F:DF:51:C1:1B:32:D2:B1:18:E5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U5IntNRNX7FFHV_fUcEbMtKxGOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.75.0/24
5.105.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c7:7b:df:e6:aa:09:7f:05:e9:2c:44:1a:45:ae:86:27:18:
ca:70:69:fc:d7:3e:e5:fc:96:e3:52:05:a9:90:ef:50:bb:b5:
b0:5c:50:06:52:81:e1:c1:5a:d8:9c:9b:a2:4a:15:e1:d1:4c:
aa:aa:c2:80:2c:33:b0:33:9b:dd:8e:4b:da:0a:18:a8:ac:eb:
71:21:0c:70:31:d3:15:76:fd:58:6d:7b:9a:3e:8c:12:f2:c5:
b8:1d:2c:ca:f3:63:60:4d:27:e1:7a:bf:8e:a6:37:9a:18:1b:
fb:68:76:36:27:f8:9b:c6:16:83:79:5c:1e:d5:32:09:31:7e:
fb:40:f8:f1:ef:cb:a8:4e:bf:5e:ec:58:ca:27:de:8c:6b:b6:
a8:63:c6:31:55:70:d5:3b:71:48:82:75:05:4f:eb:5e:1c:bc:
00:0e:71:bf:7c:78:a7:cf:9b:b4:82:25:17:69:1a:14:c4:a5:
81:73:1f:09:1f:6c:e0:7b:7c:dd:70:4e:a1:e4:d7:01:8c:04:
b2:2f:c5:1d:e3:ef:ea:d2:b4:a0:ab:71:ac:69:5e:e4:b5:0f:
78:97:d2:93:c4:39:88:20:6c:f8:fe:43:1a:66:ab:4f:7f:31:
9a:4d:2f:03:76:7c:98:92:95:c7:22:10:56:6e:ff:19:ae:93:
33:da:95:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org