Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3InatVUuCPVNppXizjQtx-Bnn60.roa
File: 3InatVUuCPVNppXizjQtx-Bnn60.roa (raw, json)
Hash identifier: tFpzshuoH/yLLzltn1o5j/2jWA/71EaimLznxGDkTt4=
Subject key identifier: DC:89:DA:B5:55:2E:08:F5:4D:A6:95:E2:CE:34:2D:C7:E0:67:9F:AD
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187FF3C387C1D3F60387251F47BF01F1E20
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3InatVUuCPVNppXizjQtx-Bnn60.roa
Signing time: Tue 09 May 2023 06:39:09 +0000
ROA not before: Tue 09 May 2023 06:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.26.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:3c:38:7c:1d:3f:60:38:72:51:f4:7b:f0:1f:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 9 06:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc89dab5552e08f54da695e2ce342dc7e0679fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:0e:bc:45:99:20:70:c3:4f:e0:b0:ba:8e:
52:76:00:e1:20:c3:d5:91:3c:68:05:5e:4b:73:7f:
55:41:94:b6:56:9b:89:8a:29:db:01:3a:5a:33:cd:
42:b1:80:7e:ca:ec:02:af:e3:e5:5f:0d:a7:0c:97:
6b:a3:85:5c:c2:98:0a:ea:97:03:ee:15:23:f6:a4:
f2:5b:88:aa:cf:c3:d2:7a:59:96:f3:ca:76:d9:66:
d6:b1:ce:e1:06:eb:62:f0:4e:81:c4:f5:c2:23:2c:
0f:e9:71:46:40:a3:a6:0c:a8:4f:63:12:d4:c6:9a:
99:9d:f5:10:99:98:40:21:70:7f:a2:a9:f4:94:65:
18:ca:8b:66:60:b8:b4:af:bf:e6:9d:4b:d8:d4:44:
88:d3:71:84:85:41:08:b7:5d:62:92:b2:0f:02:d2:
18:19:cc:79:26:98:b1:17:2f:42:21:4e:07:a2:fb:
db:8e:0b:29:ab:d8:c7:bb:89:9a:01:a3:e1:c6:11:
0d:0f:e9:48:80:c4:c0:13:e8:c7:05:9e:47:63:fb:
fb:6a:9b:5f:27:f6:97:92:84:ad:bd:c5:59:f0:dd:
fe:70:38:5f:b4:c1:d0:6d:5f:30:3f:e5:09:2e:bc:
48:f9:60:b5:58:29:24:c5:a3:fd:4f:27:d9:a8:d1:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:DA:B5:55:2E:08:F5:4D:A6:95:E2:CE:34:2D:C7:E0:67:9F:AD
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3InatVUuCPVNppXizjQtx-Bnn60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.26.0/24
5.105.59.0/24
5.105.80.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a4:3a:a7:51:d1:14:8d:8d:51:a6:94:f2:96:42:69:6c:9c:
bf:73:b3:75:90:a6:41:c3:ac:98:6c:1d:c2:7c:41:4c:16:a0:
40:96:b4:ae:bb:49:5e:10:34:90:53:a1:eb:c4:9e:c2:43:6c:
d4:c7:2b:3a:c1:02:2c:4b:ca:d5:a0:ee:ba:47:05:fb:35:39:
20:2f:57:13:df:77:10:e3:45:67:a2:44:b7:97:ff:0e:55:ba:
e7:b7:72:59:ec:b3:42:7a:a5:b2:a8:43:4e:3c:b8:3f:82:c1:
35:0c:02:fc:8e:0d:55:e4:a0:36:91:88:4f:b5:20:e9:92:a2:
57:8e:25:7d:e0:69:76:99:dc:c8:7d:89:cb:71:e4:5d:89:6b:
61:03:72:66:3a:87:2f:ed:59:ad:2a:ed:eb:d5:0e:67:58:2d:
4f:70:e7:b5:42:07:ed:23:1d:1d:0b:15:33:dc:25:ea:19:79:
0c:3c:ae:2d:15:8b:59:1a:05:67:9d:eb:2b:cb:a4:58:09:0a:
d4:d3:a4:61:30:50:56:2d:f0:f1:60:06:29:51:fb:5e:42:30:
90:ca:76:56:3e:b8:05:ea:06:ba:ac:8d:90:af:ef:b2:d2:61:
35:04:57:d0:79:ed:9d:d1:e8:62:73:6d:32:f3:ac:a6:8e:21:
4f:04:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org