Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8c-cNjeNlvNJwcDbmG7YN03RtFQ.roa
File: 8c-cNjeNlvNJwcDbmG7YN03RtFQ.roa (raw, json)
Hash identifier: zWX41EzzLq0D0AJErLogkZxSLxMzZXgPx0e/7I6ao2A=
Subject key identifier: F1:CF:9C:36:37:8D:96:F3:49:C1:C0:DB:98:6E:D8:37:4D:D1:B4:54
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863672A45CC909974BD024FD4B70D30784
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8c-cNjeNlvNJwcDbmG7YN03RtFQ.roa
Signing time: Thu 09 Feb 2023 13:52:08 +0000
ROA not before: Thu 09 Feb 2023 13:52:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:72:a4:5c:c9:09:97:4b:d0:24:fd:4b:70:d3:07:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 9 13:52:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1cf9c36378d96f349c1c0db986ed8374dd1b454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:54:d2:0d:34:25:b4:ab:e5:37:05:fa:7a:
6b:fe:d0:02:3d:a4:ad:55:4d:3b:85:81:16:53:d4:
07:d2:97:0b:1b:25:e4:1d:48:07:c5:36:0e:95:fc:
a6:33:36:b7:cc:81:c9:23:7d:43:30:10:6c:5d:f6:
4d:95:5a:0f:dc:45:a5:a2:f2:23:19:9c:fa:bc:6e:
6f:5f:ab:ef:94:05:aa:09:33:51:68:66:20:37:d9:
22:2d:85:5c:6b:78:6e:0c:3c:e5:3f:cf:8e:83:09:
d0:98:ea:6c:4d:38:ee:32:6d:7c:18:fb:4a:99:0c:
e8:49:27:76:37:96:15:5f:88:06:bd:ea:77:66:d4:
4e:3f:dd:9c:4d:24:fe:d7:6e:b5:4a:ef:65:24:e2:
96:ba:3f:6f:65:78:66:10:92:e5:fe:8c:5a:d6:0d:
8c:77:d3:13:13:a8:f2:ab:63:ab:3f:11:cd:c2:cc:
55:65:e5:2d:6c:0d:1f:1d:f0:07:b0:fb:39:3f:2f:
e7:a0:c9:fa:ab:29:18:fa:8c:e4:25:7d:f4:8c:21:
6a:d1:ed:70:52:8d:5a:28:8d:c1:fc:63:33:db:17:
a2:e5:75:27:83:eb:55:19:da:e6:88:64:51:d1:2d:
d9:c7:8e:c7:b3:c8:07:a8:d1:cf:c2:f9:c2:75:c5:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CF:9C:36:37:8D:96:F3:49:C1:C0:DB:98:6E:D8:37:4D:D1:B4:54
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8c-cNjeNlvNJwcDbmG7YN03RtFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.80.0/24
5.105.131.0/24
5.105.134.0/24
5.105.157.0/24
5.105.214.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f3:3c:a7:f4:02:5e:f3:48:92:c9:f0:82:e0:24:5c:77:96:
7c:14:ef:1d:69:16:cf:9b:b8:dd:89:fd:f8:7f:5f:d8:80:d0:
7e:1a:2a:26:96:39:b1:a1:c4:a0:42:13:5a:ff:8a:70:3f:f0:
4b:cb:a6:08:69:17:69:9a:1f:46:cf:c0:05:03:67:ab:16:d6:
48:f0:b7:ab:3b:24:16:9b:0d:20:f4:c1:f1:43:30:ba:5c:7f:
a6:1e:d0:a9:f5:9c:a4:c9:d8:c6:b9:be:f2:ac:41:17:76:22:
5c:9e:97:7f:a5:70:9d:d0:e0:14:0e:72:c6:40:8d:31:11:8d:
20:b2:50:08:41:5e:6f:dd:73:55:bb:5a:40:f2:61:de:1e:df:
71:d2:1f:55:cf:c7:8c:f4:bc:4d:01:78:a3:c1:47:7e:30:bd:
38:3f:1d:1e:33:b3:65:1f:4b:a2:be:ab:fc:af:64:88:02:f5:
52:3a:9a:1f:31:da:4b:0a:72:d7:94:4f:6f:a8:17:fb:d3:ec:
e2:5f:d5:81:eb:d7:cf:e2:64:e5:d4:66:18:53:9b:d5:71:55:
cb:3c:5c:9d:c6:ce:c3:0d:1f:76:d8:19:e3:7e:19:86:3d:17:
07:19:8c:19:70:83:6d:92:f8:2e:44:6e:a4:ab:db:ea:4a:7c:
9c:48:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org