Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AcGrCgxTFc1fYtMTcs6yDA22IYQ.roa
File: AcGrCgxTFc1fYtMTcs6yDA22IYQ.roa (raw, json)
Hash identifier: /sFkwFn5NptYBUNvZKGe3e0AxOyCOUg7AHJG5ZVrsLo=
Subject key identifier: 01:C1:AB:0A:0C:53:15:CD:5F:62:D3:13:72:CE:B2:0C:0D:B6:21:84
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018613D8060BBBB09A035A441B9ABAD1546C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AcGrCgxTFc1fYtMTcs6yDA22IYQ.roa
Signing time: Thu 02 Feb 2023 20:36:09 +0000
ROA not before: Thu 02 Feb 2023 20:36:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Feb 2023 07:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:13:d8:06:0b:bb:b0:9a:03:5a:44:1b:9a:ba:d1:54:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 2 20:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01c1ab0a0c5315cd5f62d31372ceb20c0db62184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:98:67:07:11:0b:f1:7e:03:1a:42:92:a1:
3b:80:fb:91:78:f1:f5:b7:ca:75:68:03:89:4f:4b:
10:f7:75:7e:9b:83:df:9c:a9:53:4a:bb:82:19:c5:
c7:66:a3:6c:a2:00:b5:d7:8e:e9:88:fb:1d:ca:f3:
84:36:fc:72:8d:87:c5:e6:d8:4d:7a:0c:24:cb:ac:
28:eb:82:c7:2f:22:10:77:d0:31:32:0e:db:94:36:
53:8e:ef:61:46:5c:46:1d:ab:cc:e6:1b:17:98:ca:
d6:bb:ed:73:f0:e4:fd:8c:89:d9:2f:cc:2f:e5:ef:
e8:f7:41:f4:01:e7:ba:42:28:d3:3e:51:7a:07:a8:
1b:13:ec:5a:b4:d2:00:b6:a7:fd:e5:84:0a:98:ae:
30:ab:d0:a1:c4:52:c7:fb:5f:57:4b:4c:3e:0e:c8:
13:5e:b0:11:3c:d8:f9:6a:2d:72:7a:d2:a9:64:49:
72:ff:9d:c5:58:c4:38:f7:02:1f:18:a8:65:e7:22:
ce:b5:1a:79:6a:b0:bd:32:7d:04:43:3e:a2:4b:46:
01:30:54:17:86:51:63:35:a6:20:ff:31:df:d5:7d:
fa:c1:cb:ba:63:79:df:ca:24:53:5e:46:e4:79:c0:
34:07:e4:5c:15:b6:32:5f:0d:a6:26:d5:af:df:00:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C1:AB:0A:0C:53:15:CD:5F:62:D3:13:72:CE:B2:0C:0D:B6:21:84
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AcGrCgxTFc1fYtMTcs6yDA22IYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0-5.105.32.255
5.105.63.0/24
5.105.96.0/24
5.105.136.0/24
5.105.184.0/24
5.105.200.0/24
5.105.215.0/24
5.105.226.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
be:1f:e9:fe:1a:e5:d5:98:43:98:30:ff:72:e0:2a:fb:55:ab:
81:4f:c1:8e:8b:52:e5:00:42:f0:a6:a1:3d:59:3c:9f:bb:9f:
0e:08:f7:c0:07:44:a8:9d:81:68:c9:1d:6f:38:51:14:1c:a4:
c9:a6:db:5c:c1:be:47:c0:5e:5e:f5:ba:88:05:28:de:64:0d:
c6:e4:64:4e:80:f6:d3:f3:7d:8e:2b:7c:57:b9:15:f5:34:09:
f8:ec:15:4a:51:61:43:04:a8:08:ed:04:47:a9:e8:1d:04:cd:
6a:60:7a:ec:84:7b:5c:68:8a:95:d4:19:fa:2d:37:5b:76:ee:
e9:ae:86:11:4c:9a:87:79:ee:4a:cd:c0:e4:fd:4c:cf:05:b4:
60:98:20:d9:88:da:96:f2:de:96:70:57:57:40:5b:5f:25:f2:
4d:ce:1f:e3:33:48:09:b4:92:78:56:61:b3:c7:10:1e:d6:a3:
f3:ff:cb:77:65:99:61:e9:bf:94:06:c8:bb:af:eb:3c:85:99:
7e:09:48:fd:c7:a8:b5:50:3a:36:20:98:33:0e:d2:b4:3b:76:
f3:22:48:cf:f6:36:61:99:1b:38:59:e8:b5:9a:da:cf:7b:e6:
5c:92:2e:3a:c8:b1:32:06:e5:04:62:7b:ed:26:3b:a1:21:bc:
d8:ad:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:55 2024 by rpki-client on console-ams.rpki-client.org