Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fCaQB80TndSyu5nFkSZlxq1jUi4.roa
File: fCaQB80TndSyu5nFkSZlxq1jUi4.roa (raw, json)
Hash identifier: ++M/m/I1VZTmP9j9HfA89SEEYdRel6aXK0RbAxC61HU=
Subject key identifier: 7C:26:90:07:CD:13:9D:D4:B2:BB:99:C5:91:26:65:C6:AD:63:52:2E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187FA610F3456512179A133B1850A6DD5FB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fCaQB80TndSyu5nFkSZlxq1jUi4.roa
Signing time: Mon 08 May 2023 08:01:17 +0000
ROA not before: Mon 08 May 2023 08:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 5.105.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:61:0f:34:56:51:21:79:a1:33:b1:85:0a:6d:d5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 8 08:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c269007cd139dd4b2bb99c5912665c6ad63522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:5a:11:c0:e5:f3:71:9e:ad:cf:b6:d8:f4:
d8:59:eb:be:40:8c:9f:b2:84:2d:eb:14:d0:1c:23:
52:d2:86:f5:75:15:08:fa:5d:41:ce:44:f7:97:1a:
1c:ea:9a:90:08:74:f9:00:10:17:ca:c7:6f:4a:9d:
70:1a:70:f2:fd:7c:e6:60:e1:2e:c0:38:23:2b:51:
bb:2a:44:d4:01:30:f2:10:21:ea:1e:8d:8e:d4:68:
99:6d:8b:6e:eb:67:58:79:97:67:81:a3:5d:b3:9b:
56:08:72:cc:9a:4d:75:06:fa:44:52:01:76:56:d9:
47:b7:0a:19:ad:35:64:26:dc:ea:49:f5:b4:4f:6e:
f4:1e:4e:5a:4b:0a:d1:4b:2e:1c:13:7f:03:13:ea:
51:37:b3:2e:27:b9:02:40:5b:34:fd:34:04:d5:36:
f2:19:7d:45:e7:4e:c4:55:0c:8e:7d:db:bc:f3:08:
6c:de:89:2d:8a:d8:6b:2b:a0:9e:ac:02:eb:3e:73:
ce:0a:24:b9:ea:13:93:15:6f:80:b5:ed:22:1e:43:
0c:1a:0f:9a:32:20:2f:94:c7:33:c0:ad:d6:29:9d:
34:ad:9e:97:e2:a1:63:86:d6:58:19:e7:e0:80:48:
a5:b5:fa:94:b5:aa:8a:92:aa:a3:2a:99:ba:88:d6:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:90:07:CD:13:9D:D4:B2:BB:99:C5:91:26:65:C6:AD:63:52:2E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fCaQB80TndSyu5nFkSZlxq1jUi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ff:80:d2:bc:22:f8:df:24:42:f9:31:f8:b8:5d:8f:9a:fc:
a4:ad:48:11:fb:28:92:5b:85:4d:67:e8:35:c8:c1:96:32:23:
60:44:34:89:f6:ad:52:f6:2a:8a:8e:78:1e:86:4e:07:d3:27:
bf:2e:4d:c2:5a:75:21:89:25:38:63:a1:90:e8:23:9c:60:1b:
26:3e:fc:77:7f:f0:e3:17:aa:1c:61:a5:6d:8f:d4:2f:7c:e5:
3a:0d:e4:80:d5:7a:68:aa:78:0a:04:63:c0:d2:9c:c9:13:b0:
4c:5e:02:16:32:e0:96:15:13:14:2e:7c:d9:b6:bf:b4:bb:eb:
3b:92:b0:ae:2a:21:90:f4:13:3d:da:09:3c:d7:51:9e:a3:d7:
d0:8f:8a:7a:48:90:a0:b5:c9:6c:ae:1d:ac:7a:ee:7d:e3:b5:
35:57:87:28:1f:05:b4:e7:99:2c:43:93:48:77:0b:11:47:d4:
00:f0:3c:7d:5d:b5:d9:a7:50:b0:0e:40:e7:53:93:02:c5:cd:
62:18:0b:d4:2f:32:f5:57:bd:08:4c:58:9c:56:6d:d8:1e:14:
da:5e:3b:34:c5:55:74:bf:7c:93:b7:29:49:72:5c:d6:c8:1c:
83:61:f0:0c:c6:d1:1a:a2:3a:db:06:6f:76:de:f2:0f:a5:c6:
22:bd:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org