Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qJjSG8VhBdzm6MLablYP-NXWQWQ.roa
File: qJjSG8VhBdzm6MLablYP-NXWQWQ.roa (raw, json)
Hash identifier: GgBzlJAE/DfFP8k+od4Ua1Jr0wju90hP3Xq7GimgRV4=
Subject key identifier: A8:98:D2:1B:C5:61:05:DC:E6:E8:C2:DA:6E:56:0F:F8:D5:D6:41:64
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01859B1D2FEA31F9F5D24D6F9D9F70956457
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qJjSG8VhBdzm6MLablYP-NXWQWQ.roa
Signing time: Tue 10 Jan 2023 09:57:39 +0000
ROA not before: Tue 10 Jan 2023 09:57:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:1d:2f:ea:31:f9:f5:d2:4d:6f:9d:9f:70:95:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 10 09:57:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a898d21bc56105dce6e8c2da6e560ff8d5d64164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:a8:ff:fe:31:39:15:55:81:33:5c:a7:dd:
bc:16:e1:8b:ef:04:f1:ec:9c:3e:c1:37:07:bb:90:
dd:d0:b3:e6:e4:49:e1:0c:6a:98:08:9b:26:fc:3e:
a3:8d:e8:cc:a0:14:c4:a1:64:8a:79:43:2d:a0:bb:
64:09:4a:e9:92:81:b1:47:68:01:88:d2:62:07:59:
24:09:b7:48:aa:85:30:ca:c4:a5:2a:5c:c0:e6:17:
e2:3f:8c:2b:5d:0c:c7:19:1b:a9:56:f6:ce:de:ec:
16:4d:77:88:cb:c5:69:b0:32:9d:8f:de:58:64:4e:
a6:e6:cd:27:99:00:af:47:48:f1:23:b5:fa:07:b4:
f1:d1:13:91:67:97:2e:a9:7c:2f:b5:a4:16:9e:ab:
27:69:20:a5:09:cc:60:93:b1:ed:dd:7d:cb:e4:6b:
26:73:e7:28:77:1f:88:39:55:43:f1:bc:1d:ec:28:
08:d0:f4:eb:e4:91:3e:14:84:f4:0f:2a:c6:ec:5c:
94:9b:1f:81:9b:7a:88:0f:1e:73:34:2b:7d:8c:31:
d7:9a:e4:d2:f7:c9:5e:88:da:ce:1b:65:4f:10:ab:
f0:70:d9:4f:b0:02:22:65:77:d3:4d:30:37:99:f4:
cd:4e:c1:16:75:11:d3:c6:f2:20:5d:eb:0e:6a:8e:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:D2:1B:C5:61:05:DC:E6:E8:C2:DA:6E:56:0F:F8:D5:D6:41:64
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qJjSG8VhBdzm6MLablYP-NXWQWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1e:63:91:7e:8c:a1:a3:21:34:92:d4:7b:38:c6:c2:88:58:
c7:fa:11:f0:5b:23:34:ec:cd:fa:28:9d:13:9f:d0:c9:52:94:
af:a5:d4:7b:eb:70:28:ad:49:fe:83:b9:ed:e2:5c:b2:76:0c:
14:e6:0f:02:1e:65:b6:d5:4b:83:aa:8e:fb:66:f7:67:3c:80:
53:61:29:e9:9a:0b:59:ed:19:54:b9:2e:4e:6b:7f:e1:f2:77:
d9:df:bb:6f:20:96:ea:16:aa:b6:6b:d5:42:9a:77:b1:b1:b0:
06:f1:26:a5:86:d4:1b:76:b0:9f:38:08:09:3e:1f:3d:6b:dc:
fb:aa:d1:66:bc:41:b9:f3:79:96:e0:91:11:aa:6c:62:e4:ac:
3b:94:3f:32:dc:5a:12:4f:21:9e:66:af:ba:1e:85:a3:ab:2e:
d7:13:84:2e:29:a3:5d:8e:13:d5:ad:c8:2c:0c:94:4e:b6:e2:
f1:08:5c:15:3c:ae:46:a3:52:d5:c4:31:3a:60:42:ed:f8:78:
50:5a:32:11:29:41:61:f6:d4:00:b6:38:27:b2:08:8d:08:52:
55:55:55:dd:5c:60:2b:2b:1f:2a:ef:03:31:b2:ab:1a:fc:38:
e7:e5:14:d8:9b:12:54:df:8e:a2:f2:d4:66:c3:4d:9b:d5:e7:
80:25:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org