Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/HN13ePjuVlBId5EYkzEnp4gueY4.roa
File: HN13ePjuVlBId5EYkzEnp4gueY4.roa (raw, json)
Hash identifier: SBiyk9hlF3LalyrLSM7ULz/xOuLg3AQitR099KxU/20=
Subject key identifier: 1C:DD:77:78:F8:EE:56:50:48:77:91:18:93:31:27:A7:88:2E:79:8E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01857ED19458185AEA2CE6CCCF9804899250
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/HN13ePjuVlBId5EYkzEnp4gueY4.roa
Signing time: Wed 04 Jan 2023 22:05:42 +0000
ROA not before: Wed 04 Jan 2023 22:05:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7e:d1:94:58:18:5a:ea:2c:e6:cc:cf:98:04:89:92:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 4 22:05:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cdd7778f8ee565048779118933127a7882e798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:7b:dc:46:91:ab:01:3f:bf:1c:9a:d9:a8:
83:bb:a9:69:bb:3b:5e:1a:d8:a0:05:6a:ab:88:92:
ac:7d:b3:c8:04:cb:55:2b:c6:16:07:ee:b2:13:b8:
84:6f:16:87:e5:b7:d3:82:50:e1:e7:d2:a8:ec:40:
ec:64:89:6d:a7:75:b7:79:f2:5e:35:77:cd:04:cd:
02:55:98:28:2c:41:aa:16:21:cc:99:f5:4d:db:b8:
6a:5e:22:d5:a6:db:47:4a:3e:19:2e:0f:d4:da:ae:
c5:b8:57:46:0f:f3:ba:70:b2:55:b5:61:d9:d0:d8:
9c:0c:63:9d:ab:74:8d:4e:bf:4f:7d:c0:06:34:ff:
b1:78:f6:1f:e0:44:ac:ce:2c:32:ad:7c:06:c3:e7:
0a:69:b0:9d:9f:88:3e:7a:64:04:28:75:87:2f:c3:
55:72:00:a8:f1:3e:cc:5b:e1:df:f0:40:22:be:c4:
04:da:ce:70:af:28:07:b6:78:70:3e:f2:fe:ad:0a:
13:d3:be:84:0a:94:5b:8e:9f:8d:76:7f:b2:c0:b8:
9e:e2:ed:30:83:be:10:6e:ab:67:b0:8e:cc:72:8b:
d1:03:c6:1b:2e:bc:22:c6:80:fd:f8:d8:59:b3:c0:
55:c2:0c:83:48:5d:f0:2f:93:73:2c:b8:85:c6:8d:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:77:78:F8:EE:56:50:48:77:91:18:93:31:27:A7:88:2E:79:8E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/HN13ePjuVlBId5EYkzEnp4gueY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.63.0/24
5.105.130.0/24
5.105.184.0/24
5.105.200.0/24
5.105.215.0/24
5.105.226.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fb:fc:ed:e6:5f:f0:59:26:cb:0b:92:44:ae:8c:43:fe:dc:
60:2b:82:89:43:16:bc:5b:8b:e7:40:41:e0:60:3e:8c:69:7b:
81:d9:71:0b:8c:f3:f9:5e:fd:cb:ff:de:d7:2e:c3:a9:46:5a:
9a:80:cf:5b:7a:54:d8:ec:0b:ce:89:a6:41:c3:81:09:5e:58:
87:f8:56:60:da:a4:86:db:35:8b:ec:ce:f8:a4:40:93:b5:ad:
a2:fe:f7:e8:c2:88:5a:ad:2a:0f:cd:b9:a8:73:45:73:a3:4c:
52:b4:4d:3b:9b:1e:08:9c:06:82:25:17:82:61:7a:e0:3a:34:
1b:d4:5e:46:d0:ff:e9:0f:8a:a5:ea:81:62:20:84:73:c4:f9:
d9:80:25:6c:bf:cc:b1:45:2f:91:09:aa:2b:bd:bc:94:00:54:
b1:d6:79:64:9d:f7:5d:8b:35:37:5d:52:15:1f:50:59:dc:f8:
d5:7e:bf:ec:6f:db:54:46:50:1d:a5:76:2c:44:8d:cf:cb:24:
1b:fb:8b:c2:ac:de:4e:85:63:5c:6b:3d:b4:89:ed:c4:86:9f:
3d:8d:48:84:45:56:8a:df:de:ee:b3:bc:42:44:38:b7:6b:bd:
0e:7e:07:70:23:a2:75:13:3a:b4:44:f7:d0:ae:23:e2:8f:ce:
b1:86:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org