Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V6d_LXUSv4hcqfsSpjYf_AIQjDI.roa
File: V6d_LXUSv4hcqfsSpjYf_AIQjDI.roa (raw, json)
Hash identifier: bSxK2/6M2jlwYYF0reqBGo45YOqDdTXrf01V+SB6K/Q=
Subject key identifier: 57:A7:7F:2D:75:12:BF:88:5C:A9:FB:12:A6:36:1F:FC:02:10:8C:32
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01869C564800655468071415DF24D960EA6F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V6d_LXUSv4hcqfsSpjYf_AIQjDI.roa
Signing time: Wed 01 Mar 2023 08:42:25 +0000
ROA not before: Wed 01 Mar 2023 08:42:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:56:48:00:65:54:68:07:14:15:df:24:d9:60:ea:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 1 08:42:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a77f2d7512bf885ca9fb12a6361ffc02108c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:89:be:71:52:38:48:38:f5:7a:a2:0b:cd:
ba:e9:3c:c8:f1:be:ac:d5:4e:b9:2b:2e:9a:d6:0c:
14:82:c6:1a:d8:87:18:74:37:76:50:3f:ee:04:46:
c3:53:38:c9:82:f2:fc:e1:fc:a7:0c:a8:1a:32:9a:
15:e4:ff:80:d2:91:c1:4d:99:62:1e:8b:e3:2c:d1:
a7:8c:72:1e:c7:45:9a:b8:db:75:32:af:f7:a4:d7:
0f:1a:d4:c1:f1:de:8b:e0:05:4c:e5:28:95:c1:fb:
52:3a:d9:c1:1b:67:36:75:3c:91:8d:8c:70:58:22:
f1:28:38:3d:71:1e:4c:e0:28:1a:89:52:69:f2:a7:
cb:32:25:37:29:da:1b:56:37:a7:b8:56:bc:6c:c5:
17:63:a1:92:c6:8e:a3:df:f0:52:b8:1c:67:12:4e:
e2:82:03:39:08:dc:fc:63:89:96:68:41:6f:7c:a5:
ac:5a:6a:f7:1a:51:f8:70:d4:7f:b3:ec:a3:09:63:
22:64:0d:42:5d:ed:01:c9:b4:3b:77:82:cf:19:a5:
e0:d1:7a:59:d1:56:af:1a:31:93:05:03:2e:86:a5:
07:8a:21:cd:a5:bc:a0:c7:17:2d:45:62:10:5a:3b:
b5:87:1a:c0:45:ce:39:66:11:48:4b:bc:7c:c6:83:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A7:7F:2D:75:12:BF:88:5C:A9:FB:12:A6:36:1F:FC:02:10:8C:32
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V6d_LXUSv4hcqfsSpjYf_AIQjDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.84.0/24
5.105.94.0/24
5.105.98.0/24
5.105.102.0/24
5.105.105.0/24
5.105.158.0/24
5.105.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:fb:24:0c:fe:31:dd:ba:f7:49:da:16:1c:fd:d1:58:d4:ed:
2f:e8:eb:d1:2b:7c:46:65:ba:d2:4b:a2:a0:1e:40:cf:25:ea:
3f:09:f0:d7:0c:3a:60:17:c5:20:4d:87:83:6b:d3:90:30:05:
d5:f1:27:26:4b:51:76:22:c7:b6:51:73:df:21:fe:36:f2:6a:
d6:85:c3:66:c1:7e:42:57:85:95:51:d9:cf:b4:03:b1:cc:3d:
70:8b:9c:a1:ae:be:23:b1:b7:c9:b6:b5:c8:c2:c3:ac:29:60:
fe:58:f6:7a:35:2c:c4:01:33:d7:5e:7b:2a:b2:84:51:66:79:
36:09:0e:6e:ef:23:07:f0:86:43:80:dd:b9:68:3c:28:db:4f:
1a:29:5c:59:0e:47:25:12:78:d3:dc:2a:83:b9:cd:12:7b:9c:
04:26:90:de:54:b6:56:16:17:2a:39:a2:3e:98:72:27:e9:f3:
b9:b0:3a:9e:9a:ed:87:66:5c:95:5f:6f:8e:46:24:ba:fb:e9:
0f:a9:14:28:4c:3f:ea:c5:93:95:51:30:f3:47:17:d8:db:88:
6f:43:71:e2:d0:7d:1e:64:ef:d5:1c:5d:40:0e:cb:2c:f6:22:
a4:bb:6d:45:3a:36:72:4a:ac:28:0a:e8:19:e6:0e:1a:12:7e:
13:7f:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org