Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PzSVt6hNFi2WWYKupPbEVxUiWMk.roa
File: PzSVt6hNFi2WWYKupPbEVxUiWMk.roa (raw, json)
Hash identifier: 3lw+HxGW8cGseppE3FsPIjQZA1lKQyegceixy6vN3aQ=
Subject key identifier: 3F:34:95:B7:A8:4D:16:2D:96:59:82:AE:A4:F6:C4:57:15:22:58:C9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187DB615A3B7BB892E508D241FB3F975B04
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PzSVt6hNFi2WWYKupPbEVxUiWMk.roa
Signing time: Tue 02 May 2023 07:33:23 +0000
ROA not before: Tue 02 May 2023 07:33:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.36.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:61:5a:3b:7b:b8:92:e5:08:d2:41:fb:3f:97:5b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 2 07:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f3495b7a84d162d965982aea4f6c457152258c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:e5:2b:2d:f2:d2:b5:3d:05:c6:b3:1e:02:
b3:ff:47:bd:19:59:81:4f:c0:79:86:a8:31:5c:a2:
b9:23:f8:77:c0:a2:a1:9f:ca:17:db:f3:ce:4b:a7:
0a:bb:25:d2:b8:c3:3a:ab:b4:55:42:46:39:b4:48:
c3:b3:51:4e:d0:e5:17:cb:14:f7:8b:5a:d8:40:5e:
00:ec:49:07:b5:93:a6:a1:88:5c:ea:da:c6:10:51:
5f:a5:48:de:ef:de:f6:b5:de:df:d4:76:4f:34:43:
d3:87:b4:2c:9e:df:91:5b:b3:e8:f7:60:74:87:26:
54:5c:7e:c6:61:ca:04:e9:59:b3:f9:27:9e:44:af:
d1:a5:2f:89:35:5d:f1:c5:4f:9e:71:0c:b2:be:a4:
7d:70:84:0c:d8:8b:33:f7:c5:fe:98:34:fd:b9:aa:
be:f2:77:47:2f:f0:aa:67:76:57:36:bb:a0:89:04:
13:29:8e:cc:dc:ea:ef:61:44:d2:21:02:4b:4e:ef:
fc:56:af:65:5d:27:61:de:1d:b9:b3:17:f9:83:32:
83:60:76:3b:91:7e:b3:d0:b1:94:fa:ee:0f:e7:d2:
70:b8:dc:c0:77:ef:fc:8d:09:d1:1a:72:14:40:83:
72:d2:76:93:21:6d:11:52:c3:24:bc:2d:e0:a1:e1:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:95:B7:A8:4D:16:2D:96:59:82:AE:A4:F6:C4:57:15:22:58:C9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PzSVt6hNFi2WWYKupPbEVxUiWMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.32.0/24
5.105.36.0/23
5.105.76.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e8:f9:5b:1f:ec:0f:7e:e8:bd:bf:9d:fa:fc:1a:22:12:3d:
91:c0:c9:3d:2b:8e:f2:df:de:e7:de:bf:19:a8:54:dc:fb:82:
4e:a6:7a:5e:07:90:54:27:0a:ea:48:d7:bb:06:c1:53:8f:b0:
49:a6:8b:f3:9a:31:a1:47:b4:30:e7:1c:d7:c2:b9:8b:f2:ec:
b0:0e:9d:c8:74:3f:22:78:0c:94:8b:c8:94:cd:34:89:3e:0d:
b1:ab:2d:3c:90:cf:35:10:97:ab:ac:02:85:47:e8:31:04:ea:
90:8e:32:de:55:0f:8f:48:52:88:9b:8c:7a:ff:1b:ae:d5:af:
31:ce:cb:cc:59:ee:55:4a:44:1c:ee:48:d6:56:68:2d:43:44:
f8:a4:ef:9d:e6:3a:db:28:70:8e:1c:f4:9b:72:19:91:6b:47:
f6:99:b4:93:b8:45:6d:4f:50:df:e7:93:5d:cd:b2:2e:77:c2:
fd:2f:80:c4:4b:52:38:a1:1d:8f:75:2f:b0:dd:35:95:d3:44:
59:95:2a:d1:57:69:a6:42:68:f4:66:2d:2c:9d:5f:d9:b7:21:
9e:b7:af:07:73:fd:64:9b:3d:55:dc:a1:b7:7c:16:1e:dc:19:
21:2b:d9:6c:2a:66:78:50:f7:47:b4:96:82:50:ae:90:1a:bb:
37:5a:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org