Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JYPe8nBABPF_DBVh7e_1xgOozt0.roa
File: JYPe8nBABPF_DBVh7e_1xgOozt0.roa (raw, json)
Hash identifier: 25JFmiRMtwhrxOffjDCpyE59X5eEj4Y0LidnNvGqFZE=
Subject key identifier: 25:83:DE:F2:70:40:04:F1:7F:0C:15:61:ED:EF:F5:C6:03:A8:CE:DD
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185A705F95651CF09C6F469403DF818726D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JYPe8nBABPF_DBVh7e_1xgOozt0.roa
Signing time: Thu 12 Jan 2023 17:27:44 +0000
ROA not before: Thu 12 Jan 2023 17:27:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:05:f9:56:51:cf:09:c6:f4:69:40:3d:f8:18:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 12 17:27:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2583def2704004f17f0c1561edeff5c603a8cedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:94:ed:ed:be:12:8f:5b:20:79:4e:1b:fa:
19:63:dc:63:30:dc:55:3d:e6:42:1b:de:fc:33:cc:
90:71:44:3a:87:95:c9:40:50:16:c2:36:70:0d:cd:
93:c0:a6:40:5f:43:89:7d:8d:da:88:3d:f1:f9:34:
36:bf:61:67:d8:ce:8d:42:0b:06:49:d0:3c:df:32:
d0:b3:b1:4f:87:95:b4:9b:9e:9e:3a:ea:df:4b:2a:
cf:26:7f:86:51:7c:67:79:73:fc:ac:19:fe:69:09:
9d:fb:bc:3d:5b:2f:6c:1a:71:d1:4c:b0:81:aa:8f:
01:62:58:ec:72:ca:af:7a:9a:e0:d9:3b:4f:b2:7f:
3d:c4:4d:2f:14:1a:f3:78:33:1d:c2:78:07:28:fb:
82:9e:34:12:f9:e6:ed:70:92:53:41:7c:5e:6f:fd:
52:9d:9d:ce:98:5b:6c:b4:e9:93:8d:43:1f:3c:b7:
dc:7f:fa:5b:e6:9f:9f:6c:60:9e:d3:96:0e:46:5e:
8a:52:0e:a7:f6:cf:43:a2:91:48:16:a4:63:75:be:
f7:7e:64:29:ca:99:c3:0c:5a:d4:87:b4:9b:21:f9:
b2:be:97:98:5f:20:45:8b:59:2e:25:ac:c2:50:06:
7e:14:c1:b9:d0:0d:56:c5:f1:46:e7:d4:3b:45:e7:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:DE:F2:70:40:04:F1:7F:0C:15:61:ED:EF:F5:C6:03:A8:CE:DD
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JYPe8nBABPF_DBVh7e_1xgOozt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.30.0/24
5.105.32.0/23
5.105.38.0/23
5.105.63.0/24
5.105.96.0/24
5.105.130.0/24
5.105.136.0/24
5.105.184.0/24
5.105.215.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e6:86:a2:dd:fe:02:51:be:4e:34:84:db:bd:58:24:51:13:
45:ba:15:b7:96:ad:58:70:2a:be:76:40:a6:a1:66:af:17:89:
f9:91:e7:0b:6e:c0:ee:83:36:23:91:0b:b4:41:ec:e1:b1:68:
90:9c:e5:05:95:de:43:05:21:44:b3:cc:8c:6b:92:30:48:15:
1e:ab:8a:c8:77:8f:97:3a:93:f0:c4:f4:10:0c:97:0f:cb:5c:
95:26:c5:a7:bd:c8:32:15:8d:65:31:6d:1b:f5:70:41:77:62:
8b:e5:4d:4c:f1:f5:a1:04:eb:f2:45:25:ac:3d:b2:76:7b:1d:
d5:d6:a3:c9:2b:a6:81:2c:32:de:73:8c:4c:47:a9:51:23:3f:
87:f4:ca:10:2f:d8:3c:57:1f:cd:d1:88:a1:e9:0e:e6:f6:58:
94:f2:ac:4f:3d:b0:07:05:c2:d4:06:86:26:1f:28:d1:5d:fe:
1f:08:32:cb:57:66:99:05:20:41:32:49:59:50:06:00:1a:12:
ed:b0:8d:77:12:c6:e2:ab:81:ce:ed:d0:d0:f1:fb:0f:c2:df:
0d:55:19:32:1a:d1:b3:3b:55:8c:c4:f2:fc:bb:00:ed:72:a5:
c6:d8:19:58:14:cb:4a:9f:2d:22:d1:1e:c9:22:5b:d2:a6:9b:
a7:13:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org