Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jlBvh0yw6NqPJePO3tYEaGRfCyY.roa
File: jlBvh0yw6NqPJePO3tYEaGRfCyY.roa (raw, json)
Hash identifier: aM0jS+qRopoGf0VoHHIJDiUN4udfN+Wf/SlH7OvW5qw=
Subject key identifier: 8E:50:6F:87:4C:B0:E8:DA:8F:25:E3:CE:DE:D6:04:68:64:5F:0B:26
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B7B21FEC7EBF9295D2F454385944
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jlBvh0yw6NqPJePO3tYEaGRfCyY.roa
Signing time: Sun 01 Jan 2023 05:54:54 +0000
ROA not before: Sun 01 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 5.105.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b7:b2:1f:ec:7e:bf:92:95:d2:f4:54:38:59:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e506f874cb0e8da8f25e3ceded60468645f0b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:23:8e:28:4c:81:ed:09:fc:91:13:66:eb:
a5:af:9d:79:70:cf:50:c1:ea:fe:8e:dc:10:82:ff:
29:86:3f:93:27:ab:ce:3b:02:12:1f:3d:76:19:f4:
55:d7:ed:8d:91:82:f7:cc:71:e9:0d:07:45:83:13:
9c:2c:a9:9e:51:bc:ab:26:a2:dc:d4:8d:e1:6f:71:
dd:71:c4:3a:50:94:63:4c:3a:d1:e5:37:de:a4:4f:
df:a4:c0:95:a3:68:3d:af:60:ea:c6:0f:42:73:77:
6d:e8:f6:3b:54:42:23:21:b0:6c:36:6f:4b:fe:7c:
f7:a6:7b:69:b7:6f:44:14:6a:9c:1c:34:62:a3:82:
f7:a3:a4:cf:47:47:72:09:0f:88:2f:b6:25:ad:70:
50:c8:91:9a:f0:47:cb:4f:2b:e4:21:48:af:dd:01:
ca:66:8e:f8:3f:eb:48:0c:a5:43:58:a6:f5:4b:c3:
1c:0d:02:71:a2:63:12:14:1c:34:a4:76:47:61:34:
75:52:48:c5:5a:06:88:2e:68:78:f4:21:34:c2:df:
69:24:5f:40:88:88:43:8c:7d:bf:15:53:3e:b1:ad:
05:78:cf:12:cd:e5:0d:5b:cc:ea:6b:fa:5a:57:39:
28:21:e3:04:e1:6d:6e:fe:f4:09:eb:f2:00:03:56:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:6F:87:4C:B0:E8:DA:8F:25:E3:CE:DE:D6:04:68:64:5F:0B:26
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jlBvh0yw6NqPJePO3tYEaGRfCyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b4:fb:26:70:92:f1:af:f3:9d:7d:c4:19:30:61:a2:f3:54:
7f:ce:da:91:65:b3:86:a0:44:ad:3b:df:60:a7:60:c6:86:59:
00:1f:22:7a:95:35:95:5a:64:d8:bb:a4:a8:45:9c:8a:e3:b1:
0f:75:44:78:f0:6e:b1:b3:84:14:27:50:eb:1d:88:c2:f5:e2:
a9:dd:f7:25:94:0f:2c:45:e4:ec:b5:6c:94:44:da:ec:2a:ba:
91:30:fa:91:8f:ae:64:e7:79:7c:2c:6b:b2:8a:e6:59:f0:73:
fa:79:a0:bb:b2:35:6c:1c:60:af:09:ae:2a:fd:9a:02:a4:d3:
ff:7b:9c:91:7a:eb:5b:e5:38:24:cd:7b:a1:e9:f3:4c:ab:e2:
b8:08:c9:67:a6:7f:d7:d5:d5:99:9c:54:02:ed:7b:0c:ef:c4:
98:0c:76:00:9b:e6:4c:89:9d:fb:dd:69:c6:8d:e2:dc:cb:ef:
39:16:c1:01:cd:49:77:a5:7b:60:12:27:7c:3c:e8:a9:43:b4:
69:c0:26:70:03:da:2e:21:4e:55:84:d6:7d:c1:12:53:52:e0:
93:63:04:d3:1c:ef:1f:7c:65:26:bf:16:37:06:fb:21:f8:21:
96:d0:68:d1:87:cf:b9:6b:e6:36:7a:70:9a:3b:3a:1d:43:23:
67:a7:d8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 20:34:47 2023 by rpki-client on console-ams.rpki-client.org