Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RUTII94xuzeaTxYWRBjYML-u1dQ.roa
File: RUTII94xuzeaTxYWRBjYML-u1dQ.roa (raw, json)
Hash identifier: 3qcvIontTXiqilyjXpik7m4WCNvw2wxBhTVy6ngzbPs=
Subject key identifier: 45:44:C8:23:DE:31:BB:37:9A:4F:16:16:44:18:D8:30:BF:AE:D5:D4
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185C05033259979BEDA615480C5D6A9B107
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RUTII94xuzeaTxYWRBjYML-u1dQ.roa
Signing time: Tue 17 Jan 2023 15:19:19 +0000
ROA not before: Tue 17 Jan 2023 15:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.228.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:50:33:25:99:79:be:da:61:54:80:c5:d6:a9:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 17 15:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4544c823de31bb379a4f16164418d830bfaed5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:f3:de:79:aa:20:a8:62:73:6d:50:ea:a9:
f3:73:3c:87:03:02:11:74:05:84:38:e7:fb:72:40:
d4:4f:3a:34:fc:31:78:a9:bf:95:12:c7:02:70:7a:
5d:d4:24:1b:bc:8f:a9:0a:39:82:ac:33:75:20:43:
7e:42:fb:9d:4b:a6:3e:74:13:89:4e:2f:50:9b:96:
42:37:9d:c6:2a:a6:8a:11:84:4a:8e:22:f6:a3:2d:
25:30:c6:7d:d0:ae:61:f9:26:d7:11:d4:c9:09:2f:
df:21:c3:09:41:42:72:39:e6:f3:51:32:f3:e1:b0:
26:d1:ff:92:48:d8:8d:6b:32:29:9e:5a:79:fa:24:
13:76:2c:db:66:5c:05:3e:34:29:5e:a9:7e:83:ed:
e6:e6:8e:7c:4d:88:85:0d:e7:b9:d2:7d:18:18:f7:
ed:54:0e:2e:8a:fb:ac:2d:bc:2e:24:01:13:5e:a3:
02:dd:bf:e8:4c:21:4c:66:5e:19:43:4e:0a:29:3f:
a3:a2:98:29:bb:55:c0:2d:b7:1d:a5:f0:43:25:62:
b9:d6:4d:65:c6:af:57:4f:b1:22:b0:df:c5:73:02:
75:c5:77:f5:ab:30:b2:9d:09:09:cf:05:d3:6f:05:
ff:92:c2:e1:e1:91:42:f3:8c:0d:81:6d:77:dd:7f:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:C8:23:DE:31:BB:37:9A:4F:16:16:44:18:D8:30:BF:AE:D5:D4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RUTII94xuzeaTxYWRBjYML-u1dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.106.0/24
5.105.118.0/24
5.105.169.0/24
5.105.185.0/24
5.105.228.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fc:ba:a9:fd:3a:67:4f:31:5d:01:e6:a6:3e:da:10:28:f5:
83:04:75:97:22:e9:bb:3d:39:3b:00:b7:0e:84:88:0a:3b:0e:
e3:31:fc:9b:f7:99:1f:de:48:b9:dc:0d:7b:8e:3a:ff:a0:09:
e1:73:ee:6c:89:44:92:87:59:e1:27:c2:58:41:b9:01:c2:23:
70:9e:fd:06:fe:04:95:cd:7d:65:21:ce:7c:87:76:b5:35:a3:
a7:11:5f:9b:36:b1:7b:c5:68:f6:0a:a0:07:29:55:ad:d1:56:
54:52:0e:5f:75:c7:42:a9:9d:b0:5b:94:d2:9a:ea:6f:49:4c:
d3:c2:5c:59:66:e9:ba:37:27:ca:7b:98:29:10:d4:46:2b:9b:
5c:e3:9b:03:95:3a:21:f6:da:24:11:61:9b:f2:c8:39:26:b9:
c5:f9:67:96:95:a3:71:cb:d1:7f:0b:3f:54:8d:e0:81:89:ee:
03:22:88:1d:00:24:af:fd:34:21:7e:8c:dc:05:e8:42:5d:14:
cc:3d:98:61:44:1c:e7:e0:6a:a9:ee:37:30:51:00:5c:eb:5b:
1f:ee:7f:b9:48:42:3a:5a:f2:a5:44:6f:f4:ec:3d:fb:f0:99:
0a:4b:6f:ba:2b:74:2e:be:31:75:38:a2:02:65:0f:1c:36:78:
cd:40:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org