Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A6YcgE9683nJUpIgOHq1U4GZcI4.roa
File: A6YcgE9683nJUpIgOHq1U4GZcI4.roa (raw, json)
Hash identifier: NKerNKcRVkdpEQw9Yij0GhCpX4fgaBuovanviGOSw/4=
Subject key identifier: 03:A6:1C:80:4F:7A:F3:79:C9:52:92:20:38:7A:B5:53:81:99:70:8E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A577D010D70E245EE127AFD4DCDC9EBDB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A6YcgE9683nJUpIgOHq1U4GZcI4.roa
Signing time: Sat 02 Sep 2023 20:02:04 +0000
ROA not before: Sat 02 Sep 2023 20:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 5.105.128.0/24 maxlen: 24
5.105.248.0/23 maxlen: 24
217.67.78.0/23 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Sep 2023 09:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:7d:01:0d:70:e2:45:ee:12:7a:fd:4d:cd:c9:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 2 20:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03a61c804f7af379c9529220387ab5538199708e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:5f:a7:76:53:d9:92:3b:64:9b:ce:ff:03:
18:e6:f4:02:5e:a7:75:a7:60:24:c8:2d:9a:cf:dc:
d9:f9:c0:3b:2b:92:ae:e6:34:8c:f4:38:90:b0:e0:
0c:8f:05:43:05:9f:d3:73:b4:5d:8d:dd:4e:45:ff:
72:65:1c:87:19:e0:14:4c:58:71:aa:90:51:cc:db:
12:62:50:12:3d:07:15:a1:54:92:dd:f1:3f:2f:4f:
bf:d2:34:73:fb:35:35:b2:28:e8:42:ad:e3:18:bb:
c1:5d:aa:f7:59:38:17:f4:6d:43:99:a5:90:35:28:
22:cb:57:38:55:11:fa:2f:eb:db:57:12:87:d7:2e:
5c:ef:5a:f8:04:de:0c:0e:1a:44:80:64:cc:e9:9f:
d5:0e:86:4e:5a:70:07:1d:bf:2a:99:ed:7d:b9:99:
a7:e3:f4:76:41:a8:12:f0:03:0d:f9:80:ff:f3:2f:
fd:41:7d:e0:9d:13:e5:46:c1:fe:1e:52:15:41:4c:
c2:9f:b7:47:c1:48:e4:6c:16:bc:bc:7c:98:27:c1:
ca:4a:c3:f6:92:4f:de:6b:5d:73:ae:93:5d:82:f5:
29:f3:cb:25:b3:57:cb:76:9d:0d:fc:d6:f1:fa:45:
fc:39:bf:d6:f1:47:52:8f:14:43:3e:bd:c7:5f:ba:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:1C:80:4F:7A:F3:79:C9:52:92:20:38:7A:B5:53:81:99:70:8E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A6YcgE9683nJUpIgOHq1U4GZcI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.110.0/24
5.105.114.0/24
5.105.128.0/24
5.105.178.0/24
5.105.180.0-5.105.182.255
5.105.206.0/24
5.105.248.0/23
217.67.78.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:b2:d7:98:c3:6c:3b:70:69:5a:2e:e5:3e:c8:fa:cd:94:ee:
dd:e1:71:35:8c:d5:2d:28:6d:9d:d6:cc:49:25:65:94:bc:f6:
a5:6c:e8:d3:c1:ba:43:b0:79:ef:39:f1:a0:03:be:ca:e6:9b:
af:e6:2d:e0:ba:77:cc:0b:14:81:ba:59:0b:c6:be:8f:4d:68:
1e:17:37:7c:6a:c1:dc:e8:7f:ef:1e:6f:f3:5c:1c:24:63:85:
b7:f3:01:96:d0:65:fb:08:c9:c4:3a:e8:5c:b9:94:cd:9c:7b:
b4:98:4b:2f:f5:d2:a4:74:1f:22:c2:3a:4c:e3:c4:96:c5:5f:
3a:5d:c0:a3:2b:ff:bc:8b:86:26:ae:ed:c4:72:7b:99:96:fd:
a1:32:c7:45:89:7f:ce:5d:ba:36:79:57:d3:38:5d:a6:4e:0b:
3d:eb:d5:e6:7f:0c:c2:b7:61:30:85:4a:b7:f0:e3:8a:a6:60:
de:05:81:bb:ad:94:4d:47:cd:93:97:88:79:14:a5:5a:3f:e5:
01:1e:fe:43:82:91:47:6e:3a:b4:d5:e2:e4:aa:a9:af:8d:a9:
78:57:40:20:a8:39:59:3a:f7:89:24:c2:11:45:e8:c4:71:31:
d1:13:5b:59:71:c1:0a:9f:79:b6:a6:95:65:e2:dd:5c:a2:21:
29:21:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:55 2024 by rpki-client on console-ams.rpki-client.org