Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/r0S1p5jGRhQfPBbTDUfinS8c9Tc.roa
File: r0S1p5jGRhQfPBbTDUfinS8c9Tc.roa (raw, json)
Hash identifier: 6m2fYIL7LmoqWJhVHOpMvR9qxWhMO+LtoK3szK+GB64=
Subject key identifier: AF:44:B5:A7:98:C6:46:14:1F:3C:16:D3:0D:47:E2:9D:2F:1C:F5:37
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187938E2EA4488C6B694E9C9E6E8A2FCFBD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/r0S1p5jGRhQfPBbTDUfinS8c9Tc.roa
Signing time: Tue 18 Apr 2023 08:49:41 +0000
ROA not before: Tue 18 Apr 2023 08:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:8e:2e:a4:48:8c:6b:69:4e:9c:9e:6e:8a:2f:cf:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 18 08:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af44b5a798c646141f3c16d30d47e29d2f1cf537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:54:5c:9e:29:7c:19:24:9a:14:57:62:ad:
13:20:45:2e:9e:5f:0b:e3:49:4c:83:93:45:96:60:
a3:07:28:71:97:84:ce:cb:bd:30:19:8b:14:3e:43:
a9:2f:56:d9:64:17:88:b8:01:d1:dc:18:b2:64:5b:
c0:8e:4d:90:a0:03:7d:13:e0:45:2e:11:d8:dc:70:
f5:20:e2:d2:89:46:64:64:35:4d:cb:22:de:67:2f:
d4:6c:8e:8b:5d:2b:4f:92:cc:c0:60:2e:aa:b7:da:
5c:5d:3b:30:de:96:c9:e3:b2:13:ab:7d:d8:dc:99:
8f:f7:18:34:99:be:f1:98:b8:cf:ac:73:e7:f5:d3:
47:9f:46:7b:59:59:09:35:31:89:5e:4b:eb:f9:fc:
a1:3a:c9:35:03:fd:88:d9:81:3e:b1:a1:9e:9c:15:
46:42:ee:7f:32:54:e6:e3:cb:f3:7f:a0:1e:75:16:
e2:0c:de:80:a9:1e:2a:93:ba:a6:13:4a:8c:b1:08:
41:75:92:7c:f5:66:96:58:94:d3:bf:af:b1:c9:1e:
07:99:e3:bf:9f:b6:af:fc:2f:10:0e:50:62:64:05:
da:bb:42:7d:a2:88:77:a4:a5:c8:b2:4b:84:e5:cb:
3a:a2:86:ba:b8:bb:0c:0e:c0:cc:fa:c3:66:1a:fc:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:B5:A7:98:C6:46:14:1F:3C:16:D3:0D:47:E2:9D:2F:1C:F5:37
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/r0S1p5jGRhQfPBbTDUfinS8c9Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.131.0/24
5.105.156.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7d:88:06:8a:e6:9b:91:07:75:a0:be:a1:79:61:6f:36:63:
d6:87:9a:ba:9b:4c:e4:52:81:37:df:a2:dc:b8:f9:5e:5c:0f:
05:08:50:09:eb:41:e1:36:81:8a:73:81:5a:f8:c0:94:90:b3:
87:55:45:2d:34:34:86:38:e4:d8:cc:e8:10:01:65:2c:ad:ed:
68:64:d0:07:ba:34:d3:1e:ab:18:4b:65:d2:5b:6a:c1:1c:e8:
98:ac:66:53:7e:22:3e:40:87:e1:07:7e:e2:f3:eb:f3:45:e8:
06:1d:16:f8:ed:da:c3:86:af:18:da:9e:bc:b3:c3:93:b6:cf:
ee:97:48:96:15:31:fb:97:f4:64:fa:b5:85:20:b6:83:c1:b3:
8b:bf:d0:40:3f:1e:03:38:4d:15:7b:9c:14:d5:37:fd:29:0b:
11:ef:7c:21:78:91:16:72:22:c1:8f:78:d1:19:a9:af:52:ba:
bc:3f:d3:85:1c:b4:7a:92:6b:c2:3c:a1:b7:f8:1d:57:23:ef:
1a:4a:8b:a6:65:e4:61:96:b7:c0:46:5f:59:b8:2f:e8:bf:33:
13:84:24:4e:66:36:de:23:00:6b:05:76:b4:b8:d0:63:a5:61:
71:d1:53:23:2c:83:fc:08:7b:2b:e5:2b:93:a2:9a:56:c0:65:
4c:15:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org