Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WbeqfKTbKcf06fwScMRqQb04pW0.roa
File: WbeqfKTbKcf06fwScMRqQb04pW0.roa (raw, json)
Hash identifier: yjHKkkYK0mCfwdp9Gzz8I7yj2xxz3MdKfURRfpFcPAs=
Subject key identifier: 59:B7:AA:7C:A4:DB:29:C7:F4:E9:FC:12:70:C4:6A:41:BD:38:A5:6D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188A67BCFFE461FED6976B031D2F14A7F07
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WbeqfKTbKcf06fwScMRqQb04pW0.roa
Signing time: Sat 10 Jun 2023 18:05:12 +0000
ROA not before: Sat 10 Jun 2023 18:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60458
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a6:7b:cf:fe:46:1f:ed:69:76:b0:31:d2:f1:4a:7f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 10 18:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59b7aa7ca4db29c7f4e9fc1270c46a41bd38a56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:48:c2:00:ba:a7:a0:e7:23:ac:60:34:99:
f0:38:35:c1:a4:88:d4:0b:d4:4d:e0:91:8d:55:0b:
2b:e1:ad:86:9d:20:c2:ec:22:3b:5e:26:a5:60:c8:
c9:b8:b6:a6:4c:52:18:0f:b8:b9:ce:ea:9a:b6:88:
40:38:09:d9:e7:25:82:9e:e3:41:5a:30:cc:a1:0d:
3b:95:f8:15:b6:40:75:86:ea:e0:74:96:cf:48:59:
5a:be:1a:f5:24:24:49:49:2f:19:99:58:77:c5:6e:
89:e5:a4:43:bb:54:90:cb:a5:2f:1d:a9:d3:7f:4b:
08:23:52:37:fb:d2:18:61:4a:1e:d7:d8:38:59:b3:
35:2c:e3:a6:a4:34:6f:41:b6:fa:a2:2b:9e:15:7e:
c2:6d:94:d9:97:35:0d:c7:8a:43:d3:8d:96:ca:6e:
76:c3:5a:b9:a5:a2:02:22:31:f6:3b:0d:d0:7d:60:
f9:de:27:20:04:00:01:db:0f:02:a3:a3:5f:5f:b1:
3a:80:15:76:55:a2:0e:0f:23:a0:a7:b2:15:fc:39:
6d:eb:7f:6f:e7:53:2d:a2:cd:ee:b3:94:0c:89:4b:
a5:7d:58:1f:75:4e:33:00:e6:79:08:ae:48:48:25:
2e:e2:35:e3:98:1a:cd:44:d7:8c:fd:29:42:c5:58:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B7:AA:7C:A4:DB:29:C7:F4:E9:FC:12:70:C4:6A:41:BD:38:A5:6D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WbeqfKTbKcf06fwScMRqQb04pW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.130.0/24
5.105.136.0/24
5.105.195.0/24
5.105.204.0/24
Signature Algorithm: sha256WithRSAEncryption
93:37:7f:bb:f4:b5:8a:c3:c0:8a:90:87:a4:b4:bd:db:4b:52:
63:e8:33:34:97:a5:40:7f:64:f4:71:22:b4:6e:aa:d4:12:fe:
e5:bb:dd:22:fe:92:d5:d4:07:bf:93:2e:13:89:63:49:be:bc:
cb:52:10:fe:a7:d7:f5:3f:d5:92:74:4b:80:77:68:ce:c3:c7:
8c:13:29:e9:5f:53:6a:38:18:3b:d1:ac:07:bc:12:9d:e6:1f:
8c:7b:4b:6b:d5:b8:c5:d4:d4:2c:94:cd:d6:ad:e2:3f:e8:bc:
4b:0e:32:91:91:46:a9:0f:41:42:d1:a9:a8:c7:80:79:a7:ea:
be:b5:02:58:ce:54:4b:ab:03:5f:7b:dc:b6:ca:a9:b6:a5:4e:
ae:b1:f7:11:92:d1:86:af:fe:22:dd:fb:6d:1a:62:e1:39:e3:
e5:54:d4:bb:f7:d5:e4:a8:5b:bc:fc:2a:ed:81:68:5a:b3:64:
4b:46:96:6e:25:08:63:10:a3:81:04:0f:6a:ea:c6:41:f9:4a:
59:de:eb:05:df:f5:4a:e5:d0:5c:fb:f5:ee:67:0c:a3:3d:ac:
c7:5b:78:41:2f:d9:19:06:2d:31:c5:9e:3b:08:3b:e0:66:a8:
1d:49:6a:59:8a:7b:3d:06:a5:e3:6c:7c:9d:0d:76:12:4f:43:
43:54:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 09:06:59 2023 by rpki-client on console-fra.rpki-client.org