Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/u8NpIhQz6vNORHj9lfcI8xMjumg.roa
File: u8NpIhQz6vNORHj9lfcI8xMjumg.roa (raw, json)
Hash identifier: QBt797QY/OrheEg5bxuw6ZSGTki7MNyobwlU558jrfc=
Subject key identifier: BB:C3:69:22:14:33:EA:F3:4E:44:78:FD:95:F7:08:F3:13:23:BA:68
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188BE30B992FD8FF6E1C90EE0FEC3B4A232
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/u8NpIhQz6vNORHj9lfcI8xMjumg.roa
Signing time: Thu 15 Jun 2023 08:34:04 +0000
ROA not before: Thu 15 Jun 2023 08:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 5.105.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 09:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:30:b9:92:fd:8f:f6:e1:c9:0e:e0:fe:c3:b4:a2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 15 08:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbc369221433eaf34e4478fd95f708f31323ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:9c:5b:bb:0a:a6:f5:54:75:b7:77:7e:a2:
e6:5b:1b:91:0a:4b:88:6f:a7:05:4d:f7:1a:f7:71:
43:a6:8c:aa:eb:7c:b5:90:a8:51:f0:12:6d:2b:59:
6f:f0:03:69:43:7f:23:29:5a:28:8c:d5:0e:38:42:
99:b1:6b:32:f5:7c:5f:d1:ca:d4:06:40:ee:60:2c:
c3:32:7f:70:cc:ce:ff:26:dc:de:c4:d0:c5:dc:16:
28:f7:a2:21:c0:22:56:a7:18:8a:a5:e5:0b:4e:1a:
7a:77:d0:86:d2:52:5f:68:6e:25:7e:f6:ff:67:03:
a1:ff:40:dc:1f:9a:53:66:87:8c:ef:b3:cc:b2:6a:
9c:c9:82:62:3d:13:32:6d:3a:5b:cb:1b:4c:46:e3:
0d:92:36:72:16:27:2f:1c:39:e8:04:fc:ad:ac:87:
91:fb:c4:3f:e6:a1:0a:2a:5a:87:49:3c:72:59:1c:
97:af:db:a3:d4:50:ce:16:72:d2:c1:1d:67:2c:1a:
b1:85:fe:fb:a0:90:d3:91:04:8a:53:6e:35:bd:1b:
a7:78:93:33:32:7e:25:91:16:03:63:0b:4f:ae:6b:
65:be:98:bb:90:e6:63:89:15:fb:f2:7a:5f:9e:96:
7e:4e:a3:92:27:c5:c8:e1:91:0d:2d:fc:1a:19:cd:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:69:22:14:33:EA:F3:4E:44:78:FD:95:F7:08:F3:13:23:BA:68
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/u8NpIhQz6vNORHj9lfcI8xMjumg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.169.0/24
Signature Algorithm: sha256WithRSAEncryption
32:44:c4:c4:b5:ac:1b:fe:f6:11:ee:05:27:1b:c0:18:66:8e:
67:6d:11:b3:35:2e:61:3f:7b:6d:d3:d7:7d:88:ba:42:ff:e0:
00:f8:b4:70:00:cf:91:06:4a:39:5f:14:63:18:a9:5d:3f:3c:
ec:d7:05:41:43:67:bc:d4:fe:65:9b:00:be:43:67:9c:c6:6f:
0d:45:91:2e:35:99:2a:82:53:46:0a:10:c9:ea:18:a3:7b:71:
65:6e:2b:d6:2b:bd:76:79:42:c6:d0:86:83:3c:1b:e8:6b:9e:
c3:15:67:8e:e0:74:b7:73:ea:ae:d0:9a:27:9d:67:52:b4:7b:
81:2b:09:6f:ae:87:02:8f:9d:64:cc:6e:fc:ff:a6:ca:42:aa:
3c:c1:a9:e6:62:30:b6:13:ac:59:eb:83:9c:88:98:4b:fc:5b:
eb:87:6e:cb:8f:6b:3d:8e:bf:f5:1d:d1:7c:d6:87:03:3b:16:
8b:5f:b3:cc:53:13:7d:33:87:60:5e:2d:5f:12:8d:82:1a:6f:
ad:e8:aa:31:1f:53:54:f6:4a:eb:14:cf:5e:ed:26:62:dd:82:
20:53:b4:73:b4:e0:ce:cc:d9:09:94:18:d2:8e:39:7d:3b:be:
09:20:b6:a6:fe:7c:57:37:c9:a9:8c:a7:2c:f2:aa:af:a0:46:
f5:58:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:29 2024 by rpki-client on console-fra.rpki-client.org