Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLKMj1mUkEcr0cMQLYC9Awxs35E.roa
File: QLKMj1mUkEcr0cMQLYC9Awxs35E.roa (raw, json)
Hash identifier: c2axGl6JVajvR1TKotdK4bxBkuUPD+J1Q9DfTc95mFM=
Subject key identifier: 40:B2:8C:8F:59:94:90:47:2B:D1:C3:10:2D:80:BD:03:0C:6C:DF:91
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B71D4224454F0C7705C9A566AF20
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLKMj1mUkEcr0cMQLYC9Awxs35E.roa
Signing time: Sun 01 Jan 2023 05:54:54 +0000
ROA not before: Sun 01 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 5.105.101.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b7:1d:42:24:45:4f:0c:77:05:c9:a5:66:af:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40b28c8f599490472bd1c3102d80bd030c6cdf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:15:0d:9c:fc:02:f6:61:d8:cb:a5:a3:b3:
d9:77:98:69:3e:aa:2e:d0:da:83:3a:26:f6:59:ec:
85:32:8e:e8:80:8e:9b:1e:29:2b:56:4b:eb:a7:44:
ee:3c:9d:2c:49:14:e1:55:3e:fe:27:02:6e:ae:57:
e8:ed:65:73:e1:e0:37:98:7e:13:77:7e:dd:fe:91:
0d:b2:e3:53:3a:3e:84:a3:a1:55:f2:b9:13:ef:03:
c3:e0:72:62:a2:fe:93:e0:56:2b:49:56:8c:38:70:
fd:e5:1c:4b:c4:ba:c1:f1:ab:b0:07:d7:27:cd:dd:
b7:6a:d8:8b:6a:75:7c:72:ec:f4:2a:36:9b:74:57:
54:23:9f:00:7b:e8:79:ba:4b:01:df:d8:7a:75:fb:
e8:1c:6b:02:fe:2c:7b:bf:93:2d:18:41:6f:7c:15:
f4:48:12:03:d4:5b:c0:33:c6:6b:67:d1:d3:ae:00:
93:f2:3e:31:80:3e:ae:55:17:c8:51:c4:42:b2:af:
78:16:40:f0:c7:9c:5a:78:3a:e1:38:d8:1f:d2:86:
94:c4:a2:cf:8f:ab:cb:51:03:27:6e:43:63:4d:4a:
99:6b:9e:ea:2f:1d:af:f7:ad:c3:1a:f5:1f:94:3e:
7e:8e:4e:5f:eb:8c:0a:9d:33:9d:98:9c:2f:51:f4:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:8C:8F:59:94:90:47:2B:D1:C3:10:2D:80:BD:03:0C:6C:DF:91
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLKMj1mUkEcr0cMQLYC9Awxs35E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.101.0/24
5.105.107.0/24
5.105.110.0/23
5.105.220.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:88:11:ae:1f:74:91:3f:78:a4:8e:1a:f0:9d:c2:93:98:06:
b2:42:5b:2e:35:5b:a2:aa:7e:5d:a4:f3:b0:69:e6:7f:dc:5d:
63:80:dd:84:8f:48:ce:b6:75:48:15:99:ff:69:ba:49:7d:5b:
0a:39:8b:9a:bf:74:c4:e7:97:3a:eb:2d:56:70:42:74:88:f3:
6d:bc:ca:4a:93:4d:2e:e9:87:fe:f1:1c:cb:33:b3:28:24:24:
58:95:39:7f:1a:e7:14:47:f4:05:20:d4:81:f5:30:52:30:18:
5a:ae:3c:cd:33:48:f6:41:8d:07:06:81:e3:cb:b6:18:4a:af:
26:e7:d4:4d:be:0d:f7:92:35:a9:ff:43:4b:d1:05:39:c2:aa:
e8:b4:5c:0f:ad:23:c1:79:8f:75:5e:6b:e5:a6:eb:06:1b:64:
b0:1f:16:52:9f:3b:17:d6:3f:6c:19:f1:a8:da:1c:4e:d9:af:
05:27:bf:f1:cf:42:9e:08:ac:a3:41:88:d8:63:3a:cb:92:24:
48:af:c5:8e:80:26:7e:26:5f:c3:ea:ca:fc:cc:50:27:34:29:
cb:61:22:0b:a9:4a:e6:fc:f9:37:b3:51:66:a5:45:89:9c:b5:
b7:73:c5:7a:c5:1c:22:83:cc:3f:e8:a5:a0:1b:45:fb:1b:55:
b2:b1:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org