Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LNBoypRe5i3wKpEzuLOCtPXyOeY.roa
File: LNBoypRe5i3wKpEzuLOCtPXyOeY.roa (raw, json)
Hash identifier: Ip6HAC6cTD2i3i20Tpqg26jYuh3Omhs/ldfBAiRCCb8=
Subject key identifier: 2C:D0:68:CA:94:5E:E6:2D:F0:2A:91:33:B8:B3:82:B4:F5:F2:39:E6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189D3975928EAB821922F7D5174821D50A4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LNBoypRe5i3wKpEzuLOCtPXyOeY.roa
Signing time: Tue 08 Aug 2023 05:20:58 +0000
ROA not before: Tue 08 Aug 2023 05:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 5.105.128.0/24 maxlen: 24
217.67.78.0/23 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:97:59:28:ea:b8:21:92:2f:7d:51:74:82:1d:50:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 8 05:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cd068ca945ee62df02a9133b8b382b4f5f239e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:0f:58:6d:24:e2:d4:49:c9:c0:95:1c:15:
32:18:12:ec:15:d9:cb:ca:8f:71:61:a6:55:d9:e0:
9b:d4:58:af:99:2f:cd:e0:5f:0a:95:c4:b1:2d:f1:
cc:e1:f2:a1:b5:f8:b4:70:12:55:af:b3:66:b0:97:
b7:06:dd:80:d8:d7:39:8c:13:aa:6f:9f:85:3d:f4:
bf:ea:b9:ab:7c:9a:d7:9b:54:da:98:06:94:f5:ed:
45:36:bf:7e:91:14:3d:a8:08:f3:4d:68:c8:2c:a0:
04:fd:28:70:26:82:38:b0:40:14:c9:43:70:28:6b:
97:3f:ec:e0:31:5a:ca:27:c0:88:f9:9f:64:a7:28:
7a:e1:68:b0:93:35:f6:88:3d:03:14:0d:48:ea:1e:
c7:b1:3f:84:33:e6:e6:94:15:8e:91:fc:4c:5b:35:
e9:20:86:47:e6:a3:bf:e7:1f:c2:e7:b5:ae:25:2c:
02:95:61:ec:ac:53:b7:6f:cf:eb:26:12:bd:2a:84:
2b:c5:14:bc:6e:a6:4b:ae:56:b2:c4:69:70:b8:c1:
0a:cd:4d:e6:f1:2a:45:3e:bb:f9:0a:33:d4:93:ee:
6b:c1:a8:d7:e0:23:88:79:7a:ff:2b:b7:af:a2:b1:
ae:2d:d9:d6:58:39:79:3b:c6:b8:cf:31:25:e1:f8:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:68:CA:94:5E:E6:2D:F0:2A:91:33:B8:B3:82:B4:F5:F2:39:E6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LNBoypRe5i3wKpEzuLOCtPXyOeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.128.0/24
5.105.178.0/24
5.105.180.0-5.105.182.255
5.105.206.0/24
217.67.78.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:36:02:70:0c:72:f0:2c:8e:e3:05:24:83:d8:3f:0e:25:74:
2b:85:34:d7:f6:ad:d9:b2:4d:e5:55:45:0f:c6:f9:01:f4:3d:
09:65:60:00:85:35:76:8b:64:3b:2a:6f:81:23:24:2e:e3:cd:
1a:19:89:f0:dc:85:9b:a7:ab:92:aa:2a:b4:4c:04:ff:3f:2d:
da:a4:60:5e:f8:6b:8b:25:f3:70:e5:f5:fe:30:30:bd:44:46:
9c:f8:34:84:08:a7:f3:b7:e5:65:40:26:70:6a:fc:cb:94:15:
c3:6e:dd:2f:ae:a0:ef:12:ca:43:9c:dc:41:17:b7:96:e3:ba:
f7:fb:5d:09:bf:5a:e5:8a:1d:09:ec:c9:85:b0:96:9f:1e:ca:
c5:af:99:88:b4:48:fd:21:03:5b:9b:ab:74:c3:f6:cc:e2:0b:
78:ac:bf:1c:97:56:aa:1b:05:a9:b5:ac:9a:4f:d6:21:60:70:
f5:3b:af:19:32:c8:95:ab:c4:06:ac:01:d5:c2:66:ad:df:b2:
8c:16:f1:8b:5a:6d:b2:a1:35:c8:b6:9f:bf:f7:19:e2:53:22:
71:a2:54:a6:5b:c8:73:71:10:05:06:bc:f9:af:d7:94:a5:c8:
da:b5:29:d5:f2:1a:6c:82:c1:ea:3e:54:a9:52:fe:ad:96:51:
e7:5d:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 09:07:12 2023 by rpki-client on console-ams.rpki-client.org