Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WzBAIgp9MkoJeHXe9FIHOQGTKiw.roa
File: WzBAIgp9MkoJeHXe9FIHOQGTKiw.roa (raw, json)
Hash identifier: +PMtlp6/zSZAv9iRzf1/2tDGrUl+4aciNyYSpM9Lzz0=
Subject key identifier: 5B:30:40:22:0A:7D:32:4A:09:78:75:DE:F4:52:07:39:01:93:2A:2C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188D92B77F80B2FC9D11C36612E117D7627
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WzBAIgp9MkoJeHXe9FIHOQGTKiw.roa
Signing time: Tue 20 Jun 2023 14:18:04 +0000
ROA not before: Tue 20 Jun 2023 14:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:2b:77:f8:0b:2f:c9:d1:1c:36:61:2e:11:7d:76:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 20 14:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b3040220a7d324a097875def452073901932a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:0d:d3:1a:3d:9d:26:ac:60:11:82:80:51:
2a:7e:27:77:56:3a:6b:25:46:10:97:da:2d:d8:13:
a8:e8:9a:38:b9:09:91:9a:94:f6:3a:f7:e7:9a:21:
75:d9:06:08:b9:d8:7d:98:cb:7b:a1:3d:ca:aa:1b:
87:c2:93:3a:11:99:04:64:23:49:d9:0c:ea:be:09:
eb:c6:68:ea:84:af:b3:20:ac:b5:e3:18:d6:5a:db:
b1:20:a5:08:79:63:34:54:81:64:df:e6:7f:e4:d2:
c5:9e:71:fb:91:67:40:c0:96:17:bd:af:7d:1f:44:
1f:bc:64:59:e3:f1:77:2b:1f:7c:45:93:eb:57:11:
01:89:d1:e4:c9:01:48:d9:63:9f:14:a0:52:79:b7:
40:86:03:bf:52:39:0e:34:85:54:ab:50:e9:bc:7b:
90:06:31:3c:43:b7:b8:c9:b9:00:77:cc:89:f3:20:
c5:90:b0:0d:e5:80:40:68:e1:6a:d0:c0:2c:03:1b:
b3:95:bd:4b:87:9a:f5:00:6a:56:7d:54:94:29:22:
30:70:fa:d9:59:ca:1f:48:1e:62:22:05:b9:29:65:
b9:98:88:e2:b6:e1:eb:6c:f9:b3:af:73:b5:f1:0f:
ae:67:3c:3d:22:d2:d8:b5:18:63:58:c4:f1:6b:28:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:40:22:0A:7D:32:4A:09:78:75:DE:F4:52:07:39:01:93:2A:2C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WzBAIgp9MkoJeHXe9FIHOQGTKiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2a:c7:98:a4:88:cd:ee:68:47:33:d3:cd:05:52:df:17:a1:
63:42:78:89:07:fd:64:d6:b7:05:58:fe:ba:e3:a5:22:c0:3f:
fd:8c:40:b3:23:59:f2:22:e5:0b:98:70:9e:a5:fb:fc:c6:9e:
f2:be:94:89:21:e6:cd:fa:cb:c9:81:95:35:10:63:5a:c0:b0:
a3:f3:85:02:94:f4:ce:4d:5e:9d:34:d1:27:86:a2:2a:01:9f:
65:7f:a2:fa:ec:65:d7:69:f0:91:6f:f4:83:0c:49:7d:21:d5:
f3:7f:c9:a4:fb:c8:c5:e2:70:f7:ac:ab:7f:68:27:33:b9:ec:
f2:8d:47:f1:73:ea:43:da:31:15:39:7c:e2:eb:0f:cb:2d:b3:
23:ae:bf:e6:54:a3:79:28:04:b3:2c:0c:f1:ff:25:df:b1:cb:
14:d1:2e:5b:3d:a9:ea:b9:2a:81:29:31:1d:32:83:40:19:fc:
2e:7f:3a:3d:6a:72:93:1b:cd:ef:df:5b:7b:15:d4:d0:37:c9:
1c:a9:3d:88:cd:0f:59:89:57:e3:4b:3c:b9:db:8b:c0:94:e7:
b4:69:79:46:fc:1f:d3:97:f6:00:ea:28:5b:26:e8:57:d4:e5:
e0:91:55:10:2a:3b:3f:df:41:a3:50:68:9c:8a:ec:78:81:1c:
37:e2:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org