Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A5g50GELKQWZwvaho2ZYxPKC3RM.roa
File: A5g50GELKQWZwvaho2ZYxPKC3RM.roa (raw, json)
Hash identifier: sZiyAI4a663/AxdiXh+6r/9rJz2XW/V2kmm17Q8URYQ=
Subject key identifier: 03:98:39:D0:61:0B:29:05:99:C2:F6:A1:A3:66:58:C4:F2:82:DD:13
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01892A7EDC5E55546F052F125B40A7311579
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A5g50GELKQWZwvaho2ZYxPKC3RM.roa
Signing time: Thu 06 Jul 2023 09:18:24 +0000
ROA not before: Thu 06 Jul 2023 09:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 5.105.23.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:7e:dc:5e:55:54:6f:05:2f:12:5b:40:a7:31:15:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 6 09:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=039839d0610b290599c2f6a1a36658c4f282dd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:96:5c:8a:06:f9:97:c0:79:ee:1c:aa:f9:8c:
31:ca:b0:a7:7d:18:5e:91:97:66:de:be:3d:19:3f:
f1:7c:ae:f1:2c:1b:c5:da:97:b3:30:ad:98:9d:b0:
22:c2:1e:5e:91:2d:dc:6a:5a:4a:ba:5c:25:f0:90:
71:17:7d:63:c2:70:1f:4c:c7:0e:0e:0c:3e:4b:38:
a5:13:92:e9:a5:58:95:b1:cc:52:0d:7c:bb:f0:39:
1f:5b:d5:5c:0a:86:7f:d5:c5:1a:fe:3b:f8:cd:e0:
9c:e4:9a:15:13:61:61:ad:01:ab:e6:21:52:f7:9b:
84:ef:61:3c:8b:d8:38:e3:39:73:b4:73:6f:16:b5:
db:e4:c4:78:7f:15:aa:a3:75:76:9d:8f:20:21:d8:
6c:e3:ad:21:05:64:0e:4c:9d:38:d0:e3:a6:53:9c:
4c:28:3f:55:4d:7b:66:d0:bc:d8:d1:cb:64:ce:42:
1a:3a:41:39:f9:af:ab:73:49:17:af:1d:6e:cd:ef:
93:88:37:2f:17:17:db:f4:e0:4e:51:eb:9c:11:f5:
a4:29:c5:fd:75:e9:86:24:70:0d:93:66:d6:fd:75:
95:61:a1:da:3e:f3:86:f7:44:b7:53:c0:83:60:71:
3d:7d:d3:6d:5a:57:45:8d:16:fb:2f:04:cc:b7:ed:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:39:D0:61:0B:29:05:99:C2:F6:A1:A3:66:58:C4:F2:82:DD:13
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A5g50GELKQWZwvaho2ZYxPKC3RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.23.0/24
5.105.44.0/24
5.105.63.0/24
5.105.112.0/24
5.105.114.0/23
5.105.248.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cd:da:81:ac:3b:c1:1d:eb:75:db:4a:be:7d:87:4d:8b:f1:
fa:f9:dd:02:98:e9:8b:61:4b:9c:53:0a:1f:9d:9f:57:6a:e2:
c6:d9:b5:7b:3c:95:81:71:d3:db:84:56:d9:57:69:15:3f:10:
06:e4:05:59:ab:72:17:a2:e3:71:ad:83:59:50:be:24:a4:a2:
ea:2d:18:5b:7a:d8:d8:94:66:f1:59:1a:c9:29:47:d3:96:f0:
6a:15:92:a4:e3:90:d1:6a:e2:1d:b8:a2:be:ec:ea:5b:77:1e:
0c:aa:4d:74:c9:8d:08:2d:82:ce:aa:b6:5c:8a:ac:3a:b5:2a:
83:dc:50:5d:42:0b:67:79:09:54:d6:7b:b7:2f:bd:0d:eb:f1:
00:33:b1:d4:82:00:5e:dc:d3:73:00:b3:40:e8:e1:34:91:7b:
e1:25:c1:38:62:e3:8a:27:2a:24:2e:be:6c:b1:3f:d4:b4:79:
2c:4c:45:a5:9b:32:84:93:58:6d:9a:1c:5b:6d:06:0c:be:99:
0f:a0:31:e4:07:2c:75:61:c6:da:f5:22:dc:85:a6:f9:68:71:
2a:e9:7d:d7:09:8d:c2:e8:fd:dd:2c:4f:80:be:52:5d:4e:79:
11:47:c5:4b:a3:50:e2:d2:29:65:2e:3e:46:2d:ba:e4:22:e1:
8e:e2:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 14:32:47 2023 by rpki-client on console-fra.rpki-client.org