Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AaUbG1ObHy-4eGOsLBQsLjZ4Cq4.roa
File: AaUbG1ObHy-4eGOsLBQsLjZ4Cq4.roa (raw, json)
Hash identifier: 6M/yw7dgGQXHq+on8ZqTPVQ0gJgDeHZkIm2zJy++oRc=
Subject key identifier: 01:A5:1B:1B:53:9B:1F:2F:B8:78:63:AC:2C:14:2C:2E:36:78:0A:AE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189965B37294043500A5EEAB9DE22036648
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AaUbG1ObHy-4eGOsLBQsLjZ4Cq4.roa
Signing time: Thu 27 Jul 2023 07:58:27 +0000
ROA not before: Thu 27 Jul 2023 07:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:5b:37:29:40:43:50:0a:5e:ea:b9:de:22:03:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 27 07:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01a51b1b539b1f2fb87863ac2c142c2e36780aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:44:68:9b:d9:71:cd:22:7d:d1:3c:f8:56:
02:87:94:d8:33:e9:81:fd:e9:e4:cd:1f:2e:c5:21:
01:39:be:8b:c9:aa:93:d0:67:f6:f1:ee:ea:c2:8d:
6a:86:0e:66:8e:e6:6d:ae:cc:c4:7f:56:3c:15:52:
55:9c:44:45:21:d4:64:0b:f3:7e:da:d2:f0:db:2a:
e7:9f:a5:db:db:b7:ab:3e:d7:59:05:00:44:dd:92:
e7:ab:8f:cc:81:0e:4e:32:d6:f2:31:bb:dd:c6:c6:
4b:e9:b4:17:31:19:ad:71:b8:57:98:95:0f:f7:24:
a3:2c:fa:cb:ae:21:b4:9b:d0:7a:d2:ef:d2:9b:3c:
da:90:29:8e:81:cd:fe:2e:bf:29:59:8a:2d:e1:a3:
fc:46:ee:ce:36:cb:eb:10:70:78:54:9d:0e:dd:e9:
d5:27:91:a2:01:a3:ab:e6:20:91:e3:3b:8d:20:f6:
b3:ef:aa:65:8c:a2:af:aa:28:33:bf:5e:58:29:36:
b5:8f:20:1c:72:b9:5f:d4:7c:18:4d:d3:bc:f0:54:
a0:c8:58:bf:22:53:88:51:8e:b8:f0:76:a4:63:1d:
22:1d:ed:64:38:4c:7f:5e:6f:6d:eb:c4:00:9c:03:
db:4d:47:84:b6:a5:96:14:57:61:a3:5a:7a:91:e9:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A5:1B:1B:53:9B:1F:2F:B8:78:63:AC:2C:14:2C:2E:36:78:0A:AE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AaUbG1ObHy-4eGOsLBQsLjZ4Cq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.43.0/24
5.105.81.0/24
5.105.96.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9e:41:56:4a:34:0e:ac:6f:50:a7:f5:df:a4:85:5c:d1:6c:
8a:4b:07:01:d6:ff:63:78:62:0c:7f:89:e0:9e:96:98:75:af:
56:35:24:df:35:08:86:a9:a3:b9:99:4c:59:a7:fa:ec:40:8a:
10:b8:db:33:d3:75:d5:30:7b:17:0e:00:80:55:56:31:9b:db:
47:25:6f:00:af:cb:d9:b6:e6:09:3f:a3:a2:21:cd:b5:06:30:
ea:80:ed:7c:b1:49:1f:d7:1f:ef:be:53:b1:72:41:8f:2d:d3:
a7:b7:5f:b5:99:6b:a8:a6:04:e9:64:46:ba:f0:07:75:0f:db:
e2:9f:1a:26:7d:80:63:a9:bb:68:f2:e4:8e:1a:f2:3b:ea:ef:
9b:25:ee:59:dd:1f:4a:11:52:bf:d2:2a:94:f5:d7:87:60:6e:
32:52:84:e0:f6:73:38:1c:b3:53:b7:83:4b:a9:00:7c:8e:d2:
f8:8d:dc:36:03:a1:b7:21:f7:8c:3e:4f:39:37:85:c8:23:4d:
72:e6:53:94:58:f4:99:25:b6:33:50:f6:5b:df:0d:56:82:e8:
75:e1:85:e0:37:97:b9:af:72:c1:7a:1f:d3:0f:3e:44:29:03:
4a:74:7e:37:50:bb:ed:3a:17:21:50:14:28:a5:78:55:33:99:
10:66:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 13:23:24 2023 by rpki-client on console-ams.rpki-client.org