Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NvRGBmyVr4_gSqjEkEIre8iHAvU.roa
File: NvRGBmyVr4_gSqjEkEIre8iHAvU.roa (raw, json)
Hash identifier: 6ilheL8l83FLpealCQlE4A6wdpeSb78kt/Ji3xyja+U=
Subject key identifier: 36:F4:46:06:6C:95:AF:8F:E0:4A:A8:C4:90:42:2B:7B:C8:87:02:F5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01890889D85808D3713569819B839F8763FC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NvRGBmyVr4_gSqjEkEIre8iHAvU.roa
Signing time: Thu 29 Jun 2023 19:03:18 +0000
ROA not before: Thu 29 Jun 2023 19:03:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:89:d8:58:08:d3:71:35:69:81:9b:83:9f:87:63:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 29 19:03:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36f446066c95af8fe04aa8c490422b7bc88702f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:a6:ee:21:c4:8f:03:5b:82:cd:af:24:a6:
bc:77:f7:cd:4f:38:61:35:9b:70:86:68:6c:2d:2d:
89:50:4e:c5:84:c5:90:97:c6:f5:a3:24:7b:78:6c:
78:3e:6e:b6:3b:70:1b:39:6a:06:f5:b2:21:ca:59:
52:f3:c7:ce:81:15:95:7a:5e:56:0c:17:d3:de:99:
7c:05:17:f5:ac:31:31:b8:3b:d3:1a:bf:02:dd:20:
26:a0:f8:cd:2a:eb:5c:cf:00:4e:e5:c7:6e:31:3b:
78:f0:e2:5b:ef:a3:f8:2c:37:3a:16:a1:7f:11:cd:
69:bb:fa:b6:d2:82:db:9d:c1:6a:f1:e4:74:e2:58:
d8:77:61:6a:a1:8b:33:b2:50:48:77:4e:8f:65:98:
03:b9:04:90:4c:20:43:1b:9e:aa:2c:72:2b:c2:ab:
f5:f0:bc:58:42:63:c3:f8:19:12:f7:9f:dd:e1:d1:
d0:3c:54:29:8a:db:45:0d:af:fb:7a:c2:56:8a:44:
9e:f7:6c:56:bc:85:9f:b8:9d:1a:bb:20:29:6a:f4:
ca:c1:2b:36:63:da:69:ca:59:2f:46:33:50:f1:df:
e3:a9:cb:02:12:5f:86:7c:ba:68:84:5c:31:2a:bc:
8a:18:ed:4b:a9:38:ef:bd:51:66:d4:20:5e:dc:22:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:46:06:6C:95:AF:8F:E0:4A:A8:C4:90:42:2B:7B:C8:87:02:F5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NvRGBmyVr4_gSqjEkEIre8iHAvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.43.0/24
5.105.57.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b8:40:23:40:82:c8:f2:c4:0a:e6:5d:34:a3:5e:2a:a7:1c:
c8:21:12:c2:9b:3f:7c:6d:ec:b3:31:45:08:50:bd:52:9f:40:
17:1e:9d:b5:1f:63:c5:09:76:67:62:33:08:2d:29:d7:d6:51:
95:88:fc:a0:47:97:43:96:fd:b3:c6:d6:9f:64:6a:c4:c6:ee:
b1:a3:e1:78:95:2f:38:ea:0f:82:49:10:71:56:47:62:ae:13:
de:54:0b:a0:29:28:76:ac:d7:35:2d:b1:a9:19:18:8f:ca:df:
f3:f0:c5:cf:c9:cb:2c:89:8e:39:f9:6f:5d:46:e9:21:10:6a:
3c:89:bb:08:59:10:07:9a:c9:1a:09:66:33:3e:92:c1:f8:65:
0d:0a:ee:5a:3c:c0:0b:a3:2d:e8:4e:15:ea:39:2e:7f:cd:14:
9c:36:4c:87:6b:64:6a:c4:b9:4d:58:9e:0e:4e:5a:9d:ad:78:
c7:af:78:42:4a:0f:27:fe:3f:b5:03:f0:1f:59:80:f3:01:22:
bc:7a:2a:bf:d4:ff:a2:7d:8c:47:bc:41:01:ee:7f:80:6a:73:
68:04:0e:98:d6:3f:39:67:bc:f8:38:e0:85:94:80:36:c4:a9:
98:4a:19:02:88:9f:13:a4:3a:c0:7d:9e:14:2d:1b:4f:3c:cc:
16:30:89:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org