Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AKswCFDQBhgO_5BMw7J_CdNBSKQ.roa
File: AKswCFDQBhgO_5BMw7J_CdNBSKQ.roa (raw, json)
Hash identifier: nIsaXjFg2A0E3w+Qgl24HMtttMCkQ0kok9pVHnCmbvU=
Subject key identifier: 00:AB:30:08:50:D0:06:18:0E:FF:90:4C:C3:B2:7F:09:D3:41:48:A4
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188BE30BA05FC52316BCB528F125037E8BC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AKswCFDQBhgO_5BMw7J_CdNBSKQ.roa
Signing time: Thu 15 Jun 2023 08:34:04 +0000
ROA not before: Thu 15 Jun 2023 08:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:30:ba:05:fc:52:31:6b:cb:52:8f:12:50:37:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 15 08:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00ab300850d006180eff904cc3b27f09d34148a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:fb:b9:82:be:81:4a:44:8a:14:a7:fc:89:
ae:2e:08:bf:9f:ca:f4:6a:33:56:55:3a:2c:2a:ac:
f6:d1:ae:90:09:58:24:c7:37:b1:89:c6:ca:96:ea:
21:a1:74:8a:2e:fb:70:24:10:cb:0f:7e:55:38:a5:
48:f1:3f:bb:ae:c3:89:6b:ff:a4:a1:22:50:6a:1e:
27:36:e5:4f:5a:ed:91:5b:c7:a2:1f:fc:67:6e:3f:
73:a3:1c:b3:1f:b8:98:5f:6e:98:11:76:70:a5:c3:
eb:f0:db:54:dc:8f:e9:c6:14:28:a1:e4:2f:1b:b6:
32:88:1e:d1:72:0b:a0:ad:28:04:2e:6f:68:3e:0b:
93:ef:91:c4:4b:61:c6:ff:9a:2f:54:82:24:b8:77:
58:6a:e8:7c:1f:ea:d2:1a:4b:45:13:52:bd:72:ea:
39:cf:6c:53:4e:c7:1e:2c:af:1a:12:13:1e:45:9f:
3b:6d:6e:bb:34:d9:54:64:bf:22:f5:93:17:a1:29:
e0:cb:44:17:77:dd:69:bf:13:50:03:ca:a3:30:d6:
d3:47:bb:cc:be:57:73:b3:3d:e7:b1:bb:48:2d:39:
80:be:fd:46:de:92:a6:01:eb:a9:d6:89:b0:e8:bb:
c1:6c:59:a4:6c:20:26:8d:c8:15:c1:a9:8e:49:7d:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AB:30:08:50:D0:06:18:0E:FF:90:4C:C3:B2:7F:09:D3:41:48:A4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AKswCFDQBhgO_5BMw7J_CdNBSKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.15.0/24
5.105.26.0/24
5.105.32.0/24
5.105.37.0/24
5.105.122.0/23
5.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
61:df:de:9b:57:38:9d:dd:01:3e:1e:7a:32:16:87:9a:9e:5f:
3d:af:10:3a:26:5d:3a:0b:b8:c4:28:61:ca:5c:64:21:23:63:
b6:8f:dd:40:b4:ad:eb:6a:03:18:9f:42:4c:fa:80:a9:eb:57:
5e:89:01:6e:d1:59:52:f8:8a:28:3c:10:1a:96:22:25:ec:5c:
4e:33:f8:d9:63:e5:dc:79:32:44:64:08:6d:73:82:ad:03:8c:
e9:8f:65:8b:3f:25:53:6f:1b:fe:5f:73:69:2c:13:fc:ed:d1:
85:cd:fc:78:01:9f:a2:87:29:a5:20:86:82:03:b2:df:17:bd:
69:f6:5c:91:d7:6d:6d:7c:af:20:95:e1:90:ed:ed:83:71:7a:
1f:59:f1:d9:e7:73:51:fa:58:6e:d2:e2:47:b6:c6:10:bc:01:
a2:8e:4e:62:cd:db:40:94:1d:21:73:7a:0f:e8:75:38:4a:27:
5f:8f:c9:0a:50:f2:71:78:c3:84:48:cc:96:0f:db:96:03:bf:
bc:98:d0:e2:9c:89:15:2f:80:13:9c:a3:3d:9f:54:93:98:bb:
d5:23:fc:82:6b:d7:88:1e:24:16:5b:12:48:8d:3c:c9:54:d6:
5d:09:c0:b2:92:0c:30:65:45:6e:68:9b:f2:f9:d8:d2:f3:ea:
1a:85:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org