Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7TaMHvHx7G9cmnJK3zT0oIGglPs.roa
File: 7TaMHvHx7G9cmnJK3zT0oIGglPs.roa (raw, json)
Hash identifier: eldMft1xRvz0YhBiIvTJjWSwwSbFhD6994LmnPuUTIU=
Subject key identifier: ED:36:8C:1E:F1:F1:EC:6F:5C:9A:72:4A:DF:34:F4:A0:81:A0:94:FB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5A584E1194EA2BFF56DBD83D91AEE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7TaMHvHx7G9cmnJK3zT0oIGglPs.roa
Signing time: Sun 01 Jan 2023 05:54:50 +0000
ROA not before: Sun 01 Jan 2023 05:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7046
IP address blocks: 5.105.151.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:a5:84:e1:19:4e:a2:bf:f5:6d:bd:83:d9:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed368c1ef1f1ec6f5c9a724adf34f4a081a094fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:85:e3:ba:41:1f:68:06:8f:6d:73:61:53:
bf:79:5e:19:f1:6f:6b:02:b6:26:97:3c:36:60:f0:
1a:76:3f:bb:99:df:05:f5:3b:48:74:b6:9b:e1:b7:
48:e1:da:52:b9:56:3f:f4:40:1b:e8:75:c0:5e:9a:
b5:2f:6d:83:98:64:da:0d:24:5a:b4:4b:a2:21:93:
80:6c:9b:74:80:24:42:85:98:2c:7a:17:e6:fe:29:
a3:0f:ae:55:6f:47:3d:56:62:a9:d7:67:a5:85:78:
3b:37:ca:d2:36:aa:72:78:8a:d6:7f:ac:0f:78:c3:
d7:1b:c2:07:83:dd:d1:4f:7c:28:f0:6a:fd:10:48:
56:c8:88:e7:c4:c8:b9:ed:73:1f:b4:3d:74:6c:32:
e0:51:08:36:40:de:f5:d7:83:29:88:78:e0:08:69:
6d:d9:2e:36:4a:ed:28:a1:b6:be:53:ca:9f:97:e0:
c4:0d:b1:4a:7d:c9:97:ae:12:67:b8:ef:bf:ce:d0:
92:09:d9:68:7e:c2:88:67:f4:65:a2:c8:db:66:64:
f5:61:35:e8:3d:bb:6e:bf:01:62:97:8e:e0:b4:89:
75:0e:3d:b1:75:a9:5b:8a:91:53:41:f1:83:31:22:
96:ba:25:19:2c:82:7c:04:2f:e1:e6:01:10:a4:01:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:8C:1E:F1:F1:EC:6F:5C:9A:72:4A:DF:34:F4:A0:81:A0:94:FB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7TaMHvHx7G9cmnJK3zT0oIGglPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.86.0-5.105.89.255
5.105.148.0/22
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.232.0-5.105.236.255
Signature Algorithm: sha256WithRSAEncryption
86:a9:59:ae:ef:cf:b3:17:fc:2c:be:e9:4a:16:05:b6:df:1f:
28:8b:53:1a:31:20:95:c0:81:3c:3e:08:3c:40:e3:eb:cb:d0:
0a:9d:24:c0:c6:ed:6a:4c:4f:8c:b0:39:4d:64:fe:a8:87:dd:
c9:1e:88:bb:d1:5f:b4:1a:f7:45:4d:4f:09:73:b4:55:ed:46:
2c:da:79:95:79:c2:dc:69:37:de:65:67:4c:d7:8b:3e:20:01:
77:14:21:37:9f:fb:d4:8e:79:98:dd:0e:26:7e:5f:32:79:51:
46:2d:51:57:5b:1a:eb:68:f8:f8:d0:09:c6:b4:df:d7:85:14:
04:d9:bf:3e:4a:4a:9c:92:20:f5:08:f1:35:ef:b8:19:7b:ac:
f6:0e:b3:fc:92:63:da:be:f0:75:89:d4:c3:17:44:f6:bf:e6:
4c:ab:e5:53:ec:f7:b2:6d:56:9e:e8:58:d7:3e:f4:59:97:ee:
c4:2b:88:5d:4c:01:f4:8a:1f:f2:64:d2:5a:97:a5:65:aa:db:
da:66:9d:97:b2:51:38:3a:a3:60:bd:2f:18:fb:c6:f5:77:05:
77:99:0d:dc:2b:aa:14:f5:b0:e9:f5:05:30:5c:1f:29:f6:92:
e9:ea:65:3a:26:f6:a4:60:19:8a:5c:b0:a4:03:fb:de:79:e7:
8c:0c:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org