Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qP5ALw4lkMbDpmUUERBxHiwm9i8.roa
File: qP5ALw4lkMbDpmUUERBxHiwm9i8.roa (raw, json)
Hash identifier: hiFDDQI1Ho2RBgBoUQgEYlQ0gm1qRygAlmySPXEUIjc=
Subject key identifier: A8:FE:40:2F:0E:25:90:C6:C3:A6:65:14:11:10:71:1E:2C:26:F6:2F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188928730211415B42F42F61E354D45846C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qP5ALw4lkMbDpmUUERBxHiwm9i8.roa
Signing time: Tue 06 Jun 2023 21:05:13 +0000
ROA not before: Tue 06 Jun 2023 21:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:87:30:21:14:15:b4:2f:42:f6:1e:35:4d:45:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 6 21:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8fe402f0e2590c6c3a665141110711e2c26f62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:2a:bf:c8:30:27:6d:ee:ab:0e:58:14:f7:
0e:58:ab:c0:56:64:11:92:0e:5d:b5:c1:5e:12:c5:
70:21:a1:7f:ca:7c:3e:44:6a:5f:4d:65:86:87:1e:
b8:65:30:90:ec:ae:bb:37:46:2b:ba:f5:08:ab:24:
18:27:78:fe:82:07:2c:d5:c2:c6:4c:cc:85:58:f7:
cc:e2:5d:aa:ea:82:92:5c:21:9b:bc:fe:79:6d:d7:
3d:bf:41:84:2f:8e:65:99:dc:0d:70:80:25:21:96:
79:7b:9c:c6:f7:26:92:c8:a4:dc:53:8d:10:6a:50:
a6:ac:ea:ab:f6:dd:86:73:4c:04:3c:cd:4c:63:de:
2b:6d:5a:a3:e9:13:99:b2:2d:f1:10:78:9a:54:a1:
0e:97:72:04:a1:fe:e3:8d:fc:29:b3:76:3f:ef:ef:
c7:6e:c1:ac:8e:29:7d:26:c6:ae:0a:00:3d:9d:c8:
f8:43:d6:c2:13:16:79:66:b1:a5:f3:23:8c:58:e3:
b4:96:1b:21:d3:96:43:43:d9:9a:47:7b:02:14:31:
c0:29:be:3a:04:ea:bc:1f:30:92:ee:18:5a:bc:d2:
30:5d:07:ca:14:66:ca:a2:7f:39:d1:aa:35:dd:0f:
ef:15:35:1f:fe:31:e0:39:57:ea:d6:b3:70:b8:ff:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:40:2F:0E:25:90:C6:C3:A6:65:14:11:10:71:1E:2C:26:F6:2F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qP5ALw4lkMbDpmUUERBxHiwm9i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ed:53:a5:40:a0:86:8e:c4:02:b5:61:33:8b:4a:91:86:78:
26:a4:19:19:1d:6b:f0:73:9e:41:6e:4f:ed:0d:da:5b:be:bf:
50:02:83:12:ee:d2:2a:ab:c9:d2:e9:46:16:c9:36:5a:a4:f5:
65:18:0f:d5:94:fc:1f:88:92:ee:5a:89:e9:40:c5:39:8b:fe:
75:98:c8:14:b6:c6:10:4a:39:8a:1b:07:78:fd:4f:cd:a6:fb:
b1:6d:c1:ff:f1:19:3d:cc:9c:04:ee:c9:16:03:40:ca:d7:3d:
e0:cb:ed:bc:3c:48:22:b4:49:fc:14:5c:c3:90:ad:5d:e5:2d:
e5:0d:37:15:cc:49:59:d5:0f:22:97:73:e2:e4:be:73:bc:a2:
1b:58:34:1a:9e:7f:54:68:fe:e7:b4:99:53:5f:b5:e1:f0:4c:
43:2a:c9:95:ca:26:6d:1a:86:20:ae:1a:a3:05:59:78:fb:c6:
e9:55:be:e7:23:5d:76:23:f4:59:a0:3f:99:ce:f2:f1:64:4e:
26:dd:65:6a:67:33:90:d2:f1:f7:f2:71:41:85:29:37:29:d5:
a0:0f:6e:90:5a:b7:37:97:6e:f4:43:df:21:af:b6:23:7d:7b:
34:be:2b:93:44:47:a3:55:73:68:2f:69:ee:51:39:8a:4a:5a:
45:20:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 30 20:03:24 2023 by rpki-client on console-ams.rpki-client.org