Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aEdSlbVX3t7JrGI6_GizRhxIz-U.roa
File: aEdSlbVX3t7JrGI6_GizRhxIz-U.roa (raw, json)
Hash identifier: RnNiiXq0LTZr+8Y5NXj/6XgmYfsafN7Aye+o8l88BkU=
Subject key identifier: 68:47:52:95:B5:57:DE:DE:C9:AC:62:3A:FC:68:B3:46:1C:48:CF:E5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5A603114195573F76B5E4B7D3795B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aEdSlbVX3t7JrGI6_GizRhxIz-U.roa
Signing time: Sun 01 Jan 2023 05:54:50 +0000
ROA not before: Sun 01 Jan 2023 05:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 5.105.119.0/24 maxlen: 24
5.105.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:a6:03:11:41:95:57:3f:76:b5:e4:b7:d3:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68475295b557dedec9ac623afc68b3461c48cfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:e6:52:cc:2c:10:e9:09:1c:ad:5a:a2:75:
54:92:fe:c0:7e:78:7c:05:b0:00:fa:6a:a2:3e:44:
32:94:d9:6f:e2:ef:71:75:df:b3:1f:28:99:fb:b4:
c5:2e:09:e5:fc:df:88:fc:9e:42:28:68:1d:6a:f2:
7f:d7:8a:7f:76:34:18:33:4b:66:1d:55:01:0c:fe:
54:3f:90:38:e2:60:a7:56:c9:22:3e:f8:10:cd:85:
7c:4b:2e:6e:4e:1a:39:0c:c6:7b:56:ab:cd:78:60:
53:8c:05:c2:fb:b5:f2:7b:ae:e9:f3:b9:df:63:3b:
26:14:9d:80:c9:48:cd:11:f9:48:b5:ab:85:df:46:
67:87:10:cc:90:6a:c4:34:a8:23:63:cd:cd:ff:1a:
e0:9d:be:1a:27:0d:e1:fc:74:73:fd:41:30:ab:51:
5c:06:c3:d6:ab:7f:50:ab:b6:1e:ef:e0:49:46:3c:
0c:93:38:1c:38:91:85:3f:8a:b9:12:38:bc:24:44:
e6:2e:61:d4:cd:ba:9f:4f:b4:42:41:ac:4c:44:55:
6d:75:5b:99:10:af:3b:07:86:fc:d9:16:70:48:a4:
f9:d7:6d:94:d1:21:19:93:30:2b:08:6f:db:08:95:
e9:3e:34:ed:0c:e0:25:6a:b7:09:5c:89:ea:66:fe:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:47:52:95:B5:57:DE:DE:C9:AC:62:3A:FC:68:B3:46:1C:48:CF:E5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aEdSlbVX3t7JrGI6_GizRhxIz-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.119.0/24
5.105.121.0/24
Signature Algorithm: sha256WithRSAEncryption
14:48:76:a2:b8:99:d7:56:75:a9:de:47:da:30:eb:93:19:a3:
8e:82:19:77:8c:45:03:8b:0f:22:64:d9:d8:a7:b7:da:6d:da:
b1:2b:cc:a1:0c:8c:ba:c0:19:6c:b4:13:d0:cc:d8:85:ea:c9:
21:08:88:fa:c2:c1:87:e8:dd:2f:df:54:6c:84:f7:5e:f2:36:
20:49:34:26:ab:35:cc:b6:c8:c2:11:db:e1:1d:c0:71:c3:f2:
c2:f0:ca:1e:c2:98:0a:ba:ad:fa:8c:23:89:3c:3c:e5:5f:f5:
39:30:f4:58:78:55:e4:33:33:1e:ba:fd:71:b1:b1:17:78:d2:
72:31:17:63:6e:df:03:08:73:d2:d3:44:0d:a1:5e:a1:c3:c7:
c8:fc:fd:36:73:5c:a8:8c:a5:0b:6d:73:e0:8b:c8:ba:0f:b3:
34:87:7e:4b:4a:c2:f5:55:2b:d2:47:5a:a6:dc:59:39:8c:39:
4c:42:4f:78:01:fa:13:07:42:ba:34:43:78:7f:13:64:54:bf:
43:a2:44:e6:ab:44:63:d5:7b:66:e6:83:c3:8c:63:18:fe:bb:
37:7f:c7:c0:d0:4e:60:e7:ae:57:73:35:df:dd:5d:a9:e9:4e:
2a:62:f1:67:b9:6b:34:6c:ef:52:3d:0c:d9:32:cd:f5:ff:e3:
09:f0:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org