Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0JeoHpRUKJCrHDsxyrFuUGAeel4.roa
File: 0JeoHpRUKJCrHDsxyrFuUGAeel4.roa (raw, json)
Hash identifier: CxKwlr6Km+M2lXggEk5MjeVQUk+rc/NncN3TC4vzUQM=
Subject key identifier: D0:97:A8:1E:94:54:28:90:AB:1C:3B:31:CA:B1:6E:50:60:1E:7A:5E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5BA18BD80BDDA3B32C5CE410BFDF2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0JeoHpRUKJCrHDsxyrFuUGAeel4.roa
Signing time: Sun 01 Jan 2023 05:54:55 +0000
ROA not before: Sun 01 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.35.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:ba:18:bd:80:bd:da:3b:32:c5:ce:41:0b:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d097a81e94542890ab1c3b31cab16e50601e7a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:35:b8:3e:a6:ba:bf:a4:f8:4e:4c:f4:61:
df:8c:47:9e:5d:b6:bc:73:4d:45:a9:97:17:78:4f:
25:73:91:2d:7c:11:8c:9e:7b:33:cf:ad:1d:ba:d7:
00:85:3d:d9:87:c4:12:63:6f:d5:f8:b5:93:60:23:
79:6e:25:fc:eb:3b:32:9b:6c:fa:d7:d6:a8:f2:ba:
26:b1:dd:20:b2:13:2e:26:dd:6a:33:2c:01:89:f1:
13:76:34:c4:b7:06:d5:4d:39:e9:00:b9:55:a4:72:
6e:2c:ea:58:2f:c7:39:4e:e5:fe:96:81:03:61:c9:
f4:a8:79:27:2b:9f:b4:a9:cc:01:a8:30:d6:a8:ac:
b3:21:00:58:1c:e4:2d:78:22:e1:95:70:e2:d2:68:
fd:4a:4a:48:6d:78:37:a9:b4:09:db:60:13:53:a1:
71:a0:86:ba:2b:40:4f:e4:e9:65:b1:a5:3c:0f:0a:
b2:26:ed:46:8d:45:f7:ec:38:91:a1:52:cc:25:ff:
8c:61:90:e4:6c:ce:02:b8:b8:30:88:1a:e1:57:11:
04:4f:94:d0:7b:c7:fc:e0:79:6b:6a:88:67:92:6c:
3f:71:9f:67:d9:df:4d:30:4a:bc:33:aa:1e:e1:97:
39:3b:89:25:bf:c6:10:76:9f:27:2a:19:ba:e6:9f:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:A8:1E:94:54:28:90:AB:1C:3B:31:CA:B1:6E:50:60:1E:7A:5E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0JeoHpRUKJCrHDsxyrFuUGAeel4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.18.0/24
5.105.21.0-5.105.22.255
5.105.34.0-5.105.37.255
Signature Algorithm: sha256WithRSAEncryption
ca:5c:e0:31:97:1b:bf:06:25:fa:fa:ec:f2:6c:73:a8:d6:df:
81:29:53:d8:20:a6:f7:2a:fe:f8:4b:e5:1a:f6:5b:04:b2:ad:
1e:7f:a7:f8:3b:62:72:a3:f4:82:ae:74:ed:3c:2b:5f:c5:f1:
c1:6d:d8:0d:b5:00:ba:5f:5e:b3:51:1e:09:d5:af:81:16:d1:
e9:fb:6d:a8:a8:e7:c4:bf:d9:78:3f:89:2b:24:a8:2d:ae:84:
ff:39:fc:58:e2:8f:df:74:14:ee:24:eb:47:57:39:2a:84:71:
46:d2:2f:e6:94:a2:f8:c2:97:90:e3:5c:19:b9:9f:69:a4:de:
3d:e7:13:fe:c3:8f:63:2d:17:2c:2f:f5:43:d8:b8:1a:16:e7:
02:b1:e9:34:9c:ba:38:2b:6b:cf:61:4a:fc:6b:e6:a0:a1:1f:
be:7e:21:ec:53:d2:73:49:7d:e2:1d:0d:62:db:22:2b:d8:fa:
54:48:ea:dc:e5:33:95:75:91:a6:f2:42:70:86:db:ee:11:c2:
01:d3:7a:a8:37:36:16:25:1a:f3:5b:28:45:1f:90:5d:df:97:
b4:13:5e:54:99:26:b5:41:61:d1:e3:2c:b2:f8:e3:a9:75:72:
12:31:9f:97:33:22:63:a3:eb:7f:07:2b:4a:86:0e:28:56:0e:
86:1d:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org