Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-GimiD9mgL-4iapOw7YrzTH76ig.roa
File: 1-GimiD9mgL-4iapOw7YrzTH76ig.roa (raw, json)
Hash identifier: YIk1nphAww7fWhaQ0LRDOMeq32+LDg6eo3KV+E8vpDI=
Subject key identifier: F8:68:A6:88:3F:66:80:BF:B8:89:AA:4E:C3:B6:2B:CD:31:FB:EA:28
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E69EFDE1655A5545FD9C308863A102B9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-GimiD9mgL-4iapOw7YrzTH76ig.roa
Signing time: Thu 04 May 2023 11:56:32 +0000
ROA not before: Thu 04 May 2023 11:56:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:9e:fd:e1:65:5a:55:45:fd:9c:30:88:63:a1:02:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 4 11:56:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f868a6883f6680bfb889aa4ec3b62bcd31fbea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:13:d0:22:f3:25:d1:2b:4d:56:eb:19:ba:
7d:b2:e9:06:37:0a:2c:a3:da:f8:9f:2a:bd:23:da:
19:ea:99:52:5d:0c:56:3b:55:51:b5:f3:ef:35:84:
ae:5d:6a:7c:67:d4:2c:66:48:bf:3a:1e:c6:7c:84:
63:8b:9a:16:4e:9e:6c:eb:fe:47:09:b3:72:9f:0d:
68:28:eb:c9:f7:1f:55:6b:14:cc:9e:08:fa:0f:63:
6b:0e:96:c2:61:35:a1:4d:c2:e9:d2:c5:a7:00:7a:
c1:8d:12:3d:f2:e3:12:8f:27:e3:ca:4a:c2:cd:69:
ff:f9:a8:9b:a9:36:b3:87:58:4b:82:01:5f:7c:2a:
6a:0f:be:eb:ea:9a:c4:ec:c4:32:68:83:8b:f1:a0:
09:30:44:d3:88:8c:fd:b6:8f:ad:ba:d1:f4:10:c5:
fa:46:62:e8:d3:9a:d3:2c:0c:dd:84:5f:0b:d1:17:
31:6f:25:2f:12:22:8f:95:22:5e:df:85:8c:ed:50:
3c:5f:9d:85:81:01:2d:79:ea:6c:c8:94:e1:02:6c:
e7:6d:1a:89:44:b4:22:01:73:5b:a1:3d:d8:de:ad:
f9:32:ed:1a:96:57:51:e5:f8:95:76:2d:a6:2f:f9:
b1:b3:45:37:20:8a:f2:eb:8c:a9:c0:89:95:56:82:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:A6:88:3F:66:80:BF:B8:89:AA:4E:C3:B6:2B:CD:31:FB:EA:28
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-GimiD9mgL-4iapOw7YrzTH76ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.38.0/24
5.105.79.0/24
5.105.90.0-5.105.93.255
5.105.108.0/24
5.105.122.0/24
5.105.222.0-5.105.225.255
Signature Algorithm: sha256WithRSAEncryption
ae:63:ab:dd:f2:e8:a4:f9:bb:c6:52:ab:1a:8c:ed:60:1e:3c:
41:53:30:cc:e5:0f:7e:2d:ad:70:81:96:26:02:f7:91:bb:bd:
e4:5d:ed:70:2a:ff:d3:8b:f7:e4:cc:b0:18:63:db:a6:7a:b1:
d9:6e:77:24:da:75:b2:86:cf:4a:22:67:0c:9e:d0:53:24:51:
ec:e4:5f:da:d8:ec:fc:92:60:15:61:35:3b:f1:b7:57:50:98:
01:de:24:2b:e2:d9:2f:85:a4:16:06:59:a4:5e:05:f0:ca:98:
49:03:e3:ea:8b:da:2a:e0:2a:73:94:a6:e6:05:5f:6c:50:41:
70:7e:dd:ea:de:11:e6:9d:e1:2d:fa:dc:c7:c3:e8:c9:98:70:
ba:de:23:d8:58:50:08:32:d4:78:af:a2:a4:d2:32:56:59:60:
eb:5f:64:05:cf:ac:1f:67:ab:9d:82:1c:75:43:d2:18:82:be:
0b:a5:aa:80:59:7a:db:d5:a9:21:fd:a9:f6:65:2d:0c:1a:51:
6f:b3:b8:d2:5b:b6:87:52:8b:08:b9:30:40:da:38:c2:31:9c:
20:17:a8:90:fe:8f:3f:46:6d:f4:64:6f:56:63:71:f6:8b:9b:
16:67:e3:51:44:9e:9e:ee:83:f6:37:e6:86:f5:24:bc:85:23:
50:69:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org