Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XAF7qeSu0_ISQeoVv7Q1y01WQlA.roa
File: XAF7qeSu0_ISQeoVv7Q1y01WQlA.roa (raw, json)
Hash identifier: +rX/J5+34+gyoV0RiB83sTPD9Ugd1MUOxnwPRrXMbZk=
Subject key identifier: 5C:01:7B:A9:E4:AE:D3:F2:12:41:EA:15:BF:B4:35:CB:4D:56:42:50
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B558BD6AD3D129914AA5C4EE9688CBB5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XAF7qeSu0_ISQeoVv7Q1y01WQlA.roa
Signing time: Wed 02 Aug 2023 08:23:58 +0000
ROA not before: Wed 02 Aug 2023 08:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 5.105.138.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.205.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:58:bd:6a:d3:d1:29:91:4a:a5:c4:ee:96:88:cb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 2 08:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c017ba9e4aed3f21241ea15bfb435cb4d564250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:11:76:78:03:be:2a:1c:ef:46:b5:d5:7b:
97:54:07:e0:03:94:c3:04:4c:4c:fa:35:96:19:c8:
1f:44:08:6f:81:d0:81:57:3c:13:cf:df:03:95:04:
87:da:e9:af:c7:42:36:6d:22:4c:2b:f7:86:7b:78:
4f:50:61:33:be:ed:6c:bb:5f:df:22:53:c0:80:2b:
e1:b2:3f:35:7b:2a:44:aa:45:76:ed:b2:f0:aa:1c:
9b:fd:be:e5:c4:0a:f3:cd:8b:dc:e2:b0:a6:b8:77:
41:a5:0f:7e:c9:bd:0a:d7:ac:c1:b5:fd:bb:da:2d:
81:3c:b8:a4:82:6b:94:96:e1:34:fa:79:48:53:4a:
77:d4:8a:e8:87:40:86:b0:77:2d:99:f9:72:03:e3:
6f:ab:2e:6c:e2:fb:ff:40:0a:23:ea:79:49:34:29:
65:c1:60:e4:25:86:ac:d1:84:5d:eb:c3:af:d3:e4:
b6:3b:a4:e1:f5:b5:3d:a3:ee:15:99:7b:5b:d0:22:
a5:5e:d7:01:b0:aa:53:e9:48:06:a2:82:cd:fa:68:
63:1f:2a:75:b6:2a:38:69:2a:d0:14:d6:5f:20:8b:
ad:62:8b:ee:8c:77:6f:13:fc:27:b7:53:9e:c0:f6:
67:ab:9d:54:23:b6:74:13:42:5d:2d:b2:99:08:f9:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:7B:A9:E4:AE:D3:F2:12:41:EA:15:BF:B4:35:CB:4D:56:42:50
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XAF7qeSu0_ISQeoVv7Q1y01WQlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.107.0/24
5.105.138.0/24
5.105.186.0/23
5.105.202.0/24
5.105.205.0/24
Signature Algorithm: sha256WithRSAEncryption
61:01:ac:e2:49:e4:d3:1b:a0:3b:19:c5:ff:fe:26:8a:54:c5:
cc:7d:42:f8:d0:8d:97:73:08:9c:56:5a:b7:be:11:16:56:6e:
e1:b0:1c:7c:fd:83:11:14:12:c9:9e:c9:28:52:c4:20:d0:f4:
7f:c3:fc:37:18:06:7f:1e:ce:5f:32:90:bb:63:9d:a6:cc:2f:
69:d4:d3:8d:b6:b6:a4:48:be:76:b2:ac:02:53:f8:f5:8a:00:
92:e4:63:4d:31:5e:f7:8a:d0:ed:00:5b:f8:c3:b3:98:d3:30:
56:24:d8:b6:10:49:9d:3b:93:51:03:13:26:ba:7d:13:69:f3:
70:d9:b1:2d:a4:56:9c:7a:3d:8c:0c:f5:f3:92:76:17:96:15:
18:f2:5e:9d:0f:26:3e:82:7d:98:13:2f:7c:30:78:39:4b:7f:
12:dd:05:fa:04:3e:4b:5b:3f:64:8c:29:21:ac:1e:3e:ed:2e:
04:74:e4:15:24:b1:1c:8e:6c:63:a4:23:c8:be:c0:86:12:63:
54:94:a4:60:57:fa:4b:88:43:ec:9c:8f:87:27:c5:9e:59:10:
52:97:6d:79:09:e5:64:4a:67:81:f9:e4:30:31:8e:16:ef:3b:
dc:bd:df:24:fc:90:49:92:06:be:8e:4a:49:19:af:d1:be:48:
23:85:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 20:26:43 2023 by rpki-client on console-ams.rpki-client.org