Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BQP3Gu0pWxiczV4irEZYJ0-NmuY.roa
File: BQP3Gu0pWxiczV4irEZYJ0-NmuY.roa (raw, json)
Hash identifier: rud82OEaW+Y12xq4NXPe75Afa6RNoM2BdnmEkQEf17M=
Subject key identifier: 05:03:F7:1A:ED:29:5B:18:9C:CD:5E:22:AC:46:58:27:4F:8D:9A:E6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A65CD9AE2138F2BA1D2A21208AFBEE413
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BQP3Gu0pWxiczV4irEZYJ0-NmuY.roa
Signing time: Tue 05 Sep 2023 14:44:47 +0000
ROA not before: Tue 05 Sep 2023 14:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
5.105.248.0/23 maxlen: 24
217.67.78.0/23 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:cd:9a:e2:13:8f:2b:a1:d2:a2:12:08:af:be:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 5 14:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0503f71aed295b189ccd5e22ac4658274f8d9ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:f7:73:98:82:3d:61:b7:90:8e:9d:da:61:
b5:fe:23:9b:ce:65:6e:25:cf:74:3b:4d:c0:e7:a9:
84:2a:62:b6:d8:4f:5b:f2:0e:cd:a1:05:bf:d6:18:
74:81:56:97:82:db:dc:a8:55:4b:f5:7c:4b:cd:6a:
1a:8c:ee:b6:44:31:a9:c5:87:fb:fd:0b:a4:c8:38:
26:3a:36:bf:5e:79:8a:f8:af:c9:ab:85:61:ac:ff:
68:82:ce:67:b1:6d:83:3d:c2:2b:1a:84:f8:4c:92:
09:1a:6a:0f:c3:1c:ee:ef:8a:f7:60:79:1b:8f:11:
34:a1:0d:6c:2f:ab:3b:c6:32:b4:9d:b0:fa:2e:55:
af:af:3f:10:e2:1f:df:60:ab:14:ff:55:17:fd:d2:
31:96:4e:88:14:59:91:2c:de:25:ff:21:bd:e2:eb:
fb:78:2a:82:02:e9:39:2a:0d:27:94:f7:e4:71:65:
21:e1:60:80:02:1e:29:5c:db:00:c2:db:e7:f9:66:
b2:ff:46:57:26:61:3a:30:f7:32:03:72:b2:2d:96:
d7:34:5e:9d:b3:a2:4f:4d:67:69:d4:d4:95:84:6e:
c5:9a:4d:b3:65:53:c4:c4:c9:01:7c:ee:b8:69:9e:
ac:af:42:fd:a5:6e:a0:08:f0:58:3b:33:1f:a1:83:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:03:F7:1A:ED:29:5B:18:9C:CD:5E:22:AC:46:58:27:4F:8D:9A:E6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BQP3Gu0pWxiczV4irEZYJ0-NmuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.22.0/24
5.105.110.0/24
5.105.114.0/23
5.105.128.0/24
5.105.178.0/24
5.105.180.0-5.105.182.255
5.105.206.0/24
5.105.248.0/23
217.67.78.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:a0:35:96:55:48:a0:4f:f6:6f:1c:2b:9f:c4:fc:78:f1:5a:
44:dd:d4:49:47:d9:71:a8:cc:cc:dc:45:c6:1a:8d:b6:69:67:
ca:f0:3c:ba:6a:43:27:bb:0d:2e:db:f5:a9:35:20:f0:23:8f:
7e:ec:38:0f:53:f4:bf:af:25:3e:e2:b0:19:90:8b:d9:d7:dc:
2d:fb:09:85:c0:8c:9d:fd:27:b3:65:29:ae:95:8c:06:63:a3:
eb:4d:25:32:39:53:8d:db:77:2e:c7:c0:d0:6f:bb:2f:c1:ba:
58:34:ee:66:10:30:3f:fe:4b:7d:20:e2:bd:68:49:20:dd:8e:
3a:aa:48:de:1e:6c:bc:c3:8b:31:b9:33:f1:16:51:16:3e:70:
e4:f1:ab:cd:1c:92:5d:0d:a4:62:90:a7:59:60:6f:cb:cc:f4:
d3:ad:30:36:29:56:5a:6e:47:9b:3e:5a:0b:8b:cf:cd:56:58:
fe:5d:13:dd:06:35:06:92:95:f1:77:2e:45:43:95:d6:62:f5:
c1:d6:8e:52:98:10:60:b0:13:11:05:38:c9:9a:b6:17:a3:f6:
62:ca:7c:64:a9:e9:13:7b:dd:30:bd:8e:fb:08:a8:d9:9b:71:
0d:eb:8a:bd:dc:6a:c1:b4:13:3e:b5:6a:e7:59:6a:74:e4:dd:
b6:c7:c9:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 11 20:10:06 2023 by rpki-client on console-ams.rpki-client.org