Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/weYIIPH1PbnKJfT61MA11ki1mQk.roa
File: weYIIPH1PbnKJfT61MA11ki1mQk.roa (raw, json)
Hash identifier: tCXbCDA57q9VaQxphXfP/jZZzu2qNYQIYm7FQiwoweA=
Subject key identifier: C1:E6:08:20:F1:F5:3D:B9:CA:25:F4:FA:D4:C0:35:D6:48:B5:99:09
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189D39A185354571D9CFE59A3024BD24E5A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/weYIIPH1PbnKJfT61MA11ki1mQk.roa
Signing time: Tue 08 Aug 2023 05:23:58 +0000
ROA not before: Tue 08 Aug 2023 05:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 5.105.165.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:9a:18:53:54:57:1d:9c:fe:59:a3:02:4b:d2:4e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 8 05:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1e60820f1f53db9ca25f4fad4c035d648b59909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dc:21:18:16:6b:05:fe:2d:46:91:b8:6a:37:
7b:85:ab:8c:ef:e4:e8:1f:af:a5:8c:6d:01:ad:3e:
31:f2:bd:9c:8c:74:83:1b:65:b2:3c:17:0f:06:9c:
be:9a:b0:6f:0b:8d:45:92:a8:c4:3b:af:a8:2f:e5:
57:21:8b:df:7c:8f:d0:88:e4:87:4c:0f:52:ca:99:
4d:4e:19:48:13:82:bd:b8:49:99:1d:89:ec:75:a7:
52:9b:17:0b:f9:7c:74:b7:9d:f8:db:49:a0:81:bf:
1f:fa:f0:32:32:62:eb:97:49:b2:f0:a4:e8:63:b4:
7b:9d:e1:d1:d4:43:e2:67:e3:58:36:92:22:58:ca:
3f:b9:43:76:c2:19:e9:69:37:d5:e9:c6:f4:a2:57:
26:d7:97:a5:76:df:99:85:6e:e4:4d:1d:e4:a8:fe:
e9:28:a9:4a:ab:79:f0:50:17:be:35:f0:e1:7a:63:
5b:ef:d1:83:1c:63:b5:c5:b8:39:9a:c4:42:a8:0c:
55:82:a0:84:ef:dc:67:8d:0e:06:3f:d9:58:3b:1c:
d7:df:67:a5:70:80:fa:94:bf:74:54:f8:3c:da:ea:
11:60:e9:57:1a:12:33:27:2d:5e:92:98:87:31:1c:
54:a6:82:98:55:87:19:a1:f1:17:b6:ef:c8:60:85:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:08:20:F1:F5:3D:B9:CA:25:F4:FA:D4:C0:35:D6:48:B5:99:09
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/weYIIPH1PbnKJfT61MA11ki1mQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.62.0/24
5.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
63:03:60:49:92:9b:2a:d6:ea:69:d7:a6:a1:ab:f0:6f:73:f0:
54:d4:fd:4c:9d:fa:21:66:70:ae:71:da:96:a2:be:c9:86:bf:
a8:cd:72:77:82:71:db:1e:1c:e7:81:d3:88:e9:78:c6:66:e3:
48:5d:82:27:2c:63:6e:d1:4b:66:29:61:dc:8a:cb:10:24:76:
b6:83:89:ae:29:46:ec:33:3f:58:36:7a:c7:23:c0:95:0b:35:
75:ca:a4:cd:1d:e8:a3:9a:a7:2c:ec:a2:70:a0:97:c0:76:d0:
70:7b:44:6e:5e:13:98:b2:13:20:79:42:dc:dd:8b:dc:a5:d3:
eb:61:d8:e6:30:d3:86:13:a6:96:50:07:f8:c5:32:53:f2:44:
2f:cb:ce:5d:f6:aa:70:34:6f:bb:e1:2f:6d:9c:7f:aa:0d:63:
ec:f1:03:95:e1:9c:42:6f:dc:bd:2f:b4:29:ea:eb:96:09:a9:
38:d4:12:c6:b0:ee:d9:2e:1a:11:40:9e:1d:12:3e:91:87:4b:
8f:aa:b3:df:c2:56:3e:de:a4:45:4e:6b:7b:bd:f6:8b:b8:5d:
0c:c6:1a:9e:0f:a1:11:76:04:88:58:00:0f:fd:7f:6c:33:72:
da:2d:c7:ad:f5:a3:61:56:16:0e:3a:95:58:a7:a1:c2:2e:9f:
8c:df:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 08:26:54 2023 by rpki-client on console-ams.rpki-client.org