Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/M8Mw-8vQyYhOXeDsaWDAraHGdwA.roa
File: M8Mw-8vQyYhOXeDsaWDAraHGdwA.roa (raw, json)
Hash identifier: YL1gV0vFtYOEpxkGPWHztxjJRG99XA4S2rMbcXn4Cpo=
Subject key identifier: 33:C3:30:FB:CB:D0:C9:88:4E:5D:E0:EC:69:60:C0:AD:A1:C6:77:00
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018682B2B5B7BE066B0910C8D3580F9303A4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/M8Mw-8vQyYhOXeDsaWDAraHGdwA.roa
Signing time: Fri 24 Feb 2023 09:13:15 +0000
ROA not before: Fri 24 Feb 2023 09:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 5.105.238.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:b2:b5:b7:be:06:6b:09:10:c8:d3:58:0f:93:03:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 09:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33c330fbcbd0c9884e5de0ec6960c0ada1c67700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:7c:8b:92:15:32:ba:7d:08:b7:49:3a:64:
ed:a7:0b:cd:a5:c8:27:54:97:8e:81:c6:e3:7c:48:
80:5c:b0:13:85:b0:46:de:0e:1d:77:9f:fa:32:7c:
23:33:3d:b4:ef:61:83:0d:1a:b6:7b:7d:81:26:43:
54:80:94:9d:1d:78:10:0f:f5:4a:03:04:7d:1a:d4:
b1:d4:23:28:87:59:84:cd:20:1e:a2:70:f4:93:6b:
a1:17:e9:94:0f:71:ea:b6:83:02:91:24:83:7c:82:
f2:7c:2d:8d:7f:b2:bb:8c:71:80:32:48:82:85:6e:
ed:84:5d:0a:6e:a3:c0:b1:e4:06:bc:29:e1:a9:8b:
c5:26:9e:a5:d3:b1:4c:8c:aa:38:66:10:f2:cd:cd:
cd:b9:b5:3a:33:bb:26:e2:ee:90:d0:b9:48:6a:b5:
2c:a3:43:7a:d3:a1:c7:a8:04:8f:1a:19:23:46:c6:
a3:26:b6:1f:8f:bd:3a:87:a5:a2:fb:a5:d0:72:8f:
86:3d:8c:66:9b:a9:24:1e:1e:50:c6:50:95:21:07:
aa:13:8a:25:87:4f:bb:a3:ef:87:00:f2:31:40:03:
26:04:ff:0e:9b:43:39:10:74:8a:a9:b0:08:f9:9e:
be:12:3e:37:a6:02:c9:0a:5d:5a:91:60:4f:5e:57:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:30:FB:CB:D0:C9:88:4E:5D:E0:EC:69:60:C0:AD:A1:C6:77:00
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/M8Mw-8vQyYhOXeDsaWDAraHGdwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.27.0/24
5.105.95.0/24
5.105.135.0/24
5.105.238.0/24
5.105.241.0/24
5.105.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:71:82:e7:08:6e:4c:eb:26:f4:88:fa:3e:7f:c8:10:50:d0:
e9:3b:0d:f1:af:ec:46:9b:a6:82:b8:9c:22:06:73:a6:a4:ca:
66:06:09:1b:59:ee:6d:1c:0d:ad:d2:09:69:1c:a2:74:72:01:
ed:3e:a7:18:b8:e6:0e:76:94:69:d6:94:be:b7:c2:c3:ed:53:
8d:0f:f3:38:ac:95:3c:ee:24:99:54:8a:91:f1:bb:0a:37:66:
99:b4:d9:71:61:10:67:a0:e2:85:43:3a:db:fb:ad:61:92:fc:
43:db:40:14:28:cf:91:83:76:32:9d:98:ed:17:98:86:d0:2f:
f8:b2:df:a6:08:75:f5:be:bf:3b:06:25:15:60:2a:55:11:6d:
97:e1:90:8c:23:cf:b5:78:fb:9b:34:49:6c:88:0e:b9:58:d4:
58:76:20:00:3e:cb:34:5b:5e:98:8a:fa:5f:e3:e1:b6:05:d8:
d4:b5:a0:d0:92:a2:31:73:d1:c3:5f:0b:68:3a:9c:39:b3:19:
5a:59:0b:ac:1b:e6:ba:5d:ac:f3:4b:82:c3:a1:eb:62:e1:ea:
bb:32:23:7c:a9:63:34:7e:7e:df:8b:c6:24:f8:b3:ab:7c:31:
61:c8:57:f2:c8:d2:2f:dd:f5:cd:57:da:04:d0:55:62:83:80:
b7:09:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org