Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s50520PQAzxlb-R2LcgsFcNI8fo.roa
File: s50520PQAzxlb-R2LcgsFcNI8fo.roa (raw, json)
Hash identifier: QLB1jQir5fJGGI9erviZ3z36yj34Qq4Ep5jeQa+PEuQ=
Subject key identifier: B3:9D:39:DB:43:D0:03:3C:65:6F:E4:76:2D:C8:2C:15:C3:48:F1:FA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189965B381A825D137AAB8A0B10093C3E07
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s50520PQAzxlb-R2LcgsFcNI8fo.roa
Signing time: Thu 27 Jul 2023 07:58:27 +0000
ROA not before: Thu 27 Jul 2023 07:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:5b:38:1a:82:5d:13:7a:ab:8a:0b:10:09:3c:3e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 27 07:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b39d39db43d0033c656fe4762dc82c15c348f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:90:2f:21:25:32:84:3c:c8:ad:0b:b1:bb:
ba:8b:5c:2e:d2:3b:39:0d:29:68:a0:49:4e:1a:6f:
a1:58:34:e2:0b:52:26:65:55:40:d0:11:9c:f6:9e:
c1:d5:57:ca:01:ef:04:1f:b9:e4:f2:05:b8:22:15:
d0:70:cc:f2:d0:f5:fd:9a:03:b9:13:92:6e:be:fc:
cb:7b:49:cc:93:4e:76:ac:8c:48:f1:13:31:bf:83:
d0:ad:db:dd:00:a8:d0:eb:e3:d4:6e:8b:03:26:28:
4f:cd:c2:20:97:1d:65:1e:b5:cf:b9:c0:8d:ca:fb:
c5:9b:5f:da:ed:6f:ab:61:80:2e:08:02:62:5c:4f:
7f:64:5d:5a:ad:38:76:37:be:35:45:03:de:ff:cc:
1a:9f:fb:ca:87:1e:e1:34:c1:f3:df:c1:f4:37:05:
b1:85:ef:eb:25:32:e4:0c:07:43:57:d6:08:be:fc:
a3:fc:40:40:0e:3b:9e:59:62:2a:95:0e:fa:9c:69:
8f:ee:ae:3f:3b:7f:67:a4:f0:86:08:75:ec:61:9e:
6d:76:fd:26:c2:05:cf:2e:f4:7c:13:40:60:15:01:
6e:dd:82:36:f8:0d:bb:c2:ec:4a:2d:13:96:cb:b9:
86:fe:4f:59:4e:82:77:c4:c6:33:d8:10:44:e9:17:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9D:39:DB:43:D0:03:3C:65:6F:E4:76:2D:C8:2C:15:C3:48:F1:FA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s50520PQAzxlb-R2LcgsFcNI8fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.43.0/24
5.105.81.0/24
5.105.96.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:f4:74:aa:29:87:6f:18:d4:5c:36:b0:9d:28:b4:d8:7e:10:
43:d6:54:2a:62:86:99:87:cf:05:f7:1e:8d:bc:91:b8:cb:cc:
00:93:90:c4:9b:9d:5b:fc:67:28:b0:bf:c5:ca:37:59:37:37:
4f:d0:55:54:dd:66:4d:67:1a:ad:61:44:13:b2:c6:3d:3d:6c:
e3:57:45:3b:19:48:d4:64:80:e8:98:3c:88:94:9c:01:07:96:
d4:6a:0a:38:7f:c3:7c:eb:af:58:db:53:f1:10:5c:d9:5d:34:
dd:7e:e7:ee:da:41:31:57:10:42:5e:67:4c:71:c4:16:fa:a1:
b7:7f:be:fb:d3:b8:c7:f9:ca:e0:7a:f5:a8:36:09:8d:c0:78:
8d:a2:b5:57:0b:96:92:87:e5:d4:01:92:80:a2:06:9d:c4:25:
c4:9f:6c:6a:11:5c:4c:6e:69:e5:47:09:b8:29:f3:18:02:04:
bf:90:e6:0a:97:5f:08:f0:d1:bd:3e:92:57:87:6b:50:e0:b6:
a6:7a:11:8a:eb:3d:f2:5c:57:be:9b:04:9a:8c:48:2b:15:ec:
8a:a8:48:fd:d3:0b:15:69:bf:bc:5c:9a:e1:32:75:ba:c1:30:
4b:55:33:df:38:9f:8b:05:95:a1:20:96:a3:6e:ff:26:d5:dd:
30:50:7e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 13:16:14 2023 by rpki-client on console-fra.rpki-client.org