Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IxQH5YNFhFTWbh07dksajc4EbWA.roa
File: IxQH5YNFhFTWbh07dksajc4EbWA.roa (raw, json)
Hash identifier: BuNu+wgESetm9OkBDAhsUVs8xz5yFLPmn+jkInGRTNM=
Subject key identifier: 23:14:07:E5:83:45:84:54:D6:6E:1D:3B:76:4B:1A:8D:CE:04:6D:60
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189442A056BD592BF849FE5EA59E8198143
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IxQH5YNFhFTWbh07dksajc4EbWA.roa
Signing time: Tue 11 Jul 2023 08:55:51 +0000
ROA not before: Tue 11 Jul 2023 08:55:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 07:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:2a:05:6b:d5:92:bf:84:9f:e5:ea:59:e8:19:81:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 11 08:55:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=231407e583458454d66e1d3b764b1a8dce046d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:d9:b1:8a:a3:5e:a3:be:45:b7:87:1b:95:
0e:87:65:15:69:da:5d:38:cd:64:46:09:5a:3e:ed:
63:98:6c:8e:01:9f:38:e3:d6:28:97:af:84:ce:57:
5a:5c:5c:26:c2:3d:77:01:81:de:85:6c:04:78:ef:
0f:a5:89:b6:57:94:8c:fe:6f:cc:1e:9b:37:d7:03:
e5:48:5e:a0:a1:a5:0e:45:d5:e7:88:c1:4f:79:45:
97:22:74:26:b6:99:f4:e0:67:38:8a:f1:97:cc:8d:
f3:b8:4b:70:b6:64:ea:a9:5a:53:d4:de:3d:05:7b:
5d:21:e8:aa:a7:24:d1:2c:f9:cb:2b:61:9f:7a:c4:
59:b1:46:f9:fe:59:57:27:63:eb:57:cf:86:74:fb:
63:76:ae:1a:1e:aa:87:03:4b:c1:b2:4f:2f:48:bf:
85:21:d6:1c:94:ab:37:60:ed:da:a5:14:3f:7d:78:
13:cb:df:99:d3:aa:50:d0:c4:a7:ed:28:99:c3:0d:
68:d0:a2:a0:4e:87:a8:71:ce:f5:39:86:7f:a0:f2:
2a:b3:3c:90:e4:04:1e:c0:a2:d4:43:cf:28:0a:ce:
25:b1:38:95:1f:5b:de:e0:a2:a6:b8:e6:2a:53:6f:
55:66:21:0f:3d:cb:48:07:d4:ca:58:c9:50:b2:7c:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:14:07:E5:83:45:84:54:D6:6E:1D:3B:76:4B:1A:8D:CE:04:6D:60
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IxQH5YNFhFTWbh07dksajc4EbWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.43.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:88:81:73:1e:cb:09:09:31:ce:04:16:28:4c:e5:a0:9c:15:
0c:85:42:a7:72:2e:ac:b8:d7:cd:dd:8b:a6:c4:c9:07:dd:b7:
57:7a:94:9e:c1:ff:f0:ac:13:a7:8a:ee:1a:51:60:b1:7c:94:
a1:48:3e:af:99:5b:81:2e:4a:8f:6f:6a:89:a6:bb:ab:89:c0:
0e:ac:7d:69:c4:3c:c4:45:d6:93:e9:cf:b9:e9:2e:07:50:65:
59:55:5d:0d:6b:62:00:d5:9a:42:2d:75:f6:f1:5c:4e:06:30:
46:f8:cb:0e:98:e3:7f:3a:b2:8a:17:55:14:53:cc:d7:01:41:
c8:0d:0c:ba:ae:e8:3f:75:72:d6:7f:1c:42:be:bb:36:aa:1d:
b4:09:13:0f:30:a1:69:f4:2a:11:db:c1:1e:aa:3f:5c:e7:ca:
24:f5:61:77:d7:6d:9d:c2:0f:06:c0:cf:42:f8:cf:6a:05:a6:
39:c8:a4:d9:18:97:65:6e:03:e7:45:04:b4:be:79:f8:11:5c:
b1:6a:82:aa:1b:10:2e:dd:51:95:c2:8d:72:90:74:d6:ec:79:
83:96:f5:fb:07:9d:8c:9b:01:cf:a4:ac:18:2e:cb:7a:b7:ef:
77:63:8a:f0:6c:1e:e0:45:c7:9a:0f:a4:26:3c:41:ad:7b:48:
21:44:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:27 2024 by rpki-client on console-fra.rpki-client.org