Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IALcbXah0TuM_Sel8uAKdcU7tHY.roa
File: IALcbXah0TuM_Sel8uAKdcU7tHY.roa (raw, json)
Hash identifier: YhXznl8EFpyDt36ZeCH8QcBexc4xnxHp29PcfrJLuJA=
Subject key identifier: 20:02:DC:6D:76:A1:D1:3B:8C:FD:27:A5:F2:E0:0A:75:C5:3B:B4:76
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186F3992ED6A633D05394B481286F48B4E2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IALcbXah0TuM_Sel8uAKdcU7tHY.roa
Signing time: Sat 18 Mar 2023 07:22:27 +0000
ROA not before: Sat 18 Mar 2023 07:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:99:2e:d6:a6:33:d0:53:94:b4:81:28:6f:48:b4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 18 07:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2002dc6d76a1d13b8cfd27a5f2e00a75c53bb476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:a4:d1:7d:78:f2:f0:bd:ac:c7:a7:04:5b:
15:a8:a6:69:84:02:98:8d:2c:70:96:76:10:ee:d2:
15:5b:52:62:aa:8d:7f:3a:05:fa:7b:d4:c8:6f:4f:
e3:de:a8:dd:83:8e:b5:1c:c1:c6:99:aa:d1:2b:e1:
43:ed:fd:fc:9f:aa:22:a5:3d:c2:98:59:f7:33:42:
3c:c9:51:ec:61:02:04:94:c3:68:59:d6:25:c2:16:
77:cf:3a:24:ed:8c:8a:25:94:8e:57:3f:58:b3:ae:
a6:fb:ad:2f:19:49:f6:58:e9:4a:a4:d3:86:ba:ab:
57:6a:03:12:d2:cb:69:fd:2c:83:eb:21:ba:ef:a9:
95:19:8a:d2:50:8b:5a:d5:88:51:39:9d:03:8f:3e:
8c:3b:c9:c6:f7:13:94:e2:2f:70:fe:28:66:dd:ae:
13:14:7b:80:ac:54:0d:6a:51:6c:06:ff:db:44:68:
b1:6f:69:4e:25:f7:a8:c9:2e:5e:01:59:b5:ed:fb:
00:95:22:d8:42:66:8f:2e:14:45:b2:d9:f0:9c:a6:
bd:c9:fb:1e:89:d0:cd:3a:d0:06:72:52:ea:a6:04:
02:c6:8d:65:ea:f9:13:40:13:4f:80:1c:6f:70:86:
48:ad:49:e4:77:31:4c:16:43:d1:a9:c9:10:38:08:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:02:DC:6D:76:A1:D1:3B:8C:FD:27:A5:F2:E0:0A:75:C5:3B:B4:76
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IALcbXah0TuM_Sel8uAKdcU7tHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.131.0/24
5.105.134.0/24
5.105.156.0/24
5.105.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:da:d9:61:61:a9:19:d3:96:c9:3d:b0:80:b0:dc:da:c0:ad:
6a:27:a4:95:3f:4c:fd:dd:a9:8e:06:81:7b:e6:54:3c:b6:12:
8c:4c:3b:16:6c:61:33:93:db:e2:ed:be:af:c1:cd:03:04:ee:
a9:8f:26:b3:ce:7e:2b:2a:e2:cf:62:8b:57:2f:f6:42:7d:1c:
ad:2c:15:2a:71:d8:bf:35:7b:62:99:a8:e3:24:09:3b:4b:66:
9f:9f:08:d9:d7:af:b8:5f:7c:40:f4:1f:5d:de:82:26:87:9a:
7a:0b:c7:87:e1:da:5a:31:2b:00:ad:f1:85:f4:ea:52:3b:44:
d2:4f:ed:fa:c4:f7:50:47:2f:08:c5:11:c8:84:6e:cc:0c:17:
61:17:a6:ad:19:81:6f:d7:c0:d1:ef:86:c9:9e:c8:4c:ee:07:
1c:9d:76:39:0a:8b:49:19:6e:74:60:b4:d8:92:ca:bb:7b:fe:
13:4b:2f:71:42:9e:54:97:ef:0c:c7:fa:b4:48:60:85:d1:1b:
1b:2c:ba:03:06:5a:34:48:69:78:a4:69:74:e4:09:8e:16:3c:
53:20:01:44:69:47:38:49:7d:46:9b:6e:1b:1d:b2:0c:6e:52:
e3:3d:8b:ec:c4:2d:93:dd:02:e7:fc:bd:c0:c0:24:61:46:29:
ea:50:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org