Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/CiCWaUhBaTkV_vSKYHarFlNOfa0.roa
File: CiCWaUhBaTkV_vSKYHarFlNOfa0.roa (raw, json)
Hash identifier: yXxbGtLasqa1agiQyBE3uIjv6cAVw3l7Q4yhbH433Ck=
Subject key identifier: 0A:20:96:69:48:41:69:39:15:FE:F4:8A:60:76:AB:16:53:4E:7D:AD
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5A4606A4B69A548A29BF6E56A9574
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/CiCWaUhBaTkV_vSKYHarFlNOfa0.roa
Signing time: Sun 01 Jan 2023 05:54:50 +0000
ROA not before: Sun 01 Jan 2023 05:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.44.0/22 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.55.0/24 maxlen: 24
5.105.54.0/24 maxlen: 24
5.105.53.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 24
5.105.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:a4:60:6a:4b:69:a5:48:a2:9b:f6:e5:6a:95:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a2096694841693915fef48a6076ab16534e7dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:ef:3c:37:3c:fe:eb:d2:53:f2:e0:59:9a:
cc:b2:a5:32:72:90:02:9b:e2:98:48:79:ab:29:cd:
e5:26:ba:ed:e0:b3:40:16:6a:fe:eb:02:0a:af:88:
6c:ed:ef:3f:59:5d:ad:cf:c4:9e:14:ae:b0:48:bc:
f2:f3:94:12:4c:12:f2:44:ab:26:f7:f0:c8:33:05:
92:37:5e:4b:35:b7:36:bb:ea:73:9c:ba:1b:36:80:
77:b8:49:48:12:df:07:4d:7e:89:28:a0:26:46:b3:
a0:75:a9:1b:a6:53:cd:7d:87:fd:9e:9d:c3:c1:f7:
6b:10:9b:7e:a7:c0:d4:63:e9:93:32:47:b7:fd:68:
3f:f3:60:45:7c:ce:9d:12:f9:bf:5d:ad:d4:cb:a5:
d7:95:30:68:9b:e4:f0:9b:22:05:9e:48:98:3a:29:
2c:b5:7f:00:7b:57:01:5b:81:c3:f7:86:90:5d:59:
28:4a:28:b4:33:bc:fd:16:4c:34:83:34:4f:2b:c0:
5a:59:3a:64:87:f2:fa:d8:d7:05:08:0f:a3:5c:f3:
75:fd:7d:f2:fa:11:42:0e:cd:a4:a3:2d:ad:a7:e6:
da:1b:0d:aa:39:1a:62:86:1b:f3:9a:df:bb:34:21:
22:10:b0:12:53:b8:10:86:66:6d:03:60:b6:7e:58:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:20:96:69:48:41:69:39:15:FE:F4:8A:60:76:AB:16:53:4E:7D:AD
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/CiCWaUhBaTkV_vSKYHarFlNOfa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.44.0/22
5.105.52.0/22
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d6:32:28:d9:33:3c:77:ea:79:68:8f:0e:6f:2a:d7:8b:e5:
92:37:14:68:60:d2:b9:df:ce:cf:68:91:51:64:2a:c1:58:0e:
bd:3f:53:2c:15:6a:97:08:32:5a:b0:b2:68:02:4d:e3:24:27:
23:7c:ed:f9:ca:27:0d:88:b6:ec:c7:e1:bb:0a:75:de:41:31:
7e:a6:58:cf:40:06:01:05:d8:fe:cd:61:51:61:6d:b3:45:61:
32:84:fe:e4:85:39:5b:17:2e:2c:28:9f:1c:bb:db:c7:90:ae:
03:d4:7f:1d:37:e3:b2:ce:48:f4:5b:74:1c:63:2c:2e:99:af:
04:c2:d8:46:c8:db:5d:e3:ab:72:e7:5b:7e:9b:fa:ab:a1:42:
87:d7:44:ab:8e:92:c5:3e:7e:c3:6d:d1:c6:79:63:d4:d1:f2:
11:3e:89:17:de:b1:d0:d6:5a:27:3b:a7:aa:b7:57:9d:a2:44:
2f:32:6b:64:e7:54:b7:39:ce:fc:bd:70:2b:0e:d1:8c:ff:fd:
87:5e:e7:a7:8b:83:03:a1:51:8b:96:82:81:fd:65:73:bd:7a:
59:f7:22:cb:9c:40:e4:3f:25:86:6f:6f:e5:0a:59:7f:f7:b7:
17:d9:d4:61:5a:6b:e7:d2:0d:d7:42:60:aa:2e:07:7e:ee:e0:
b4:15:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org