Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7c07TyKBQe9Id8iXag_t8AyKZmk.roa
File: 7c07TyKBQe9Id8iXag_t8AyKZmk.roa (raw, json)
Hash identifier: /io9YH8NCJdXReUIZqQz5XZ56/5z8etwOfi77ZaV+nA=
Subject key identifier: ED:CD:3B:4F:22:81:41:EF:48:77:C8:97:6A:0F:ED:F0:0C:8A:66:69
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B03C543D822477A59B03EF0FD001130E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7c07TyKBQe9Id8iXag_t8AyKZmk.roa
Signing time: Mon 12 Jun 2023 15:32:03 +0000
ROA not before: Mon 12 Jun 2023 15:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.230.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:3c:54:3d:82:24:77:a5:9b:03:ef:0f:d0:01:13:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 12 15:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edcd3b4f228141ef4877c8976a0fedf00c8a6669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:51:79:09:5f:90:03:cf:ce:ed:a9:b4:6d:
f4:ec:73:c0:8c:dc:70:ae:0f:90:5f:b9:0a:2a:ce:
55:f2:87:52:9e:73:aa:45:57:e3:60:09:0a:4e:90:
bd:17:86:c1:a0:d1:0a:b8:2d:b1:3b:ec:c8:6f:19:
2b:be:98:ba:a5:bb:01:92:01:39:8f:9b:ef:d8:21:
14:ab:ea:4f:73:e4:42:4b:94:60:66:35:35:d7:5b:
85:fa:22:5c:8a:7a:4a:71:77:4e:15:b2:d8:47:9a:
bf:11:09:85:4e:29:cd:1c:66:50:db:dd:a3:64:00:
c1:24:2e:47:ce:ce:18:e6:1e:78:7d:9c:0f:5e:5d:
3e:04:a4:ad:62:73:4a:4b:bc:6a:17:6e:6e:12:93:
d2:95:3e:92:08:f4:ec:23:ea:a7:74:f0:da:8b:95:
a5:e0:45:ea:4c:d0:fb:59:2d:bc:e0:18:0c:97:31:
e4:cf:56:1f:82:bc:a3:49:1a:2d:c9:c1:08:4e:e2:
6b:e6:a0:17:f4:d8:1a:1d:0c:ca:30:01:d1:f0:07:
c8:44:73:6e:19:df:72:58:99:73:39:36:fd:78:67:
e4:b6:28:57:81:fe:83:9d:a8:4b:21:9e:77:6a:3a:
af:40:1f:19:3b:42:12:b6:99:c3:00:82:79:ce:d4:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:3B:4F:22:81:41:EF:48:77:C8:97:6A:0F:ED:F0:0C:8A:66:69
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7c07TyKBQe9Id8iXag_t8AyKZmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
5.105.184.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b2:7a:b5:a9:b7:91:46:d9:24:66:19:22:bd:f7:b9:ea:4c:
c6:99:23:74:23:06:aa:33:f4:1b:d0:3f:e5:cf:2d:e7:9e:d8:
a0:90:d3:32:5b:66:c8:bf:6d:8c:30:ee:f3:34:fd:b3:c7:43:
2d:27:9e:46:48:28:2c:cd:59:f3:e4:bc:dc:f4:90:54:a2:99:
66:5f:a7:53:d2:4f:83:54:ad:a1:ca:cf:2e:4f:e6:bb:fa:7d:
8e:26:b2:6d:da:a5:28:4a:81:97:2e:ee:3c:ed:23:a0:4f:56:
46:ff:8f:72:33:4d:65:71:f0:31:8d:54:6b:a9:14:ef:07:6f:
7b:85:14:b5:57:ba:13:ce:66:55:9b:a6:5e:58:d3:3c:cd:6f:
16:8f:8f:a4:6d:fa:b4:31:72:c6:88:3b:1b:71:21:8f:cd:a3:
a8:07:a3:1e:71:7d:1a:63:87:e6:e3:1c:79:79:b9:e6:c4:b7:
1a:87:79:1b:b8:24:02:ce:d7:12:ff:18:61:15:bb:a2:62:32:
37:25:09:8e:1f:03:67:90:77:83:d6:fc:ee:f9:bb:a0:6e:07:
7b:0d:98:54:1e:ae:a8:5c:dd:84:7d:e5:95:47:9b:3a:9e:1a:
09:eb:5f:97:69:0e:0c:70:1a:d8:be:b3:db:af:81:c3:8e:29:
12:78:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org