Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xiu7qli4RzUD0FPirNgagnfCl7s.roa
File: Xiu7qli4RzUD0FPirNgagnfCl7s.roa (raw, json)
Hash identifier: xFsvXtQs0c4QxKw0yQ2rJ1T03DhWmK9pAlt0h581TzE=
Subject key identifier: 5E:2B:BB:AA:58:B8:47:35:03:D0:53:E2:AC:D8:1A:82:77:C2:97:BB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189D39A18B1B107576BDCA2FFBB9FF7A2C4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xiu7qli4RzUD0FPirNgagnfCl7s.roa
Signing time: Tue 08 Aug 2023 05:23:58 +0000
ROA not before: Tue 08 Aug 2023 05:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 5.105.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:9a:18:b1:b1:07:57:6b:dc:a2:ff:bb:9f:f7:a2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 8 05:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e2bbbaa58b8473503d053e2acd81a8277c297bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:40:d5:8f:5d:4b:9f:02:2a:35:0a:c2:bc:
22:4a:98:43:cc:69:3b:3d:93:34:c2:eb:2d:36:33:
2a:87:bc:7b:7a:63:63:6e:da:53:0c:b1:43:24:f6:
a8:a8:6b:c6:ae:f8:31:6e:ef:93:da:9e:7f:d6:61:
c2:1b:d3:65:23:06:47:a4:34:1a:fb:68:bc:90:0e:
42:69:d4:f6:7a:3b:be:76:0b:64:6f:37:14:6e:31:
a4:e5:25:8c:65:2f:fb:4d:04:2b:5a:d0:aa:54:ad:
24:e4:bc:84:b2:94:f5:e9:35:dd:0c:48:5c:d0:fa:
4a:91:6f:33:3f:54:2b:e6:1f:03:82:59:e9:6a:0e:
5c:c9:69:15:2e:8e:74:85:97:43:e6:0e:9c:35:5f:
ec:54:ee:63:ef:94:6e:c9:44:01:82:c7:c5:bd:3e:
a7:15:fd:cb:ba:3b:48:d7:77:58:c3:3b:7f:54:23:
bb:65:be:43:55:cc:5c:56:e0:f4:b5:5f:58:64:f7:
d5:91:32:c3:cd:4c:28:70:bf:e0:44:33:61:ff:a0:
9b:9c:9c:79:7d:e9:06:60:78:b7:da:03:22:e1:a6:
08:d0:43:40:59:61:16:11:86:00:dd:7b:cc:20:f3:
85:42:1e:11:8f:76:86:36:6a:1f:df:c5:d0:f1:7d:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2B:BB:AA:58:B8:47:35:03:D0:53:E2:AC:D8:1A:82:77:C2:97:BB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xiu7qli4RzUD0FPirNgagnfCl7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.164.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:f4:e1:ee:98:83:f0:21:54:0f:56:0f:e5:7c:ef:8e:1f:7f:
11:84:83:b2:3a:9e:8c:82:fe:dc:d2:ce:2a:50:5a:85:db:4f:
e3:0c:d8:a4:f7:da:6c:79:b8:eb:bb:0f:b1:77:2e:07:aa:6a:
41:bb:d8:b4:e9:65:3c:4a:f2:0b:1c:53:52:a8:9d:64:7b:20:
2e:4d:eb:c4:fa:c9:fc:92:fd:15:67:d5:fb:0d:1b:d0:df:78:
53:99:4f:18:05:7a:96:2e:e0:da:71:b0:83:cb:94:57:cc:ac:
17:4a:3b:bb:f4:00:c8:90:f1:2a:63:75:22:f5:4f:62:ed:79:
6e:7c:82:cb:a1:36:58:b8:ce:65:53:6e:b5:2b:86:5c:3a:c1:
90:18:db:68:ed:94:f9:c6:2e:de:fa:cc:13:30:49:3c:9e:da:
fb:b4:b0:c3:46:bc:49:a6:5e:bf:c9:9e:1d:95:ef:c2:43:30:
86:b7:54:da:7a:ac:25:f9:4e:d2:de:c7:8b:b4:bb:86:bb:6f:
10:f6:c1:e6:29:ad:ab:c9:cb:b1:81:95:fd:7c:71:c7:e5:37:
f2:b6:95:49:3b:e6:f5:38:b4:03:7e:16:b7:15:86:00:68:d9:
59:58:b3:1c:a7:19:e0:31:43:e6:ae:c8:2c:8c:10:26:85:9b:
9a:19:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 08:59:48 2023 by rpki-client on console-fra.rpki-client.org