Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uhttVq4ZmMwJ56QbsDsssB9VddQ.roa
File: uhttVq4ZmMwJ56QbsDsssB9VddQ.roa (raw, json)
Hash identifier: BllNem22wsFWqu5PLnTS65Zg0ZCsmu8blOrBWLsR8M0=
Subject key identifier: BA:1B:6D:56:AE:19:98:CC:09:E7:A4:1B:B0:3B:2C:B0:1F:55:75:D4
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A696EDDF4AEDC9E24E5F10C75FDB58985
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uhttVq4ZmMwJ56QbsDsssB9VddQ.roa
Signing time: Wed 06 Sep 2023 07:39:47 +0000
ROA not before: Wed 06 Sep 2023 07:39:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47585
IP address blocks: 5.105.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:6e:dd:f4:ae:dc:9e:24:e5:f1:0c:75:fd:b5:89:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 6 07:39:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba1b6d56ae1998cc09e7a41bb03b2cb01f5575d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:95:18:41:2e:f5:2d:fc:ba:62:01:53:74:
ac:5d:97:28:bd:32:47:13:e3:52:0c:28:ad:b2:88:
f5:f5:ee:1a:45:90:8e:83:b4:83:9f:00:5b:9c:ac:
03:26:60:02:8d:6f:63:cc:ad:f9:8b:d7:35:89:75:
48:76:e6:38:39:88:e7:c9:e3:94:94:09:2b:ea:2d:
39:18:1e:62:45:89:19:35:d7:3c:f5:6c:5a:71:3e:
e1:97:37:31:ec:92:8b:ce:86:5a:55:6d:19:46:58:
05:fb:a4:ed:77:93:a1:64:3a:e3:63:ba:78:28:1c:
1a:75:d9:c6:b1:e6:10:ce:98:8e:19:f7:5b:8e:e3:
8a:0c:5d:18:06:62:ca:3d:a3:74:8d:6d:22:ba:ac:
90:74:dd:3d:de:a9:ff:11:9a:ab:e1:27:6b:48:07:
d5:99:15:24:f8:b1:2f:85:45:d2:96:28:87:e6:8b:
d0:c4:c1:c6:3d:83:74:cb:da:4f:a4:bd:ad:41:0b:
c2:b6:9e:a0:d6:8e:42:a4:75:9d:33:08:09:d2:ce:
c9:8b:ad:31:72:ab:07:ea:2e:d5:46:17:a9:f5:f9:
a0:97:b5:90:54:a9:cd:02:a9:4c:1c:f0:23:14:36:
ee:64:2b:0f:0b:71:b3:1b:60:06:25:3a:3e:99:d7:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:6D:56:AE:19:98:CC:09:E7:A4:1B:B0:3B:2C:B0:1F:55:75:D4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uhttVq4ZmMwJ56QbsDsssB9VddQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0d:27:10:14:e0:8e:52:92:c6:00:53:34:7e:1f:00:ec:78:
4c:a1:da:5a:be:27:d3:d4:bd:47:75:eb:a4:50:b2:36:48:99:
99:b5:6e:51:21:e2:05:17:f0:f6:fb:50:a3:63:f0:44:2a:ac:
bb:34:c0:90:27:b1:78:99:be:66:56:dd:52:2a:df:49:aa:07:
89:f9:f0:df:62:df:75:cc:4c:8d:82:3a:31:90:a7:52:b7:8e:
b4:d7:64:c4:b7:57:87:2d:53:86:36:fc:bf:92:ad:ee:e6:fa:
b6:fd:65:0b:d2:e9:f0:83:ca:4a:db:f7:ba:41:d9:02:9c:ec:
0a:7e:d9:f9:7d:5c:87:7b:76:9a:f2:10:40:2f:6c:77:80:b7:
26:cb:31:b8:19:22:85:60:70:f3:d1:5d:b9:52:b2:45:6b:65:
32:c4:37:51:16:7f:be:36:4f:b1:5d:29:9c:89:c2:50:92:44:
1f:88:02:8b:d9:16:49:f6:31:f2:4e:f6:dc:48:63:53:0c:9f:
09:bb:17:5e:56:a8:3b:e4:cc:c5:30:7c:6f:f8:94:45:3d:41:
da:3c:b9:d2:74:ec:78:f4:28:ed:77:f5:67:3a:29:9f:17:02:
fa:e8:59:e5:de:c4:8a:cd:0a:df:7d:b5:2f:65:7f:bf:67:11:
72:89:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 18:33:32 2023 by rpki-client on console-fra.rpki-client.org