Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1WW0FsR2WmQskMfRRlOOaHSNs0E.roa
File: 1WW0FsR2WmQskMfRRlOOaHSNs0E.roa (raw, json)
Hash identifier: RPMM9i6Ow/qDJtGHUPX7djvVkYbBEewDOMGAdUfqScU=
Subject key identifier: D5:65:B4:16:C4:76:5A:64:2C:90:C7:D1:46:53:8E:68:74:8D:B3:41
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E60E566F772CE85483656C5534B7597B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1WW0FsR2WmQskMfRRlOOaHSNs0E.roa
Signing time: Thu 04 May 2023 09:18:31 +0000
ROA not before: Thu 04 May 2023 09:18:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.142.0/23 maxlen: 23
5.105.248.0/23 maxlen: 24
5.105.164.0/23 maxlen: 24
5.105.68.0/23 maxlen: 24
5.105.186.0/23 maxlen: 24
5.105.198.0/23 maxlen: 24
5.105.206.0/23 maxlen: 24
5.105.202.0/23 maxlen: 24
5.105.112.0/23 maxlen: 24
5.105.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:0e:56:6f:77:2c:e8:54:83:65:6c:55:34:b7:59:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 4 09:18:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d565b416c4765a642c90c7d146538e68748db341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:10:e8:22:79:d0:40:ea:89:65:18:a2:56:c4:
e4:83:06:ac:32:1e:f2:3a:8a:5c:38:29:92:ed:a8:
a9:f3:98:35:14:fd:b7:d0:7e:b2:75:1c:28:7f:a2:
7d:f0:c9:e3:30:6c:94:58:75:99:32:83:ac:59:ee:
6f:f1:2e:20:d3:bd:3f:10:ee:53:ed:2c:46:47:87:
40:cd:9f:8d:71:84:9f:5c:f5:e0:66:c3:7a:f0:7c:
5d:a0:36:bc:ab:57:ae:84:e7:60:23:17:cc:e0:6d:
47:79:f0:fd:db:52:ea:3a:c0:e2:d5:21:a6:82:0f:
83:15:5c:ec:a6:de:1b:c7:e0:51:17:3b:e1:06:14:
e4:c9:ef:b1:54:94:ad:57:07:b7:c1:40:a0:ad:3e:
aa:87:25:64:c9:d6:9f:1d:18:c1:dc:bf:80:9e:eb:
ad:7f:7a:14:66:23:45:3f:cf:23:81:53:ad:f9:da:
8a:99:1a:88:c1:76:0b:e9:8c:e1:d2:77:38:d6:b4:
d9:38:ee:fc:5f:b5:25:60:0e:a8:7c:7a:f1:47:ca:
e0:87:b5:c0:9f:0b:f1:34:6e:55:63:4a:a9:10:7a:
c4:43:05:32:d8:36:89:6a:a1:16:bb:ae:33:7b:8a:
5d:c0:3b:ce:7c:8b:4f:ba:24:16:f5:ac:9d:49:9f:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:B4:16:C4:76:5A:64:2C:90:C7:D1:46:53:8E:68:74:8D:B3:41
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1WW0FsR2WmQskMfRRlOOaHSNs0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/23
5.105.112.0/22
5.105.142.0/23
5.105.164.0/23
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.248.0/23
Signature Algorithm: sha256WithRSAEncryption
60:e1:3a:d5:59:52:17:71:d4:50:33:c3:b4:90:42:cf:90:ff:
09:9c:5c:c8:4e:db:c3:ae:26:bd:bc:27:f8:51:c3:6c:77:21:
7b:aa:58:27:50:c1:e9:f0:7d:69:b0:fa:78:42:b7:f1:23:e0:
58:05:4c:73:9d:c5:e1:b1:f8:3e:68:2c:e9:2f:5e:05:01:a0:
bc:5c:46:25:4f:c2:79:e6:a8:e3:99:a1:74:8b:c2:19:39:55:
43:d2:fa:dc:7d:d4:6e:a4:36:64:2d:cf:f3:a9:be:98:3c:54:
49:7c:c1:52:b7:48:d9:cc:b0:71:a6:bd:3b:ca:69:7a:55:17:
86:90:95:fc:32:33:36:a6:f5:52:7b:5a:7e:ee:3e:3a:8e:56:
2d:d3:a9:12:16:c6:8c:6a:f4:26:11:6f:3c:09:7c:a1:f0:84:
ab:6c:a1:f5:ae:7f:9f:37:32:dc:d8:b2:e4:4e:61:9b:f0:63:
d0:3e:6b:54:da:14:ec:25:b1:6e:8a:a8:f9:8c:c2:71:5e:9f:
aa:d1:19:a8:4f:82:29:c9:93:77:3b:01:ea:05:a3:a1:05:31:
27:47:6d:01:90:15:66:db:f3:7a:a3:20:4c:54:8f:0b:3e:49:
70:bc:24:11:5b:c2:ff:80:30:e0:e0:69:0a:ef:7f:3d:63:f9:
9d:7e:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org