Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NO4CUDwwDDd2sSxZG9N5gO0Zqi8.roa
File: NO4CUDwwDDd2sSxZG9N5gO0Zqi8.roa (raw, json)
Hash identifier: n4sAA9sjXwWXtQN2ncOYx3GpaarqRx1dvr/1Bsxf7M0=
Subject key identifier: 34:EE:02:50:3C:30:0C:37:76:B1:2C:59:1B:D3:79:80:ED:19:AA:2F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185AA052F76BA4DAE965022ECBD4BCF2AE0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NO4CUDwwDDd2sSxZG9N5gO0Zqi8.roa
Signing time: Fri 13 Jan 2023 07:25:44 +0000
ROA not before: Fri 13 Jan 2023 07:25:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 5.105.126.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:05:2f:76:ba:4d:ae:96:50:22:ec:bd:4b:cf:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 13 07:25:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34ee02503c300c3776b12c591bd37980ed19aa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:84:b2:cc:de:5e:34:0a:d8:8a:2a:ad:07:
a8:b6:92:36:ef:26:8a:be:46:bd:9f:d6:4d:28:8e:
46:eb:f6:95:0a:b1:88:09:24:98:0b:59:e6:a3:b6:
43:77:a4:f2:43:df:b0:96:62:cc:d0:4f:b1:34:5c:
52:64:c9:c8:71:41:35:b8:cd:22:53:64:89:46:b3:
09:73:c0:3f:f2:72:18:89:92:05:35:2a:ab:73:23:
89:19:95:5d:62:66:d9:e2:9d:cd:0f:31:ef:d3:5b:
d8:3a:56:26:8f:56:00:8f:bc:e0:ab:2b:fc:7b:5c:
a5:af:e9:b5:28:d2:b4:6d:03:d5:a9:ed:0c:fc:41:
38:3a:a0:47:15:23:02:19:8e:81:fb:a4:41:88:e9:
5c:ab:f6:68:ec:de:a8:2f:ad:8d:1b:65:8a:59:93:
48:d8:24:6f:60:38:b7:20:5a:95:37:8d:49:7a:82:
bb:b1:96:ea:01:00:1e:47:13:d2:bb:6c:e4:c0:88:
47:99:86:a4:86:ee:f3:ee:5f:18:d1:9d:2d:f7:e4:
2f:1d:58:7b:fa:31:d0:ba:2f:bd:1b:58:ef:02:97:
f4:e8:ee:7e:98:90:8b:a5:e1:a3:81:20:61:c8:95:
89:dd:a7:b4:16:3d:d8:df:61:d3:ba:13:d4:f8:60:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EE:02:50:3C:30:0C:37:76:B1:2C:59:1B:D3:79:80:ED:19:AA:2F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NO4CUDwwDDd2sSxZG9N5gO0Zqi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.72.0/24
5.105.126.0/24
5.105.132.0/24
5.105.141.0/24
5.105.196.0/24
5.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
17:82:ab:35:45:cc:d1:de:81:31:28:b2:e2:60:59:5d:9d:48:
8a:d9:d6:80:1a:33:e5:1c:a5:4a:0e:92:38:06:2a:34:9e:a8:
04:b5:78:6c:47:d6:77:26:08:51:89:17:11:2c:1b:c7:ac:e4:
5c:cb:6a:ae:e2:00:bf:49:cd:3f:0e:7c:27:c9:66:1b:10:eb:
d8:c9:82:bf:50:62:30:45:e2:41:74:f7:a6:8e:55:f7:99:49:
0c:9d:68:74:21:e9:00:06:91:70:4d:70:d4:06:f0:c2:d6:cc:
a1:6c:d4:42:be:0e:04:b3:89:b0:64:48:ee:75:79:67:2e:b2:
b6:0e:e9:cb:07:c7:44:b5:ca:71:ba:1c:96:e9:5c:ad:72:d8:
cb:ed:57:39:5a:77:23:f3:c9:e9:08:c1:4c:e8:9d:b9:6f:c9:
93:21:f7:ac:96:cc:7b:f7:d1:4f:81:43:3b:ec:1a:f5:c0:4f:
59:64:1d:c4:ff:35:91:64:1e:cb:8e:d6:ea:dd:e0:35:ed:99:
9c:53:21:d3:19:96:91:0a:47:d7:e7:64:ac:c3:8e:43:4c:28:
24:a0:2c:02:88:ce:12:38:4c:c3:89:03:f6:b8:fb:bd:de:64:
ca:3c:e8:5e:9a:f0:55:7c:d5:da:c2:66:db:22:bc:0f:41:75:
20:d1:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:56 2024 by rpki-client on console-ams.rpki-client.org