Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_8yXx1wTsdWiS75qlshkH0HBoUE.roa
File: _8yXx1wTsdWiS75qlshkH0HBoUE.roa (raw, json)
Hash identifier: y9iZ8f7223b+C6tsj0P3V08wXrMklhMEutftEhMLrpg=
Subject key identifier: FF:CC:97:C7:5C:13:B1:D5:A2:4B:BE:6A:96:C8:64:1F:41:C1:A1:41
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5ABC55948567A5486FB88475403FA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_8yXx1wTsdWiS75qlshkH0HBoUE.roa
Signing time: Sun 01 Jan 2023 05:54:51 +0000
ROA not before: Sun 01 Jan 2023 05:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 5.105.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:ab:c5:59:48:56:7a:54:86:fb:88:47:54:03:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffcc97c75c13b1d5a24bbe6a96c8641f41c1a141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:bc:a9:75:02:bb:56:7a:6f:1d:fa:20:f6:
4b:0e:57:a1:b6:49:fe:2c:5b:dc:b7:f7:c0:19:83:
89:96:fd:ad:10:ed:f3:d1:1e:08:4d:66:fc:00:d9:
3a:c4:87:e6:51:9d:dc:aa:c3:d0:bd:17:6f:29:39:
f4:85:d6:6a:1d:5e:31:36:db:64:a8:d7:98:11:28:
fb:be:a0:e5:39:e5:4d:d4:32:25:fe:37:a6:dd:c3:
65:e2:93:2f:cf:51:1c:88:2f:0b:d0:62:43:99:8e:
0c:e3:12:53:04:87:be:22:6b:65:cb:b3:6c:9b:86:
6d:7e:46:cd:a2:12:a6:91:58:80:df:11:a3:9d:33:
51:39:21:55:a9:2e:e1:3e:59:8f:25:fc:db:47:5f:
f1:f1:08:0b:97:cd:0b:47:fd:1a:3f:12:eb:64:df:
06:8c:7c:f1:1f:28:fa:94:7a:e2:0a:82:e7:b6:14:
36:5e:cc:37:b1:09:ae:b8:ca:ec:72:5a:a8:21:2b:
29:2f:92:d5:4f:30:c7:f0:95:87:e5:ff:c4:a8:01:
05:af:ae:7a:76:93:e1:f7:b8:f1:5c:30:af:39:a9:
a0:4b:a3:c7:61:0b:32:d9:54:54:4b:7e:e7:30:a3:
0c:e9:bb:7e:24:92:1c:17:ce:c4:e6:d9:8f:40:d6:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:97:C7:5C:13:B1:D5:A2:4B:BE:6A:96:C8:64:1F:41:C1:A1:41
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_8yXx1wTsdWiS75qlshkH0HBoUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c5:4e:f7:7d:ce:1b:1d:b8:43:0e:02:7d:64:23:05:d0:95:
09:ef:d2:a2:af:e6:e4:c1:d6:79:1c:50:ea:d4:5c:6e:fd:fd:
3c:ef:8d:20:f0:23:2b:c6:f7:05:16:e5:c8:72:e4:e9:ec:21:
58:5d:11:44:2e:b4:ff:e9:bd:e5:94:14:cd:43:7c:1a:72:96:
e7:47:19:6b:e9:94:f7:0c:13:f1:ed:74:ff:c4:24:4c:80:b4:
5c:18:70:79:28:b3:3f:65:1d:ff:63:f5:8b:46:76:8a:19:ab:
2f:99:6a:cf:c2:01:39:87:1f:44:e2:8b:cf:9d:c8:42:16:70:
cd:2d:94:3a:45:aa:ea:6a:e1:2f:50:bf:21:7a:92:c7:a8:6f:
c0:72:b0:6c:12:c1:2d:eb:fa:05:e2:a9:db:27:c4:ce:af:cc:
b3:fc:33:0a:97:81:5d:76:67:16:65:60:43:ff:b2:5b:d9:3f:
f2:96:7c:b9:4a:b0:91:41:cd:5c:37:d2:da:0b:4b:cb:85:46:
6c:5a:a9:24:8b:26:df:a4:6e:6c:71:29:5f:10:66:a1:71:2f:
53:d1:62:89:10:54:ad:45:e6:e3:c7:c0:2e:a4:51:99:ac:cb:
72:99:57:e3:b5:66:a5:18:9e:8d:66:75:e0:92:a5:7c:c0:98:
b2:47:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org