Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/phH_ABvW9CML73uQGqNWaCZehi8.roa
File: phH_ABvW9CML73uQGqNWaCZehi8.roa (raw, json)
Hash identifier: +0Uac9kXVoeJFh7wvG4ath1DbSB63/VhQ3EEGzjkNGw=
Subject key identifier: A6:11:FF:00:1B:D6:F4:23:0B:EF:7B:90:1A:A3:56:68:26:5E:86:2F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889287305F6185E464EF501816D76350C9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/phH_ABvW9CML73uQGqNWaCZehi8.roa
Signing time: Tue 06 Jun 2023 21:05:13 +0000
ROA not before: Tue 06 Jun 2023 21:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201949
IP address blocks: 5.105.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:87:30:5f:61:85:e4:64:ef:50:18:16:d7:63:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 6 21:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a611ff001bd6f4230bef7b901aa35668265e862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:7a:c7:9b:9a:a5:1e:c7:3a:66:a2:3f:e6:
2c:6b:75:af:63:6d:13:22:eb:3f:a0:9e:b3:7a:cc:
ed:76:8c:0e:16:87:e9:11:31:90:87:6c:75:66:89:
6e:34:63:bf:8f:9d:d5:cc:b9:fa:fe:00:bc:1f:38:
a8:4b:5b:6f:31:e7:75:5d:eb:4e:25:52:2c:b9:65:
95:1c:bf:b1:14:01:42:75:68:ec:9a:88:4e:17:53:
85:9f:8d:6c:15:78:d4:3f:a3:c1:a7:09:7e:89:9c:
9d:bc:09:3a:53:5c:22:28:78:d1:1b:ac:37:5f:42:
83:92:0a:f1:dd:37:1f:77:19:55:77:fe:52:dc:6f:
77:b9:00:c8:fb:e2:e1:78:64:2a:4f:cb:6e:9c:2c:
04:90:5a:b0:2c:5c:d3:d3:c7:c9:2a:96:19:6e:bb:
52:9e:bb:94:b6:b7:2f:cf:b0:fa:18:91:4d:c8:f3:
23:84:42:19:21:6a:77:5e:91:88:78:ff:21:33:63:
8a:5b:4c:15:b6:e2:4b:ba:72:69:74:6d:69:f5:6c:
38:78:01:96:c7:7b:e1:51:ea:87:94:4d:29:19:6a:
03:a3:b2:eb:2c:4b:0c:c6:76:01:d8:3d:68:3e:d4:
3e:a4:6f:2c:7c:ef:44:9d:55:b5:f9:4c:d9:5e:1f:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:FF:00:1B:D6:F4:23:0B:EF:7B:90:1A:A3:56:68:26:5E:86:2F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/phH_ABvW9CML73uQGqNWaCZehi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c9:a2:27:d3:38:68:48:14:6e:2b:8f:6b:de:5e:91:7a:f5:
2d:88:2d:fe:89:da:89:f1:74:9b:e5:81:2e:0a:3e:fa:75:9c:
05:c3:a2:d8:74:54:d8:ae:6a:b0:82:af:18:3c:10:c4:01:b3:
21:c2:5e:6a:bd:9a:57:04:4a:97:45:f4:a8:c5:8a:80:f7:62:
64:85:ed:06:94:7b:97:cd:11:a7:29:9f:9d:ab:a0:06:5b:58:
31:3c:d5:37:46:b9:e5:b1:3c:6b:f8:40:59:8b:ce:f3:b7:7a:
22:68:64:9b:31:33:32:88:9f:78:30:30:9f:fb:21:75:04:e8:
6b:fc:ff:6d:7e:0e:0b:8a:91:b1:10:ba:28:ff:af:d6:9d:1c:
80:11:e9:8e:2f:ab:17:68:2b:fa:11:ce:e4:0e:dd:27:36:32:
a9:53:aa:c1:33:57:2e:0d:4f:7f:6f:6d:a3:9c:d7:94:13:2d:
b9:0d:a4:e6:94:f3:43:8b:fb:52:0a:7b:31:d2:1f:7a:07:f9:
1f:9f:eb:f9:14:cc:a8:de:42:cd:bd:68:e9:15:b3:be:6e:01:
0e:65:1a:b2:5b:6a:59:d7:17:f8:74:e6:f7:bd:33:8e:99:b3:
b7:15:1a:19:ec:31:92:13:d2:eb:72:59:51:c0:05:51:18:f9:
ac:f2:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 08:37:22 2023 by rpki-client on console-fra.rpki-client.org