Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6vRvN26axvUfFhQPt0FsBE-_W2g.roa
File: 6vRvN26axvUfFhQPt0FsBE-_W2g.roa (raw, json)
Hash identifier: 0oYVljndlWqXy8KFw7Jey5ioBDnknEa5WhjFAXlOpgM=
Subject key identifier: EA:F4:6F:37:6E:9A:C6:F5:1F:16:14:0F:B7:41:6C:04:4F:BF:5B:68
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186F3992E54716C61ACF891B8EF55D2684F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6vRvN26axvUfFhQPt0FsBE-_W2g.roa
Signing time: Sat 18 Mar 2023 07:22:27 +0000
ROA not before: Sat 18 Mar 2023 07:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 5.105.125.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:99:2e:54:71:6c:61:ac:f8:91:b8:ef:55:d2:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 18 07:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf46f376e9ac6f51f16140fb7416c044fbf5b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:ee:ff:f4:52:ed:11:77:49:9d:e1:c0:bf:
71:52:a5:35:48:2f:f7:7a:e4:96:33:81:6f:eb:84:
a2:53:70:87:93:c4:07:57:1a:cb:ab:8d:e0:d8:81:
70:63:04:82:40:c2:61:9c:c5:81:fa:d2:7f:37:8b:
a6:9a:02:bc:f2:97:ea:a8:bc:4e:18:e2:09:04:c7:
2e:3d:54:08:1f:f8:d2:06:4a:ee:e1:1e:38:5f:bb:
e7:c3:14:0e:82:91:3a:d8:4b:01:dc:e0:78:03:cd:
e2:e8:5e:1d:eb:de:9b:8f:a1:ca:22:bf:98:0c:fb:
e6:a7:c7:74:d6:93:24:be:1f:d0:5e:99:7c:9a:9e:
a0:89:1d:f6:8d:c4:6c:38:32:01:f2:dd:50:e5:ac:
be:be:22:e8:29:f3:c2:98:47:47:7e:4d:ea:66:9f:
bd:92:d0:d8:3c:73:c5:c4:eb:da:97:09:39:da:62:
7b:dc:ae:6c:cc:26:e5:0d:ac:f2:b2:b2:61:ca:ba:
63:3d:be:2f:7d:d3:cc:88:c7:3b:97:32:19:ac:45:
9d:c8:48:fc:db:5a:ed:e1:98:2b:f3:65:78:93:fa:
b7:21:c8:79:79:21:79:16:31:63:d8:8a:a3:de:b0:
09:8b:c5:cf:b0:f4:38:bd:66:8f:e9:ba:f6:a6:ac:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:6F:37:6E:9A:C6:F5:1F:16:14:0F:B7:41:6C:04:4F:BF:5B:68
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6vRvN26axvUfFhQPt0FsBE-_W2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.28.0/24
5.105.64.0/24
5.105.77.0/24
5.105.125.0/24
5.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e8:6c:a6:0b:3a:45:cc:28:5d:3e:bc:f6:ab:ad:16:23:b5:
b1:ec:ba:9f:9a:e9:bf:b3:f8:1d:72:9c:23:f8:f9:e0:14:3b:
1b:d0:11:18:08:66:ca:29:2b:02:cb:07:91:0f:26:56:21:ff:
07:bc:53:bd:2e:de:67:40:43:cf:a0:3e:ba:8f:33:48:8e:92:
51:16:a3:f7:96:30:d5:6d:96:16:a0:0a:d2:57:c4:c8:0b:40:
be:fc:84:f8:ec:2c:53:1e:78:48:51:4f:9f:a9:b0:8d:2b:b4:
77:4b:33:43:c2:ef:2b:30:74:da:ae:12:8e:bb:72:e3:d1:2a:
e2:50:18:16:59:8a:f3:93:bd:bd:df:9b:9e:a1:cb:87:8c:b9:
49:0e:be:86:59:be:ad:38:3b:3d:6a:fd:01:ad:9e:b6:03:87:
17:a1:59:a2:bc:3f:40:96:8d:92:46:04:07:bb:ec:52:cb:3d:
b7:66:a9:bb:d6:ca:f8:6b:f9:5f:65:88:15:d7:41:d7:3b:73:
aa:2f:45:4b:12:02:c3:45:c4:50:a0:94:88:b8:89:ef:6f:04:
99:2f:30:9b:e4:46:9e:61:2a:f8:2d:25:a5:7f:0c:f6:a4:a5:
2e:24:3c:b4:b7:a4:6a:52:bd:28:17:25:da:ba:16:3d:38:dd:
a3:f7:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org