Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9WIRC82i6I-2MWaKTvPaNXw0VHY.roa
File: 9WIRC82i6I-2MWaKTvPaNXw0VHY.roa (raw, json)
Hash identifier: 8K9/3QXcB8emR9/tQG4Gi5biORW0Am6CQwrP3YXS5rA=
Subject key identifier: F5:62:11:0B:CD:A2:E8:8F:B6:31:66:8A:4E:F3:DA:35:7C:34:54:76
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A65CF70387704B3107EE615BA3FE39DFA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9WIRC82i6I-2MWaKTvPaNXw0VHY.roa
Signing time: Tue 05 Sep 2023 14:46:47 +0000
ROA not before: Tue 05 Sep 2023 14:46:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
217.67.64.0/22 maxlen: 22
5.105.39.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:cf:70:38:77:04:b3:10:7e:e6:15:ba:3f:e3:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 5 14:46:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f562110bcda2e88fb631668a4ef3da357c345476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:ed:32:d5:81:63:ea:bb:a6:37:d2:99:51:
e2:79:4f:4f:fe:97:2e:60:1c:cf:cd:03:22:57:42:
1f:aa:99:7e:6d:42:b1:49:be:c5:0a:4a:82:4c:2f:
bd:35:aa:d8:bc:68:11:db:09:11:64:4f:15:90:cd:
ce:d4:9f:dd:cc:3a:60:17:01:8f:61:6e:da:af:b1:
0f:32:40:cd:45:f7:d0:87:fa:e9:38:ab:80:ee:02:
15:4c:82:f7:ad:dd:f7:e1:53:4f:39:94:ff:9e:bd:
05:b9:bb:37:f5:c2:54:26:28:ba:01:6d:10:58:fa:
9f:a0:9c:d3:d5:ab:4e:a4:bd:98:0e:25:97:92:1b:
18:94:f0:c1:aa:ad:4e:ba:5e:64:40:21:95:38:14:
ed:de:35:83:0d:99:36:6b:38:9d:6b:a2:a4:ea:9b:
69:b3:31:48:cf:20:81:6c:9a:90:ee:fd:0a:bf:53:
06:77:18:63:55:c0:bb:3b:5f:39:fa:28:83:9c:20:
3a:0e:ab:cf:a1:ff:db:6f:dd:07:cb:57:27:77:e0:
cb:74:2f:11:fd:8d:b2:b8:c4:62:d2:ca:ab:98:73:
f3:b3:b4:6b:a4:db:11:1b:27:6f:a2:9a:b7:97:93:
75:96:c1:8e:f0:e4:6d:3d:95:5f:24:be:aa:92:62:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:11:0B:CD:A2:E8:8F:B6:31:66:8A:4E:F3:DA:35:7C:34:54:76
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9WIRC82i6I-2MWaKTvPaNXw0VHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.38.0/23
5.105.79.0/24
5.105.90.0-5.105.93.255
5.105.108.0/24
5.105.130.0/24
5.105.222.0-5.105.225.255
217.67.64.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b7:9a:52:7a:bb:4b:b7:b1:26:6f:28:bb:15:56:47:79:ce:
8a:7d:35:13:11:26:14:a3:c4:bf:c7:39:bf:88:6d:7e:48:98:
50:0f:89:26:43:7d:ac:d1:ee:21:95:57:99:a3:59:11:88:34:
21:f0:5c:9e:8a:c5:6a:9f:e5:df:f7:67:a1:3d:3d:6d:b2:26:
aa:76:cc:54:85:9c:c7:63:9c:94:76:f1:cd:36:82:75:70:31:
68:1d:a7:34:14:d8:28:08:24:05:e0:df:d8:d4:9a:b9:59:34:
3b:78:c4:1d:48:78:cb:bf:5a:5b:8e:55:10:4c:a9:d6:e5:4e:
b8:fb:67:62:e2:86:3e:3e:f7:bd:80:8e:d0:74:f3:8c:c4:af:
93:ee:75:71:7a:52:f9:64:29:98:ed:43:da:7d:87:73:d3:06:
da:9b:23:83:33:19:89:6b:71:62:96:79:6b:1a:39:d7:fa:c1:
be:27:e5:c3:97:c8:f1:8b:01:49:a4:b1:f1:8a:d2:a6:e1:dc:
94:bb:59:b2:06:92:66:06:47:1c:38:db:3b:23:ff:0e:bc:05:
71:be:02:ee:bd:a1:41:f4:a4:6e:98:ea:56:00:97:f3:08:f0:
e3:44:50:1a:b2:f6:94:c8:71:4a:2f:75:1a:68:60:53:70:5f:
a0:18:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 20:08:15 2023 by rpki-client on console-ams.rpki-client.org