Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/X6qipkGiWQ_3QRUspICAQleekOE.roa
File: X6qipkGiWQ_3QRUspICAQleekOE.roa (raw, json)
Hash identifier: k5A1VWzx0Q8jRTg9sj1rXoW6Gl4ORwGmdpCBCvtMyv0=
Subject key identifier: 5F:AA:A2:A6:41:A2:59:0F:F7:41:15:2C:A4:80:80:42:57:9E:90:E1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A4ABA6750FEE9B848AC19F03D3ADE2F93
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/X6qipkGiWQ_3QRUspICAQleekOE.roa
Signing time: Thu 31 Aug 2023 08:34:04 +0000
ROA not before: Thu 31 Aug 2023 08:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 5.105.128.0/24 maxlen: 24
5.105.248.0/23 maxlen: 24
217.67.78.0/23 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:ba:67:50:fe:e9:b8:48:ac:19:f0:3d:3a:de:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 31 08:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5faaa2a641a2590ff741152ca4808042579e90e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:96:a9:be:1b:7d:85:a8:36:98:8a:09:d9:
eb:2e:14:e1:2a:0f:8a:f3:58:93:8a:77:59:b9:3b:
8d:1a:f1:6b:e3:24:42:40:9d:99:e3:74:79:32:ef:
56:4f:ff:76:78:a1:4f:0b:32:e8:7e:15:1d:a0:cc:
c4:98:d7:7c:50:e9:b7:f3:e2:7c:0e:6d:ea:f4:53:
3b:a1:8b:b4:7f:0e:52:80:95:67:c3:9d:c9:5d:94:
63:54:6d:ce:ad:d2:b1:08:40:0d:2e:d8:13:ce:e8:
2b:80:e2:e9:4f:38:4f:ec:d5:49:d0:05:8f:70:53:
00:dd:85:6a:27:d3:d5:4b:61:47:65:9b:7a:d5:4f:
68:be:2b:72:05:d3:2a:d8:1c:96:0c:72:eb:0d:f7:
41:fc:c8:d7:39:66:d2:08:c1:64:12:40:df:d0:af:
d2:39:3e:12:24:4f:ee:8f:cc:87:34:71:ae:ce:04:
30:18:d8:84:00:df:d4:b5:56:f4:bc:a7:2b:c1:22:
71:fa:7b:7e:80:55:f5:b6:32:dd:dc:fa:1d:e0:8b:
1c:e0:7a:2f:ce:0e:cc:d3:1f:a8:a4:80:0b:c2:43:
05:01:44:ff:41:de:21:4a:dd:89:98:bd:de:f0:37:
5f:e2:98:6c:43:c2:b4:53:14:12:15:af:60:00:c0:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:A2:A6:41:A2:59:0F:F7:41:15:2C:A4:80:80:42:57:9E:90:E1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/X6qipkGiWQ_3QRUspICAQleekOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.110.0/24
5.105.128.0/24
5.105.178.0/24
5.105.180.0-5.105.182.255
5.105.206.0/24
5.105.248.0/23
217.67.78.0/23
Signature Algorithm: sha256WithRSAEncryption
37:9f:27:87:9a:57:c6:5f:62:47:df:d6:b7:ef:2f:78:5a:29:
9d:73:d5:11:15:59:36:61:3e:2e:42:ec:89:d4:f8:ff:75:41:
88:0d:03:48:22:74:a2:60:9b:40:0f:22:78:ef:9d:5f:61:20:
15:52:d1:ea:7b:dd:9b:1b:38:b6:7d:39:e3:65:cd:b4:96:93:
37:e5:e9:7b:27:11:9f:3f:4c:53:15:26:f2:ae:fd:ea:a8:cb:
4d:67:4b:40:f1:32:cb:1b:f5:81:52:c7:ab:67:e8:39:a1:f4:
b0:b5:be:fa:87:49:6c:1a:24:17:8d:f7:39:5a:db:11:cf:1c:
48:48:15:29:1f:69:12:35:34:5a:18:d7:86:0c:f6:f9:14:db:
08:68:c9:5e:6a:00:85:97:35:a1:3d:6c:5b:99:4c:33:61:60:
1a:11:07:bf:63:fa:3a:46:fa:38:98:ba:c1:46:8d:21:9d:4f:
43:70:37:6f:a1:1f:89:7c:ab:89:aa:94:bc:29:c2:9e:25:8d:
28:d4:28:6b:d0:96:7c:12:7a:68:49:4d:85:4a:dd:68:cf:30:
35:36:1f:c4:da:74:e0:9a:f6:50:14:81:7e:c0:ab:fa:61:10:
08:0a:ea:ca:22:44:fe:07:63:33:ca:14:bf:ec:69:6f:77:08:
b8:27:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 20:34:40 2023 by rpki-client on console-fra.rpki-client.org