Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5j_RQVcEkUi7PTqPvH7FtV1Z0jI.roa
File: 5j_RQVcEkUi7PTqPvH7FtV1Z0jI.roa (raw, json)
Hash identifier: ++Y38OnWC4uME9p3QAxYIu9gKehb6kttjEQseGFsB4U=
Subject key identifier: E6:3F:D1:41:57:04:91:48:BB:3D:3A:8F:BC:7E:C5:B5:5D:59:D2:32
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188E36046E31D8C8F11D6BC65C3D243ABF5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5j_RQVcEkUi7PTqPvH7FtV1Z0jI.roa
Signing time: Thu 22 Jun 2023 13:51:57 +0000
ROA not before: Thu 22 Jun 2023 13:51:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.14.0/24 maxlen: 24
5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:60:46:e3:1d:8c:8f:11:d6:bc:65:c3:d2:43:ab:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 22 13:51:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e63fd14157049148bb3d3a8fbc7ec5b55d59d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:87:7f:e3:10:eb:03:8e:43:13:43:b5:6c:
1e:d8:ce:16:4f:f9:9a:d9:8b:94:78:88:8d:43:43:
1b:02:39:e0:56:5d:1d:7d:cf:38:cc:e5:45:4f:f8:
07:d5:0c:a6:81:77:35:95:87:30:14:f7:0d:4f:0a:
4a:da:70:a7:b3:a1:78:18:1a:16:d0:52:fc:83:13:
d3:35:23:25:65:bb:2e:d9:ec:3b:e7:81:17:98:7c:
f4:63:83:60:e9:03:ef:60:14:c8:b2:09:3a:4f:3c:
ec:e1:56:99:65:b8:aa:d4:80:e3:16:5e:97:48:41:
b8:91:e4:48:8d:8c:36:cf:eb:30:1a:40:b7:26:52:
c6:57:65:11:c0:d2:55:75:b5:43:4d:22:a8:08:3e:
fa:3a:9a:e7:e2:dc:85:d3:b6:df:68:1a:5f:02:f1:
db:da:a2:0a:cf:53:da:37:f7:fe:79:7e:6c:8b:24:
67:1e:83:ee:96:00:24:51:d9:d2:64:86:14:40:d4:
6e:88:97:b3:17:76:40:f4:05:d3:ef:04:69:e0:33:
ac:db:65:4a:2c:52:cd:f5:f6:e0:09:e4:a6:8b:f8:
d7:f1:7d:b0:03:78:bd:07:be:be:67:a9:dc:d3:7a:
8f:e7:ea:e1:c0:12:bd:30:0f:c4:2e:25:5f:5c:f9:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3F:D1:41:57:04:91:48:BB:3D:3A:8F:BC:7E:C5:B5:5D:59:D2:32
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5j_RQVcEkUi7PTqPvH7FtV1Z0jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.14.0/24
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.142.0/24
5.105.157.0/24
5.105.200.0/24
5.105.207.0/24
5.105.221.0/24
5.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4d:b4:e5:e9:41:20:9d:14:09:fc:57:1a:99:83:56:7d:24:
4d:9f:80:d1:e2:05:d4:61:18:03:39:9d:ef:07:2a:c7:24:89:
1a:55:df:60:1b:e3:7a:3e:a5:d7:ad:5a:e2:d5:3d:ab:bd:8a:
d9:1f:14:2d:43:0c:24:3c:fa:42:7c:3a:8c:34:3c:cc:e0:05:
c4:06:a2:bb:79:b3:99:3f:9a:de:42:0c:f2:b6:01:bd:66:f3:
05:9f:bf:fe:3b:f6:84:56:12:75:d0:2a:c4:c8:6e:1d:24:40:
8b:0f:e0:db:09:d2:8e:8a:c7:b2:6c:f1:c7:08:a5:b4:c9:9c:
ab:a2:bf:8a:27:91:cb:71:8d:e2:e6:ce:97:2c:24:8e:c2:76:
64:9f:94:ed:90:69:2e:27:73:4c:27:05:c1:61:88:65:d5:ae:
d5:bb:c9:c8:5f:d4:70:5f:5b:b3:4e:e0:47:9f:15:78:5f:6c:
dd:ac:ec:96:d4:73:70:2f:31:b7:6d:7a:26:6a:a2:9c:4a:f1:
98:72:3b:be:78:71:04:c7:28:7e:78:3b:b0:64:b6:66:5c:8f:
b4:b6:4c:cf:63:e3:82:3a:96:88:11:c5:4a:e4:d6:94:51:6d:
9a:a8:13:50:bf:db:3c:ce:86:7f:4b:7c:51:41:b0:e1:d2:53:
b7:b0:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org