Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-2jFAEzP0ikm5IqBaeZMUg9yiDI.roa
File: 1-2jFAEzP0ikm5IqBaeZMUg9yiDI.roa (raw, json)
Hash identifier: ertzAIdkENZPubOiC5y9CLIX1rkIxtZO6mbfDBQvvEQ=
Subject key identifier: FB:68:C5:00:4C:CF:D2:29:26:E4:8A:81:69:E6:4C:52:0F:72:88:32
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018682A995065A2F60497C7B6683C85287FE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-2jFAEzP0ikm5IqBaeZMUg9yiDI.roa
Signing time: Fri 24 Feb 2023 09:03:17 +0000
ROA not before: Fri 24 Feb 2023 09:03:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 08:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:a9:95:06:5a:2f:60:49:7c:7b:66:83:c8:52:87:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 09:03:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb68c5004ccfd22926e48a8169e64c520f728832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:57:b0:2d:d8:25:7c:8d:83:71:c3:12:fa:
a7:cb:b1:14:23:77:03:70:09:cb:4e:de:7b:f3:fd:
ec:98:a9:e9:95:d0:b2:a7:20:7e:f9:43:2d:e5:3d:
a5:df:db:b9:e2:5e:8f:7a:15:47:b5:f4:18:a1:76:
30:be:98:35:06:c8:85:da:2b:26:5c:9d:56:69:3f:
35:0b:f5:23:0c:63:fc:2a:8a:9b:b5:39:58:21:37:
6e:6c:f7:0b:59:65:cf:7a:0c:c5:01:88:f6:48:6a:
b1:76:78:bf:60:76:c7:1c:69:5d:00:a4:a4:b5:e0:
0a:df:ca:7b:86:8e:95:af:1c:e5:ec:46:e7:7f:48:
c5:1f:62:72:23:32:3f:87:da:b2:c3:df:5f:5f:14:
c0:c2:e0:d2:ba:88:9c:ad:8e:f6:8d:ac:ba:e6:4e:
de:1a:d1:e9:ad:e5:b0:c4:d9:e1:a0:f8:83:4b:8d:
f7:ce:60:41:80:35:89:e9:f6:91:e2:7c:90:cf:a4:
a8:39:05:f3:a4:10:bc:dd:19:4d:6c:a2:8f:8f:f4:
9a:db:17:ae:d4:53:f6:8c:0c:fb:ae:7e:d3:d0:3a:
44:d4:cf:27:c4:58:0d:38:0a:72:86:66:51:28:f3:
c9:78:94:35:fd:e1:58:87:0a:76:06:40:6b:d6:f7:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:68:C5:00:4C:CF:D2:29:26:E4:8A:81:69:E6:4C:52:0F:72:88:32
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-2jFAEzP0ikm5IqBaeZMUg9yiDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.80.0/24
5.105.82.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.156.0/23
5.105.168.0/24
5.105.172.0/24
5.105.197.0/24
5.105.214.0/24
5.105.216.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e3:06:bb:11:1f:b8:1c:d9:2c:3d:6e:44:f4:10:61:be:87:
c4:45:58:04:b6:0b:1c:b3:08:f7:c0:e8:83:70:2a:ad:c9:4d:
a6:38:06:8a:5d:fe:34:25:61:c8:d3:7f:2e:5f:3b:b8:d8:94:
dc:9e:49:58:b5:91:5c:5c:cb:d8:42:fa:19:e7:3c:1f:d0:c1:
13:37:c3:de:9e:3f:c0:ec:37:bb:fa:d2:b2:eb:6c:99:ee:29:
4a:cc:05:64:60:3e:61:61:78:8c:20:c1:df:6b:0f:c1:90:76:
73:1f:2b:61:d3:cf:9b:f4:e6:e0:7d:ab:3e:32:e0:04:d9:fb:
d8:4c:ea:1e:b4:00:02:a8:69:a9:90:af:e6:cd:45:ee:98:6f:
fa:12:8e:a6:2f:22:77:8e:76:cd:59:b3:d9:79:ed:a0:1f:20:
43:31:09:e8:a3:9a:4b:09:86:ec:bb:51:ab:f2:e6:d6:41:2b:
cf:78:55:db:2a:7e:27:fe:6b:90:48:44:14:72:78:c7:89:84:
fc:00:a6:6d:20:b1:60:6d:23:ce:89:08:27:04:83:97:d2:d5:
02:c3:af:86:27:e8:12:96:95:d9:76:20:d8:2c:82:c9:a0:d9:
0b:9c:8f:54:f8:94:30:ba:3c:1f:8d:e9:1f:7d:60:f7:0c:62:
d0:7c:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:54 2024 by rpki-client on console-ams.rpki-client.org