Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hJqHCNjGn5s9WILEg6DJhwNG40g.roa
File: hJqHCNjGn5s9WILEg6DJhwNG40g.roa (raw, json)
Hash identifier: P+Xy8D6KAUpBrfglBJj4IAhzTfx+XcI+3FfEdx/L07s=
Subject key identifier: 84:9A:87:08:D8:C6:9F:9B:3D:58:82:C4:83:A0:C9:87:03:46:E3:48
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B03C53BB22A08C7F01B33F405A310E2C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hJqHCNjGn5s9WILEg6DJhwNG40g.roa
Signing time: Mon 12 Jun 2023 15:32:03 +0000
ROA not before: Mon 12 Jun 2023 15:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.59.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:3c:53:bb:22:a0:8c:7f:01:b3:3f:40:5a:31:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 12 15:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849a8708d8c69f9b3d5882c483a0c9870346e348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:0b:81:b1:6f:0a:bd:97:2a:6e:d8:c6:48:
ce:7e:1f:21:e6:4c:76:83:c7:23:f3:f5:75:ce:4f:
12:79:49:13:48:de:bc:78:e7:b9:55:90:b9:ee:a6:
31:32:d2:13:c8:59:c4:2b:18:17:5a:d1:e6:a1:2f:
2f:e1:9f:19:29:3a:3a:b7:d8:01:96:53:a1:8d:2d:
51:d4:97:70:e7:f1:16:0b:2e:8e:a3:5f:dd:7c:38:
2f:da:0f:1c:61:7a:a7:dd:17:2d:57:49:b6:0a:44:
91:fd:d6:cb:ba:5b:8b:11:27:ac:e3:fa:74:5d:28:
60:d4:49:8f:38:fa:7a:ac:57:dd:f4:52:2e:4b:6f:
b7:a3:1d:bf:8d:6e:10:9a:66:50:37:08:62:45:54:
09:81:de:df:1f:78:8a:94:4b:6d:3a:cc:1b:aa:20:
9f:c0:d4:a2:4a:50:4b:ac:53:58:2c:ba:f8:e0:b4:
f2:94:4b:3c:8b:b2:54:f5:27:4c:1e:75:04:23:45:
49:a0:9a:9a:be:a8:13:b3:8a:79:41:5a:79:5e:06:
87:dd:8d:1f:f4:87:ed:75:29:74:94:7f:24:d7:08:
d5:e7:23:ad:da:fe:22:16:c4:05:d7:25:de:86:70:
18:8e:a9:9f:e6:66:e1:d0:5d:3b:04:91:15:7b:fb:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:87:08:D8:C6:9F:9B:3D:58:82:C4:83:A0:C9:87:03:46:E3:48
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hJqHCNjGn5s9WILEg6DJhwNG40g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.59.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
13:92:80:1a:f3:12:2a:28:32:f8:32:bc:ec:69:51:b3:d6:0c:
7d:13:b0:bf:1c:15:01:51:7b:26:53:dc:8f:81:a5:43:8d:96:
2e:c7:30:45:07:4c:cc:49:14:53:0c:26:46:a3:78:a0:02:bd:
fc:52:f2:19:50:63:1b:69:f8:3f:95:d7:a3:25:f2:e0:a2:ff:
7d:aa:d2:46:b9:fd:50:1b:37:a2:0f:bc:ec:07:78:d7:a7:a1:
21:24:d6:7e:a7:e3:c7:cd:0e:28:78:e8:a6:6e:8e:5b:d9:0b:
3e:72:35:f9:4e:5e:a8:05:37:91:59:70:22:f6:1b:bd:2f:89:
81:6d:2c:7b:2f:f5:7f:a5:a7:3a:2c:65:06:2c:0c:c9:3a:1e:
11:3f:32:2f:7b:62:61:7e:55:59:b4:42:eb:73:10:63:c9:44:
0b:11:7e:64:90:12:88:b1:5c:ef:d5:3f:8a:59:c1:65:86:86:
87:93:ac:75:a5:c7:c8:93:f1:3b:a8:72:8b:fe:7d:d1:3a:ea:
db:f0:77:d9:46:b2:6d:03:32:99:4f:82:02:b1:47:15:18:64:
e1:4a:29:fe:11:db:8d:af:6f:e5:28:79:3f:d1:b2:b1:61:d1:
8f:99:1c:f5:3a:ef:2b:eb:60:4b:a8:fd:44:7a:2f:68:c0:d4:
b9:53:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org