Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FqYMZaHsXt5c0T5TyzYhI1EUX6s.roa
File: FqYMZaHsXt5c0T5TyzYhI1EUX6s.roa (raw, json)
Hash identifier: uv773yqE9BobYS0OLHSEdxCw+fumQbmbABB4tC/CuTk=
Subject key identifier: 16:A6:0C:65:A1:EC:5E:DE:5C:D1:3E:53:CB:36:21:23:51:14:5F:AB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863051F44F7D1B6AFC08FD9C791011912A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FqYMZaHsXt5c0T5TyzYhI1EUX6s.roa
Signing time: Wed 08 Feb 2023 09:18:42 +0000
ROA not before: Wed 08 Feb 2023 09:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 5.105.15.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:51:f4:4f:7d:1b:6a:fc:08:fd:9c:79:10:11:91:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 8 09:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16a60c65a1ec5ede5cd13e53cb36212351145fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:11:a3:2d:26:ae:92:0e:7d:fd:d1:58:a2:
4a:17:10:11:e0:4e:f7:d1:bc:f7:d0:e6:a9:f9:96:
29:fd:0e:ef:8c:1f:f4:43:45:70:80:ae:7a:15:d3:
c2:3f:d4:42:48:ad:36:78:b0:13:8a:50:42:23:2a:
e3:9c:5d:b0:63:05:98:a9:d3:f9:f7:9b:6b:35:81:
45:18:68:4a:13:36:43:84:cc:39:f5:17:c4:30:ba:
a7:d3:f4:e3:3b:86:91:63:8e:90:e7:8f:b2:df:3e:
70:81:2f:4e:96:ad:39:be:24:8c:33:26:13:67:47:
a3:cb:34:de:b7:48:ba:cc:9c:82:52:61:85:90:a9:
cd:10:52:cf:17:37:85:38:b1:cb:1c:ae:7e:86:4b:
f8:58:8f:25:4e:3b:d3:e5:78:52:4c:28:d1:dc:65:
6c:a3:27:44:f0:ab:ca:82:5b:4a:e2:55:fb:d4:4f:
09:0d:0e:43:22:7c:7a:f5:77:27:7a:45:83:e7:42:
13:ff:d2:53:3c:b2:9b:4a:43:0c:b7:e3:92:82:a9:
d7:88:e4:8c:c4:6a:74:1f:84:38:67:63:8d:f9:1e:
f5:e4:3f:db:42:83:87:fb:ec:58:5d:de:00:5f:c1:
70:09:fc:0e:19:88:02:9e:b7:90:9f:2f:a4:14:86:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:0C:65:A1:EC:5E:DE:5C:D1:3E:53:CB:36:21:23:51:14:5F:AB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FqYMZaHsXt5c0T5TyzYhI1EUX6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.15.0/24
5.105.28.0/24
5.105.42.0/24
5.105.77.0/24
5.105.125.0/24
5.105.218.0/24
5.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ee:fd:97:50:3f:0d:47:fc:81:a1:c5:dd:3b:8e:68:cd:b7:
c6:c7:3d:12:7b:4c:10:b9:9f:1f:c0:34:36:a1:80:fc:85:49:
8a:66:39:12:8d:07:92:3a:3a:18:1f:2b:81:8f:e9:2c:f3:a0:
87:da:f8:0c:e0:bd:4a:52:46:dc:11:b0:76:a6:d1:ee:ba:7b:
5e:00:be:c4:93:f1:e7:ef:57:45:c6:28:be:bb:01:c2:84:5f:
4c:e6:1a:0b:1d:6e:00:27:20:05:cc:bd:e6:5e:a9:50:b6:f5:
f1:3e:09:09:c3:65:d9:0a:7c:78:31:63:20:ab:35:d7:4e:77:
97:30:37:19:63:89:e2:81:2c:4b:18:54:a4:66:f9:6c:c3:8d:
4b:e7:12:20:c3:b5:93:b9:72:33:7c:8a:e0:56:3b:cb:61:43:
48:a6:73:52:06:f2:01:2c:25:85:73:d9:92:0d:2c:7f:df:2e:
2c:f2:e1:a2:84:55:1d:2d:2d:1e:aa:ec:d5:b7:a2:63:cf:b1:
1c:07:82:46:30:23:c4:80:48:d0:39:1a:25:72:34:44:ed:07:
52:76:0b:1e:bb:cf:5e:dc:39:f2:17:e6:9e:ab:b4:8f:46:fa:
d0:9b:c0:55:5f:d6:34:e9:61:55:fd:52:89:a5:6d:e0:03:af:
29:e3:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org