Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fPX5JSxMzZdhS3IC5nRB_zO9EQQ.roa
File: fPX5JSxMzZdhS3IC5nRB_zO9EQQ.roa (raw, json)
Hash identifier: fkXUzyvKOnb8SM71EwHoI9amtJDaP1Cp2jb9FiQN4RA=
Subject key identifier: 7C:F5:F9:25:2C:4C:CD:97:61:4B:72:02:E6:74:41:FF:33:BD:11:04
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188DDDE5B74835D92CF674557F37478FCE3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fPX5JSxMzZdhS3IC5nRB_zO9EQQ.roa
Signing time: Wed 21 Jun 2023 12:11:57 +0000
ROA not before: Wed 21 Jun 2023 12:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 5.105.138.0/24 maxlen: 24
5.105.164.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:de:5b:74:83:5d:92:cf:67:45:57:f3:74:78:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 21 12:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cf5f9252c4ccd97614b7202e67441ff33bd1104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:27:d5:ab:8b:08:59:c5:1c:99:d4:e7:f1:
fb:9f:0d:e1:0b:50:ad:2f:21:94:9a:81:df:19:49:
1b:5c:c1:da:4f:a8:3e:8b:16:7a:ad:f5:18:2a:28:
c6:19:13:32:05:84:5d:3d:b6:15:bf:f8:55:6c:50:
f6:38:b2:eb:3d:da:05:18:72:db:11:44:a0:ba:e1:
5c:6f:e1:83:51:9e:07:b9:12:f1:13:f1:7a:03:7d:
c4:41:29:53:a4:37:e5:0f:3c:24:38:49:b9:69:fc:
a1:57:64:57:a9:a9:ca:65:2c:ac:d2:e4:a8:4e:57:
7a:7a:7c:da:3a:6a:5f:58:34:9f:37:77:c8:99:2c:
26:0f:d0:41:d4:61:70:6b:44:ef:23:09:4d:30:68:
ba:d4:45:a5:aa:20:9c:b5:36:0b:11:7b:f7:b0:61:
a2:0b:b7:8b:57:92:7d:9f:3a:33:7b:18:9d:e3:b7:
53:94:88:c4:94:aa:07:bc:c7:36:77:85:29:28:55:
d1:a9:8e:a0:39:ae:87:22:b4:8e:aa:17:32:6c:b4:
a5:4a:69:b1:50:da:89:74:76:ee:58:cb:c1:e6:0c:
62:2c:00:48:2c:d4:ed:07:0d:d2:7b:3a:12:f3:d8:
2a:20:e7:b0:20:41:71:92:81:93:a7:af:6f:7f:23:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F5:F9:25:2C:4C:CD:97:61:4B:72:02:E6:74:41:FF:33:BD:11:04
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fPX5JSxMzZdhS3IC5nRB_zO9EQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.138.0/24
5.105.164.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:1c:f1:80:95:01:55:e2:0c:d3:24:22:66:2e:3f:18:e8:c3:
95:81:93:fa:a6:cd:44:f0:9d:35:e9:be:55:cc:a9:04:99:16:
14:36:4b:25:dc:ec:13:9e:41:51:99:70:a9:d4:24:8c:9f:2b:
cb:d3:48:5e:c7:4a:8c:88:e4:7c:eb:15:f0:8d:9e:8a:4a:76:
fb:58:39:00:20:f4:0d:66:14:b5:ce:bf:8a:5c:c9:a1:ee:6d:
3c:9a:3b:5d:55:c5:4d:7d:9d:77:0d:50:c6:77:54:b1:89:b7:
5e:19:90:1b:6e:90:d0:58:7c:3e:92:75:17:f3:d8:b2:0b:b4:
ed:2d:0a:fb:a2:57:64:95:87:97:a8:f9:04:9e:68:83:ea:2b:
7d:14:71:58:b1:78:40:b4:de:a6:98:2a:1c:3e:53:c7:f1:d2:
43:bb:17:42:87:e3:af:3b:0d:f2:aa:e2:f9:e5:1b:18:73:3c:
16:c7:f6:be:8f:6c:c7:37:29:88:d1:65:34:e7:9c:84:4c:32:
08:28:5e:3d:75:44:d1:8c:98:ea:01:8e:11:f7:ee:ae:38:42:
24:15:fb:ea:85:e0:40:df:30:27:52:c9:ff:29:fc:2b:92:dc:
59:25:61:92:fc:c5:36:14:b7:d3:2d:b4:35:c2:98:88:31:bf:
32:a3:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org