Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C9lfur8mCMpM0b9pC4xYTIy-AKo.roa
File: C9lfur8mCMpM0b9pC4xYTIy-AKo.roa (raw, json)
Hash identifier: KgTxjNAQd8U5NzxUSdRFIFn3RXfcEAj0xVWHBqdnghM=
Subject key identifier: 0B:D9:5F:BA:BF:26:08:CA:4C:D1:BF:69:0B:8C:58:4C:8C:BE:00:AA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C1AAFEED90DD5334669746934DCC3299
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C9lfur8mCMpM0b9pC4xYTIy-AKo.roa
Signing time: Thu 27 Apr 2023 07:43:41 +0000
ROA not before: Thu 27 Apr 2023 07:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 11:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:aa:fe:ed:90:dd:53:34:66:97:46:93:4d:cc:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 27 07:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bd95fbabf2608ca4cd1bf690b8c584c8cbe00aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:b4:a5:75:75:72:c2:08:47:0b:f8:f0:2d:
6d:e7:2c:7d:fd:e1:36:c9:26:e8:d9:8b:3e:bf:0c:
3e:02:e9:a5:77:32:47:8c:8f:60:cd:e9:df:9a:ab:
45:d3:e1:a1:e6:72:12:c1:90:42:52:9c:c8:d0:89:
2c:61:8b:07:ef:e7:81:2b:dc:f6:5c:59:b5:d7:a1:
4e:79:73:76:a1:ec:f8:4c:ef:b7:6d:5a:7e:96:88:
e0:76:31:13:83:5a:c4:69:24:63:11:b1:bb:f4:0e:
4e:1f:84:1c:58:81:7e:39:fd:d4:30:14:fb:0e:5a:
43:14:d4:ad:15:b9:3c:b6:47:70:06:38:b3:c9:7d:
48:ec:23:dc:95:f2:50:6a:16:d5:8f:66:94:49:08:
9a:a6:17:d3:8a:59:47:71:0b:b5:41:40:50:d6:8f:
41:37:d7:7d:e3:69:68:34:67:f5:4a:e9:0b:7c:5c:
83:bc:65:15:f8:a5:e6:20:f7:4e:48:26:b1:bc:a7:
22:a3:fd:23:54:38:81:ed:98:65:c0:f9:5b:83:21:
e8:8e:eb:ea:46:ac:c7:63:b2:d8:fd:cf:bf:5f:ea:
f6:51:41:c7:c9:00:53:50:f3:00:63:f5:c2:f1:80:
8a:7a:e1:4e:20:06:d0:44:19:3b:ba:f9:58:d1:d9:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:5F:BA:BF:26:08:CA:4C:D1:BF:69:0B:8C:58:4C:8C:BE:00:AA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C9lfur8mCMpM0b9pC4xYTIy-AKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.38.0/23
5.105.79.0/24
5.105.90.0-5.105.93.255
5.105.108.0/24
5.105.122.0/24
5.105.222.0-5.105.225.255
Signature Algorithm: sha256WithRSAEncryption
4d:b0:db:12:02:dd:56:72:04:21:21:d6:9e:43:08:1d:91:0d:
68:d4:52:b4:6e:b7:0b:e6:47:25:c1:5b:f5:33:f7:f3:7e:99:
3b:90:ee:18:78:5e:a3:d0:34:68:46:9b:61:07:3a:cc:1c:6f:
37:58:ff:d0:6f:69:cc:97:dc:2d:d4:5b:5f:24:a8:9b:bc:78:
a1:83:7f:71:26:e5:ed:ef:87:37:17:10:52:a3:84:4f:01:f9:
b9:37:99:53:c9:29:eb:a1:1b:b2:05:1d:19:b2:06:dc:69:d8:
10:5c:13:ae:ab:69:1e:c0:04:85:e3:f7:65:69:c6:39:44:43:
ed:0c:5e:ae:7f:c8:bc:e4:68:51:a6:86:80:3f:28:72:b8:7a:
0a:41:6d:f9:9d:53:8c:b7:89:c8:58:ac:1b:77:43:9a:3d:a4:
37:e8:99:ba:7e:5e:df:60:98:fc:83:39:21:53:21:cb:8f:b5:
89:10:d3:2b:1b:3d:67:65:47:2b:92:b6:5e:bd:8a:2e:8e:57:
b7:29:ed:2e:ad:59:8e:b3:82:0f:6e:ba:f6:e5:8c:72:df:c6:
a8:6c:8f:7e:e3:04:5b:03:ed:b4:34:4b:6d:e7:b8:cb:2d:8e:
d5:a4:b9:62:33:47:ac:5c:30:5f:d6:2d:a9:12:75:4a:13:27:
ff:7a:b1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:27 2024 by rpki-client on console-fra.rpki-client.org