Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DX4RhHb1991wiVWwgMM4uhoMjFE.roa
File: DX4RhHb1991wiVWwgMM4uhoMjFE.roa (raw, json)
Hash identifier: US050kPfYsgbub1SM4le/8El5M2nVtvKjpzh1DRZAK8=
Subject key identifier: 0D:7E:11:84:76:F5:F7:DD:70:89:55:B0:80:C3:38:BA:1A:0C:8C:51
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889AE003F94A62CF069645CED30C00DB4A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DX4RhHb1991wiVWwgMM4uhoMjFE.roa
Signing time: Thu 08 Jun 2023 11:59:12 +0000
ROA not before: Thu 08 Jun 2023 11:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 5.105.243.0/24 maxlen: 24
5.105.246.0/24 maxlen: 24
5.105.211.0/24 maxlen: 24
5.105.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:e0:03:f9:4a:62:cf:06:96:45:ce:d3:0c:00:db:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 8 11:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d7e118476f5f7dd708955b080c338ba1a0c8c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:12:be:ad:73:f3:52:9f:f0:88:eb:3c:03:
36:8a:9a:72:a2:15:ea:df:1e:7f:3a:f8:c1:6b:7d:
c0:98:d5:c7:6b:cb:6b:46:76:e3:2f:a7:af:d5:d9:
fa:1d:d3:19:47:6a:86:d1:74:e0:1d:f8:7e:e2:31:
8b:40:c9:bd:cc:57:c1:c1:fd:c1:50:ee:b7:04:4b:
11:cb:cc:66:51:3e:d8:57:6b:92:e4:99:cf:8b:ed:
0c:9a:36:f6:2f:d1:16:61:88:c3:20:46:86:e5:83:
c5:f9:42:0a:e7:6e:b9:6f:12:1a:64:06:3b:1b:27:
f1:fd:d3:fe:aa:dd:1a:9b:5c:37:eb:96:5e:4a:93:
72:37:d5:cb:49:43:2e:fe:59:bd:ea:fe:8a:d1:38:
95:35:d8:46:7c:58:dd:b3:5b:03:a8:be:4b:48:a5:
88:b6:c1:7d:5a:60:bf:fe:bd:61:ad:a2:17:92:23:
10:dd:b2:bb:72:7d:37:e9:92:a1:55:eb:fe:27:65:
73:62:08:eb:22:a6:55:d1:d4:87:66:d0:da:96:c7:
88:48:14:52:a5:72:1b:a2:d8:c7:17:9b:a6:b1:4d:
3f:17:34:3f:9e:5f:96:88:af:8b:28:10:d3:43:9a:
0c:50:6a:23:da:3b:20:5c:a0:03:db:1b:1d:0a:83:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7E:11:84:76:F5:F7:DD:70:89:55:B0:80:C3:38:BA:1A:0C:8C:51
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DX4RhHb1991wiVWwgMM4uhoMjFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.116.0/24
5.105.211.0/24
5.105.243.0/24
5.105.246.0/24
Signature Algorithm: sha256WithRSAEncryption
20:42:8e:79:ad:4a:bd:4b:25:02:a3:4e:f5:03:1a:fb:e6:85:
0e:64:8d:17:64:02:a2:f5:6c:72:e0:87:c4:4c:bc:c2:de:af:
94:59:92:9e:e0:73:5f:bd:5a:ed:d4:00:f4:98:3b:26:4c:45:
9d:ac:8f:80:47:f8:d1:0f:1e:96:26:30:77:c1:ee:00:1f:82:
29:c3:ed:34:0a:13:e3:7d:dd:f2:98:53:ff:16:0b:ea:aa:a3:
e5:06:ef:1e:3f:c3:83:9a:d6:43:9e:37:a9:fd:e5:55:5b:16:
a6:00:13:74:72:e3:dd:0d:20:72:8d:f6:cd:58:28:0f:19:65:
0d:e0:6b:f7:3a:54:40:1c:b3:7c:a5:32:f2:11:a0:c0:c7:dc:
a4:b8:29:b3:bc:d6:b8:2b:87:b4:9c:ac:e5:27:0c:f6:0a:4a:
6a:73:92:aa:f5:f6:a7:66:ef:ff:33:0a:cb:56:4f:88:f4:5e:
ac:37:b7:a9:3d:f5:22:1f:1e:6e:a4:16:d1:bd:2b:ac:9f:24:
1c:89:f9:5f:e1:89:b1:67:f1:86:f4:6e:4d:94:0e:c7:25:d8:
20:41:0f:92:bc:ab:2e:07:63:d7:27:45:8c:02:8c:32:10:97:
81:25:1c:63:2f:a3:04:0b:f1:e0:16:e8:48:24:cd:a0:4f:93:
42:00:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 21:10:36 2023 by rpki-client on console-fra.rpki-client.org