Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Q4_7oai-dBiU2tjKj2xPqYGPD54.roa
File: Q4_7oai-dBiU2tjKj2xPqYGPD54.roa (raw, json)
Hash identifier: HhJNhUvz/nWAY6iCNSZA4iY2OmNRAXnsl1PktyP37F8=
Subject key identifier: 43:8F:FB:A1:A8:BE:74:18:94:DA:D8:CA:8F:6C:4F:A9:81:8F:0F:9E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018682B2B6582BA9CA47D264D45739956CFF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Q4_7oai-dBiU2tjKj2xPqYGPD54.roa
Signing time: Fri 24 Feb 2023 09:13:15 +0000
ROA not before: Fri 24 Feb 2023 09:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.122.0/23 maxlen: 23
5.105.79.0/24 maxlen: 24
5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:b2:b6:58:2b:a9:ca:47:d2:64:d4:57:39:95:6c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 09:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=438ffba1a8be741894dad8ca8f6c4fa9818f0f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a4:0e:19:ae:1d:ee:4f:40:ab:90:e2:51:77:
44:2a:fb:56:24:a3:ca:d7:1a:b4:c3:90:40:58:f0:
31:fa:74:4f:93:93:0e:e2:03:38:98:9f:f1:6e:4c:
95:82:c0:74:c7:4b:d6:53:11:ec:70:98:4e:f7:ea:
54:92:7c:86:ba:1f:96:d8:d2:33:6a:5e:ae:8e:61:
35:b2:5a:7a:e2:a4:7d:75:b5:21:03:3e:25:d3:3e:
2d:74:5f:d6:36:fa:97:f8:89:04:5d:64:2a:20:af:
4b:5f:e4:93:b4:17:e5:06:83:2b:79:c9:c5:0e:65:
90:81:c5:1a:f7:75:1b:4d:c0:3f:da:e6:42:14:45:
01:3b:b5:c1:01:5f:37:fb:69:b3:5c:17:78:68:cd:
c6:ca:a2:35:13:13:1c:ab:02:15:91:fc:7d:e0:5e:
2a:d8:f7:f4:dd:07:0a:6c:f3:d0:fc:dd:14:04:d8:
de:76:6c:54:cc:d5:2b:0e:57:03:a0:9a:4f:cf:64:
82:ed:5c:cd:f1:fa:9a:7b:2b:20:63:0a:04:b3:9e:
13:cd:e9:32:e5:28:f8:43:b7:a5:db:c3:84:51:7d:
a6:96:b6:be:92:21:61:41:12:52:6d:77:90:eb:92:
17:40:1e:d4:6b:f9:5b:72:63:dc:53:9b:4a:e1:5d:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8F:FB:A1:A8:BE:74:18:94:DA:D8:CA:8F:6C:4F:A9:81:8F:0F:9E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Q4_7oai-dBiU2tjKj2xPqYGPD54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.23.0/24
5.105.38.0/23
5.105.79.0/24
5.105.90.0-5.105.93.255
5.105.108.0/24
5.105.122.0/23
5.105.222.0-5.105.225.255
Signature Algorithm: sha256WithRSAEncryption
4b:17:2d:39:01:8c:4b:61:07:ac:db:61:32:0c:93:56:5b:3c:
13:34:7d:1d:fe:0f:b6:10:9d:50:df:f2:86:ec:ae:58:e9:94:
e6:b5:a6:e2:7d:3d:4e:3d:3a:97:fa:32:9c:ad:10:09:f2:85:
4d:53:ca:b4:fa:a2:2f:b1:70:f8:11:c9:37:31:d4:17:17:60:
4f:12:64:ac:7d:15:41:c8:b0:31:0a:4b:db:3f:1d:ed:6b:5e:
02:69:55:5a:4e:4a:aa:fe:a9:f8:c7:78:3e:23:36:1c:6a:c7:
9b:4b:89:67:85:94:77:28:83:25:c9:fc:74:67:f6:ce:e0:5e:
ee:36:d7:43:e2:92:1d:bd:17:9b:04:91:28:a0:35:d4:9f:f0:
51:06:ba:d7:39:45:7f:ff:30:50:a8:f1:4b:85:91:7c:be:ad:
fc:0f:bd:f4:b5:ba:75:24:00:67:fe:0c:87:e8:b8:01:19:96:
1c:27:3c:a7:1e:23:9e:52:a9:5d:0f:b2:1f:07:b3:b5:81:5f:
1a:e7:9f:53:07:97:c9:68:06:45:b7:7c:ee:ef:e2:29:55:22:
07:1e:c0:99:54:8e:00:aa:65:b9:9b:0d:d2:ff:70:f6:be:63:
05:08:18:06:75:f2:93:aa:54:7a:7e:a0:08:7f:24:3d:a6:85:
94:f9:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org