Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xrh7YBKRdSY59lkc-XmSMVNqclM.roa
File: Xrh7YBKRdSY59lkc-XmSMVNqclM.roa (raw, json)
Hash identifier: 6NHBMQrRcDx09Sb3LDwefBz5LRegq24aSbVYq9gufBk=
Subject key identifier: 5E:B8:7B:60:12:91:75:26:39:F6:59:1C:F9:79:92:31:53:6A:72:53
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189D41B2E3F867CD6AA93A20B5F8689017C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xrh7YBKRdSY59lkc-XmSMVNqclM.roa
Signing time: Tue 08 Aug 2023 07:44:58 +0000
ROA not before: Tue 08 Aug 2023 07:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 5.105.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:1b:2e:3f:86:7c:d6:aa:93:a2:0b:5f:86:89:01:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 8 07:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5eb87b601291752639f6591cf9799231536a7253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:da:8a:af:ac:d1:84:3a:56:25:7d:df:72:59:
64:bb:06:cc:41:80:8a:ee:1f:d9:39:cd:5f:9c:43:
cc:7f:8d:52:66:5f:6e:d2:af:78:50:fe:13:24:c3:
d2:c0:79:3e:4a:96:63:bb:bb:2b:67:7d:4d:78:c5:
c1:93:3c:e4:2b:dd:79:d5:d9:33:ed:c3:e7:47:00:
93:4b:55:82:48:c8:32:43:66:3f:7c:ef:c1:ca:03:
09:12:a0:ad:be:1f:bf:85:8a:20:34:4c:69:b4:b1:
08:c9:69:c9:da:d1:57:d2:06:e9:c5:db:93:93:83:
a0:58:0a:3a:f4:2d:a9:51:c4:25:b1:b0:16:51:b8:
9b:06:5b:51:4c:68:b3:46:6f:cc:55:ed:13:97:88:
e0:58:45:72:b6:c6:fb:98:b4:05:14:e2:77:2f:81:
e9:17:6b:e1:71:db:63:80:ad:2a:e0:e5:0b:b2:05:
05:31:3b:78:f5:7d:46:56:52:4d:3e:64:db:1d:0b:
8d:a8:d9:49:3a:8c:88:3e:d2:2a:f3:be:52:05:b5:
31:57:a8:6d:fd:4e:2a:a1:28:5c:90:bf:49:94:df:
28:82:cf:12:04:93:7e:64:cd:58:8b:c4:25:a7:ee:
23:c9:9f:55:ea:ad:9e:2a:38:f9:24:07:a1:1b:4e:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:7B:60:12:91:75:26:39:F6:59:1C:F9:79:92:31:53:6A:72:53
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xrh7YBKRdSY59lkc-XmSMVNqclM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1a:19:fd:bf:94:ab:78:ac:5e:75:a1:4a:71:b5:6d:71:39:
cd:b2:a3:e0:49:14:ca:43:c9:82:8a:e9:c8:bb:1f:06:4f:48:
98:f5:9b:03:ce:30:4a:42:71:f4:99:07:5d:d0:e1:55:b0:9b:
81:f8:ec:6d:aa:19:d4:76:27:0a:69:f0:37:7b:88:fd:aa:7e:
95:98:b5:64:04:05:7d:c8:61:60:19:ff:d1:4a:b5:95:4a:79:
b9:74:22:f2:58:2f:b8:ba:6b:21:2b:dd:68:df:bb:e2:97:1d:
b4:26:0d:33:9c:3b:92:63:e1:65:26:90:38:83:e0:14:d1:11:
2c:4b:e2:64:d4:e5:47:a1:de:fb:48:69:05:a5:f8:dc:0d:fc:
e5:8b:51:84:fc:42:44:cd:56:5e:58:b6:ff:69:c0:45:98:e2:
3c:2e:0b:45:4e:1e:a4:db:fa:a4:66:d1:e0:a1:ac:f5:18:b6:
19:36:74:5e:fe:8e:76:77:17:0c:19:f2:05:82:18:1e:e2:97:
4e:4b:21:f1:a9:61:70:52:87:b9:da:bb:db:c4:43:a7:5f:f4:
7a:32:ff:1a:3c:47:3a:9b:5c:82:a1:33:2b:5d:5f:cd:2d:0b:
28:d9:0a:47:e7:89:8b:e7:ed:60:bb:28:2e:ad:e6:22:8b:fc:
24:8c:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 15:14:30 2023 by rpki-client on console-fra.rpki-client.org