Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLY6t1HwQ1y_rv6jcHYuRnomzSM.roa
File: QLY6t1HwQ1y_rv6jcHYuRnomzSM.roa (raw, json)
Hash identifier: 6mE3h75ZSy6ESWRk32D4NI8XS51omR8P/NGNqXqNr38=
Subject key identifier: 40:B6:3A:B7:51:F0:43:5C:BF:AE:FE:A3:70:76:2E:46:7A:26:CD:23
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B0D79CF77A719C01F03707463AA21989
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLY6t1HwQ1y_rv6jcHYuRnomzSM.roa
Signing time: Tue 01 Aug 2023 11:24:27 +0000
ROA not before: Tue 01 Aug 2023 11:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 5.105.159.0/24 maxlen: 24
5.105.167.0/24 maxlen: 24
5.105.171.0/24 maxlen: 24
5.105.173.0/24 maxlen: 24
5.105.213.0/24 maxlen: 24
5.105.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:d7:9c:f7:7a:71:9c:01:f0:37:07:46:3a:a2:19:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 1 11:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40b63ab751f0435cbfaefea370762e467a26cd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:70:2c:1f:ce:c5:8e:bd:7d:68:fc:39:ee:
d5:73:d5:43:68:b9:a3:61:f4:6c:a8:93:17:5b:90:
2c:46:a3:4b:6f:7e:71:aa:da:15:87:96:ea:ec:3e:
71:c0:ec:a4:b0:95:bd:82:c9:26:af:9a:5d:e3:c3:
60:91:ed:c1:ba:79:55:79:3e:1b:19:b4:da:8f:d1:
66:04:41:91:ff:78:ab:c8:ba:ec:9b:ff:bf:c7:87:
dc:2f:e0:a9:2b:f4:7e:e4:73:9e:21:41:d2:ae:b6:
a7:81:4d:49:6b:b0:3f:a0:bd:4d:3c:ad:00:67:a8:
e2:4b:d8:98:45:52:40:49:85:29:05:93:6e:01:98:
4e:68:0d:29:30:33:b6:74:6d:bc:29:1c:13:44:75:
6d:cc:15:3f:24:90:2f:1d:51:3f:95:a6:83:59:5d:
9b:ff:6c:b4:d8:b6:81:75:28:4f:c1:57:40:2d:30:
64:75:8c:02:99:a0:a4:d6:de:c9:6f:d0:5f:53:ce:
d5:95:66:0f:4e:5a:2b:51:ec:86:2e:04:16:10:85:
56:8d:1f:67:3c:2e:6b:bd:11:57:01:b9:69:66:1e:
39:9e:e5:37:bc:2c:70:29:cc:ae:14:cf:78:11:e8:
8f:0d:8c:bb:0b:0a:df:cd:fe:af:fc:00:19:60:fb:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B6:3A:B7:51:F0:43:5C:BF:AE:FE:A3:70:76:2E:46:7A:26:CD:23
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLY6t1HwQ1y_rv6jcHYuRnomzSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.159.0/24
5.105.167.0/24
5.105.171.0/24
5.105.173.0/24
5.105.213.0/24
5.105.217.0/24
Signature Algorithm: sha256WithRSAEncryption
15:33:93:43:b4:f5:4a:13:19:49:c7:9e:2f:13:09:63:26:42:
ef:ce:29:95:b1:f4:f1:3f:cc:21:f8:d5:03:6c:65:e6:f7:df:
27:e3:10:f4:2c:b8:3c:fe:0e:e1:8c:f3:21:e1:51:91:0a:46:
47:9c:02:65:65:2a:be:12:b8:98:90:88:dc:37:87:a6:51:1a:
c4:50:47:8b:57:9a:e4:5f:f5:13:e5:67:e4:73:a4:a4:cd:c5:
0e:2b:3e:68:e7:36:65:e7:27:5c:22:d4:b5:07:5b:3e:ee:7d:
37:38:bd:22:18:6b:b5:0f:96:ce:e2:fd:59:70:f8:71:1b:3a:
c8:c3:a7:c0:41:b6:e7:aa:63:b9:0c:5d:3b:d2:b1:b8:2e:ce:
13:81:4e:c1:4a:5b:a8:70:17:fb:81:51:bf:fa:6d:a0:47:e5:
24:62:44:fa:25:c4:1b:03:5d:42:6c:99:fb:f8:ec:28:43:be:
54:42:c0:99:fa:6a:bd:bf:3e:5a:f5:39:20:ab:b5:46:bc:e5:
92:9c:ee:0d:15:e9:e8:b5:d1:b7:48:09:65:4d:80:a3:1b:81:
3c:81:ff:1a:13:39:3b:e0:92:c9:42:1d:10:fc:6c:85:69:e9:
ef:7b:ff:30:e9:dd:2d:34:a3:73:88:49:69:48:f2:d2:fc:39:
a9:1f:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 21:11:58 2023 by rpki-client on console-ams.rpki-client.org