Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s5Hfkhl0rJMt2jXN2m2lsJYxLLA.roa
File: s5Hfkhl0rJMt2jXN2m2lsJYxLLA.roa (raw, json)
Hash identifier: ZYFg2RzJ1vH8o9Zff6tqV4PrQDW9CyBDj7GpQaK47R4=
Subject key identifier: B3:91:DF:92:19:74:AC:93:2D:DA:35:CD:DA:6D:A5:B0:96:31:2C:B0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189F59E1ED36630D277E64FF68C5410689F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s5Hfkhl0rJMt2jXN2m2lsJYxLLA.roa
Signing time: Mon 14 Aug 2023 19:55:27 +0000
ROA not before: Mon 14 Aug 2023 19:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 5.105.15.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:9e:1e:d3:66:30:d2:77:e6:4f:f6:8c:54:10:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 14 19:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b391df921974ac932dda35cdda6da5b096312cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:73:79:a5:3c:36:d1:a3:b0:67:5b:6e:2b:
7e:2e:ff:8c:fc:e5:4c:b5:ef:23:80:c8:c5:89:4b:
ff:01:19:a2:0e:79:b8:f7:b9:b3:e8:fc:90:d6:c5:
79:0d:3b:16:e4:aa:77:c5:ef:99:d5:cd:eb:f1:48:
88:6f:54:d4:48:58:06:3c:96:29:5e:90:12:39:33:
af:63:f2:1b:3e:f6:b6:45:fa:ec:a6:27:c0:47:e5:
c9:8f:27:3b:71:fa:05:9f:74:6e:9b:98:99:14:1c:
f2:6a:60:98:33:50:a8:92:7f:be:21:3a:08:ad:76:
4d:5d:ef:25:d7:fd:f0:40:96:6c:98:03:f9:79:ce:
ff:37:c4:97:da:bb:d8:d9:34:b5:a7:64:ef:76:e8:
3e:78:b2:60:a8:69:17:87:90:e1:6f:a4:2f:2e:e3:
03:ea:80:c0:cc:6c:4b:21:14:3a:55:5d:6b:5c:36:
63:a9:c7:71:ff:7f:56:d2:e3:33:cb:67:ee:f8:fa:
d3:10:8b:60:b8:37:33:d3:9c:3e:34:b0:33:60:df:
66:bb:08:69:3a:e1:19:b8:37:53:d9:86:0d:db:97:
e9:f9:cf:2f:4f:f7:e7:b7:8c:4a:86:0a:64:9a:1b:
d6:04:48:b8:a1:71:02:f9:c0:a5:71:ed:fc:8b:62:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:91:DF:92:19:74:AC:93:2D:DA:35:CD:DA:6D:A5:B0:96:31:2C:B0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s5Hfkhl0rJMt2jXN2m2lsJYxLLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.15.0/24
5.105.33.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3d:87:8e:d7:72:6e:e8:b1:1e:e9:c3:7f:e4:19:29:55:ca:
44:d6:67:bb:a4:0e:71:74:bd:cb:9d:a0:22:18:93:b5:9a:ea:
a1:52:7e:ce:c4:d8:65:bc:44:ce:ae:66:57:bd:41:57:51:34:
06:26:e4:20:36:d3:61:4c:ba:42:fb:66:5d:06:70:00:00:80:
da:60:66:1f:31:87:dc:48:30:18:ec:08:c9:04:21:09:ab:ba:
ca:4e:76:48:65:44:63:d5:8f:c1:4d:80:98:18:91:8f:af:14:
7b:f0:e5:c6:c7:f6:fe:04:10:1c:c4:d8:e0:b3:c9:ac:a1:9d:
43:ed:a1:c7:e0:8f:61:1b:55:4e:34:6f:da:18:3c:81:03:c6:
da:b0:22:4b:9a:1f:19:c4:93:9f:9e:3d:13:c6:2a:9a:19:b9:
c5:5a:7f:42:1a:59:68:a7:2d:9c:e8:c0:b9:42:39:33:90:65:
6d:36:ad:cb:01:33:b0:e9:e7:67:e7:33:16:90:b6:48:95:59:
7f:e8:de:b5:74:ec:43:be:eb:6a:8e:3c:82:f2:5e:72:e1:f1:
86:9f:a0:1f:56:17:20:9d:43:d9:8e:01:cb:2f:f0:05:0a:37:
f9:fe:b6:1b:86:0d:26:0c:71:1c:be:1e:ce:92:d0:ce:88:c4:
06:61:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 11:05:47 2023 by rpki-client on console-ams.rpki-client.org