Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GkXop_RlPGxVB-BnWLlNthS6ZfU.roa
File: GkXop_RlPGxVB-BnWLlNthS6ZfU.roa (raw, json)
Hash identifier: jRszpKFd5DWr9CyN6laRSJTC05LTRP6cUh8PQtlqcPo=
Subject key identifier: 1A:45:E8:A7:F4:65:3C:6C:55:07:E0:67:58:B9:4D:B6:14:BA:65:F5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01858D01794F11583E4B9BAAB0D1D4B82937
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GkXop_RlPGxVB-BnWLlNthS6ZfU.roa
Signing time: Sat 07 Jan 2023 16:12:42 +0000
ROA not before: Sat 07 Jan 2023 16:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8d:01:79:4f:11:58:3e:4b:9b:aa:b0:d1:d4:b8:29:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 7 16:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a45e8a7f4653c6c5507e06758b94db614ba65f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:27:43:19:07:b8:14:1a:7b:35:23:1f:fa:
50:2c:fc:fe:59:08:59:b9:80:52:c3:61:6b:a2:93:
16:c3:d3:84:b4:ff:ec:7b:e2:cd:43:60:c8:e0:68:
d2:aa:ab:b7:72:4b:f9:45:0f:31:a5:7e:7a:a2:0b:
ca:3e:98:e3:ba:ba:ad:86:37:5a:35:26:ed:09:19:
94:7e:ff:16:09:1d:d4:58:b1:1f:1d:82:30:f1:7c:
85:49:19:2e:32:99:6d:0a:a4:d0:9d:1a:0c:37:dd:
0d:9c:ea:a2:ea:86:07:16:5a:87:8b:f4:4a:84:1c:
e7:56:84:68:2c:f6:36:87:cc:e3:0a:31:d9:55:76:
ad:7d:b6:13:17:00:02:fa:89:a6:5e:cf:1e:94:a4:
4f:19:46:9c:53:99:14:80:62:0a:9e:27:40:71:c3:
fe:f0:65:c2:ce:a3:01:a8:c6:51:b2:cc:53:d4:db:
ee:c3:25:d7:9d:0a:fa:6d:75:9c:4e:bd:79:81:a1:
7e:4a:93:aa:64:98:3c:34:61:f4:de:cf:bb:59:00:
e5:c0:97:16:f0:2a:3b:7d:ae:d7:1f:b8:8d:35:45:
e2:9e:54:75:2e:c8:25:60:df:b3:f8:87:59:2a:57:
72:6e:1b:db:2c:77:25:b2:c4:a6:cc:b6:4d:3a:6a:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:E8:A7:F4:65:3C:6C:55:07:E0:67:58:B9:4D:B6:14:BA:65:F5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GkXop_RlPGxVB-BnWLlNthS6ZfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.32.0/23
5.105.38.0/23
5.105.63.0/24
5.105.96.0/24
5.105.130.0/24
5.105.184.0/24
5.105.200.0/24
5.105.215.0/24
5.105.226.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
32:35:51:50:2b:a3:44:18:21:4c:41:fa:d4:b2:76:4b:8a:36:
cd:05:c8:4d:ae:15:f8:bb:2b:04:5c:de:e2:30:d0:05:83:e8:
b3:bf:55:32:8f:e7:79:99:ae:f0:37:9e:13:02:ae:77:8e:e5:
56:cc:22:94:80:58:fe:cd:a5:8d:53:14:43:17:f7:4e:0b:bd:
35:1f:fc:2f:69:48:d3:7b:da:88:ef:8d:85:3b:57:7c:5b:70:
d8:24:e5:9b:8a:5c:f5:c2:5c:92:ea:76:26:9a:a0:f5:34:34:
97:b6:3c:6c:12:7c:3a:15:b3:7f:91:0b:a5:b5:8e:a0:fd:01:
97:18:f3:99:2e:36:c9:d0:91:d5:1e:3c:49:f6:73:dd:70:c6:
b9:1f:11:69:07:e2:72:88:a9:e8:b6:ad:f1:20:a2:c1:74:fc:
8d:30:cf:44:0a:ad:67:6b:ba:16:29:17:13:6a:19:05:8c:6a:
91:b2:b2:8f:da:ea:75:ff:7e:4d:50:6a:96:f1:8e:9e:19:68:
11:2b:93:79:ce:1b:1b:66:e0:9a:9b:b7:cc:31:59:92:6c:fc:
bf:c3:78:27:ed:7e:a0:8b:bf:d2:d3:e4:16:19:4f:04:83:7f:
eb:f6:e4:54:1a:33:bb:84:96:9c:e1:d8:94:ec:73:01:fe:e6:
d8:bf:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org