Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JVunV255ta0PFQr1RzlP4KQ5XKk.roa
File: JVunV255ta0PFQr1RzlP4KQ5XKk.roa (raw, json)
Hash identifier: FVtT2+bApSbqvpOR+gKUH/kg4bei7TIl3MXqS+h3AnU=
Subject key identifier: 25:5B:A7:57:6E:79:B5:AD:0F:15:0A:F5:47:39:4F:E0:A4:39:5C:A9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188C4B6A31DC3F8F9C7D701BB4104C73431
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JVunV255ta0PFQr1RzlP4KQ5XKk.roa
Signing time: Fri 16 Jun 2023 14:58:03 +0000
ROA not before: Fri 16 Jun 2023 14:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:b6:a3:1d:c3:f8:f9:c7:d7:01:bb:41:04:c7:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 16 14:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=255ba7576e79b5ad0f150af547394fe0a4395ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:45:4c:b7:f2:9c:fa:ff:2d:30:1f:7c:77:
49:8c:28:5c:72:fa:d7:8e:07:db:12:4d:df:2f:18:
c2:f2:7b:24:20:61:c7:40:6d:dd:06:84:3d:b0:92:
ff:4e:10:20:67:ed:74:7b:3c:04:52:f4:3a:ba:4b:
b4:ad:67:20:34:22:88:26:e9:9b:f1:4b:13:26:3b:
b2:66:d9:7d:57:36:91:61:ac:e5:a1:9f:67:62:70:
7f:16:c2:89:43:55:99:6f:82:5b:86:94:1b:fa:b3:
e8:26:b5:8b:08:72:c0:b2:39:9e:e2:bc:b1:2d:19:
51:e1:93:58:3e:bb:3e:4a:66:94:59:6b:81:0b:e7:
eb:3c:cc:dd:66:ed:bc:9c:48:4b:51:90:61:4a:93:
05:04:43:95:11:8f:b3:b2:58:31:8d:6d:bd:a6:a5:
f2:27:8a:35:fe:3a:c9:71:7d:c1:78:c9:0d:91:03:
ea:fd:ca:f2:4b:b8:57:ee:cd:a7:09:8f:7f:38:d5:
1f:a6:a8:f2:ae:34:82:7f:be:de:b8:cf:6a:7b:b2:
d1:b1:8b:14:91:08:27:8d:46:5a:d3:7f:f9:f6:ca:
4c:81:41:45:60:6c:90:91:a3:78:fe:7c:72:6d:04:
3a:2b:95:f5:0a:dc:98:09:9b:fc:c7:a1:01:28:f0:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5B:A7:57:6E:79:B5:AD:0F:15:0A:F5:47:39:4F:E0:A4:39:5C:A9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JVunV255ta0PFQr1RzlP4KQ5XKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.62.0/24
5.105.165.0-5.105.166.255
Signature Algorithm: sha256WithRSAEncryption
21:d6:74:46:4e:8c:90:a2:fc:7a:8b:2a:44:70:eb:23:00:d0:
b6:a5:28:84:c2:47:d8:47:f7:41:97:7d:c1:c9:40:17:60:9d:
48:25:57:30:bd:1d:26:ea:4d:6d:7e:ff:f8:43:d5:95:c0:0b:
a7:d0:6e:e1:fd:d5:37:5c:5c:fb:66:bc:25:03:6e:9f:eb:02:
a4:64:e9:56:41:e2:dc:8c:ad:0d:74:1b:3c:ab:c4:3c:42:23:
03:66:9f:32:fd:f9:fe:6d:de:a5:f8:c0:e0:63:fe:f6:52:5a:
59:c1:14:d2:0f:93:c2:08:9c:49:1c:1c:76:90:1e:8e:e9:fa:
36:1b:a1:1b:f4:6d:0d:14:57:14:1b:e7:f5:30:d5:2a:67:22:
3f:42:1b:43:f1:81:18:47:82:8a:0b:e6:30:65:98:87:a3:9a:
93:e1:75:6a:b7:6e:c8:90:29:fa:91:c1:22:12:b0:de:66:d4:
3e:04:d3:b6:7b:62:68:12:4d:28:a6:91:7e:7e:d0:6d:a2:ed:
65:26:08:30:59:03:39:4c:2f:d5:e9:fa:68:92:65:9f:04:f3:
9e:78:14:88:b2:9f:32:60:4f:94:d6:8b:ef:c8:dd:ad:66:cb:
a0:75:77:cd:aa:9a:47:d8:ce:c8:24:36:1e:a4:de:5a:7b:57:
cc:57:6d:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org