Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-PDqbolp6Exs48wNEnnG2ZnaD8Q.roa
File: 1-PDqbolp6Exs48wNEnnG2ZnaD8Q.roa (raw, json)
Hash identifier: bOkl8E4VsZCV+DwHCSsGhlcw13oZ7HGtA+XaCShQPJw=
Subject key identifier: F8:F0:EA:6E:89:69:E8:4C:6C:E3:CC:0D:12:79:C6:D9:99:DA:0F:C4
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018804DB6F81B83810328B51196E9F43BBD0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-PDqbolp6Exs48wNEnnG2ZnaD8Q.roa
Signing time: Wed 10 May 2023 08:51:09 +0000
ROA not before: Wed 10 May 2023 08:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:db:6f:81:b8:38:10:32:8b:51:19:6e:9f:43:bb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 10 08:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8f0ea6e8969e84c6ce3cc0d1279c6d999da0fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:2e:c6:a1:a9:8c:0d:ec:44:93:ac:42:e3:
c1:4e:51:31:cc:a1:50:0e:e2:02:62:e9:5c:53:c4:
50:ce:a3:d1:7b:79:71:2c:ef:be:d0:ce:ea:60:23:
52:5a:1e:fd:4f:5b:46:99:f9:41:ec:02:e7:8a:51:
37:d3:e0:ab:7b:7c:e2:d2:72:c0:95:8a:cd:0c:73:
52:ad:0a:18:2c:1e:68:06:cb:48:2d:2f:d3:d6:1b:
46:da:f5:09:e3:e2:20:bf:02:22:73:74:71:8d:f9:
d3:c9:b8:e4:c5:a4:6e:ef:75:5f:bb:f7:8a:2e:21:
fb:63:31:8b:65:96:81:29:74:8f:82:01:a1:2d:d4:
d6:6b:9b:e4:de:b0:07:ee:ec:23:19:da:29:7a:6d:
1d:1c:5c:f0:3f:c5:1b:34:b8:e1:85:6c:a6:84:58:
e7:f9:dc:04:0b:e2:ec:ca:14:1b:83:5e:ff:62:74:
81:1b:19:0b:58:63:7e:9e:a6:b9:d9:e8:f8:c0:1b:
1c:4f:08:b8:6d:6c:66:a9:aa:a7:a3:cc:dd:8d:d7:
e3:e5:b7:4a:af:74:6a:7b:89:e5:66:1b:0a:2e:c7:
2e:e5:cb:9f:f9:61:0e:d9:05:32:bf:fb:04:71:35:
d8:a1:98:c0:ae:f9:7f:35:b9:e9:bb:f0:16:23:64:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:EA:6E:89:69:E8:4C:6C:E3:CC:0D:12:79:C6:D9:99:DA:0F:C4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-PDqbolp6Exs48wNEnnG2ZnaD8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.34.0/24
5.105.39.0/24
5.105.113.0/24
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.142.0/24
5.105.157.0/24
5.105.200.0/24
5.105.207.0/24
5.105.216.0/24
5.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:44:d5:37:93:36:dd:af:45:86:ca:d1:e4:57:b8:57:c1:36:
cb:d5:b2:57:a4:c5:da:b3:44:1d:12:f7:d8:b9:a7:60:7b:53:
b3:cd:53:ac:03:8a:78:14:a7:89:4e:f0:1f:c1:35:5e:83:eb:
59:23:20:29:bf:a0:78:82:6e:08:6d:a9:72:86:34:c3:9b:27:
17:42:1d:4d:47:ee:c5:94:63:2c:07:73:e0:44:f8:9e:c7:ee:
a1:13:6e:bd:dc:8b:0c:29:04:b7:5c:67:16:42:0d:5e:ea:8c:
e2:20:ba:ba:b6:13:fd:1c:f4:ca:12:8e:c3:54:de:26:67:b6:
90:fa:40:32:af:31:7a:dc:62:5a:29:2a:8d:00:11:53:84:13:
73:95:0d:41:ff:31:f8:30:89:e9:bd:4d:2a:45:52:dd:f6:90:
5b:3b:cf:14:ce:b3:88:b0:74:a1:27:8d:be:3c:f3:d6:6c:63:
42:7a:2e:65:cd:ae:b3:8e:d7:62:fc:03:74:39:7d:fc:8d:66:
97:d7:b2:9e:f6:21:c2:c8:42:af:7d:54:1d:7f:0a:8a:9f:c4:
32:67:45:78:34:05:b6:18:df:66:59:fd:f3:14:70:a3:34:9f:
6c:a3:61:3c:58:39:24:c3:97:db:de:94:ca:e2:53:65:a8:02:
eb:f7:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org