Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AO8RJ9k8qGQvyjRvgPcHWO-mRrw.roa
File: AO8RJ9k8qGQvyjRvgPcHWO-mRrw.roa (raw, json)
Hash identifier: gq3Dq2FjxJtkRpTLGZucPxYazNcbvwuE8haQErfKQUs=
Subject key identifier: 00:EF:11:27:D9:3C:A8:64:2F:CA:34:6F:80:F7:07:58:EF:A6:46:BC
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B3841EA14E532122349F6A653A993A5D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AO8RJ9k8qGQvyjRvgPcHWO-mRrw.roa
Signing time: Tue 13 Jun 2023 06:49:20 +0000
ROA not before: Tue 13 Jun 2023 06:49:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 5.105.238.0/24 maxlen: 24
5.105.129.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:84:1e:a1:4e:53:21:22:34:9f:6a:65:3a:99:3a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 13 06:49:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00ef1127d93ca8642fca346f80f70758efa646bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:78:fb:bd:9b:af:bd:62:f5:b0:5c:d7:a2:
27:a7:58:5f:04:14:4e:8d:ab:6e:b5:09:44:38:1d:
4c:02:4d:70:eb:74:57:6b:da:64:83:f9:8c:29:8d:
01:8b:a1:6d:e0:0f:9f:b7:51:a7:3f:e4:18:d9:b0:
5c:a5:d5:7a:41:78:d1:d8:be:6e:6b:0d:05:ef:a1:
4e:df:78:28:0e:34:49:f1:b3:ac:db:c9:9c:80:4f:
a3:75:5a:70:4b:9d:c5:64:4f:32:6f:73:9c:a6:46:
a7:2c:35:a6:30:61:fa:d6:b8:7c:4e:b7:b4:13:0d:
94:8f:c9:1c:f8:0f:2e:ad:d7:f3:69:ce:2f:35:2a:
fd:ec:76:6d:cf:9d:79:06:7d:9a:03:91:bf:45:c7:
68:13:41:b5:36:ad:a8:60:a2:9a:67:7e:a5:77:63:
cd:38:37:37:87:75:4d:67:16:ad:c3:b8:59:6b:9f:
1a:bd:7f:80:62:b6:1d:3f:06:9f:69:c6:21:8a:f9:
25:d9:a9:69:65:d8:ff:d1:16:ff:21:6f:f5:96:87:
b1:e1:9c:97:51:06:86:ea:84:10:c8:2c:4b:31:bf:
3a:bf:f9:2e:33:ea:dd:b3:39:a3:fc:f7:ad:83:73:
d0:69:0b:ab:e3:4a:d6:7b:2b:0d:6d:51:d1:d3:4e:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EF:11:27:D9:3C:A8:64:2F:CA:34:6F:80:F7:07:58:EF:A6:46:BC
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AO8RJ9k8qGQvyjRvgPcHWO-mRrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.27.0/24
5.105.95.0/24
5.105.129.0/24
5.105.135.0/24
5.105.196.0/24
5.105.238.0/24
5.105.241.0/24
5.105.252.0/24
Signature Algorithm: sha256WithRSAEncryption
73:60:f7:32:1b:13:2d:9a:5e:aa:cd:f6:0c:34:e3:df:d0:e5:
40:88:3d:b6:54:6b:08:d0:6f:05:e1:bc:58:a1:90:6f:82:14:
7a:26:84:6b:4b:2a:33:71:7f:69:20:85:2d:3d:03:c6:7e:6d:
46:0a:b1:30:e4:b6:ef:e8:c7:0d:63:64:e0:1c:c6:7f:ec:c3:
59:c9:18:7a:e9:49:54:7d:cb:2e:99:9a:7c:82:d0:dc:7f:fc:
63:1d:a7:3d:79:2d:72:51:d5:79:cf:e5:58:4d:af:c3:7e:03:
f8:ee:9d:6a:bb:b5:b3:f6:ed:9f:4b:45:fb:59:9e:4c:45:87:
4d:16:09:95:25:df:e3:ba:de:37:4d:2b:b3:9b:7b:ad:dc:dc:
38:3b:95:1a:75:5e:e3:ca:76:e8:7d:db:31:2f:c5:2e:f9:70:
f9:d3:d6:ae:86:cf:ea:b2:79:ae:d7:73:79:57:6f:0e:6e:fe:
11:79:58:94:7a:51:67:62:6c:00:5d:86:03:00:b2:ea:0d:b5:
b1:20:88:0f:7f:b8:f0:66:43:d9:e0:7f:a3:e2:0a:b7:a6:d3:
cf:5e:ee:4a:e6:c9:26:9c:72:53:d5:08:02:86:36:b7:85:0e:
05:f3:05:f9:d3:cc:d6:88:cd:1e:66:8c:89:62:95:29:b7:87:
39:2e:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 20:10:05 2023 by rpki-client on console-ams.rpki-client.org