Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XJPssEiI7l2yfYiX_H_lXQQ04x0.roa
File: XJPssEiI7l2yfYiX_H_lXQQ04x0.roa (raw, json)
Hash identifier: OaNo2lmllnLlA4ZrFS9fkzpyEzvCr/VGPWh3MEwHQ1Y=
Subject key identifier: 5C:93:EC:B0:48:88:EE:5D:B2:7D:88:97:FC:7F:E5:5D:04:34:E3:1D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01870E716E9E8CB42CB45C47E53C8FAB939F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XJPssEiI7l2yfYiX_H_lXQQ04x0.roa
Signing time: Thu 23 Mar 2023 12:28:47 +0000
ROA not before: Thu 23 Mar 2023 12:28:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.230.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:71:6e:9e:8c:b4:2c:b4:5c:47:e5:3c:8f:ab:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 23 12:28:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c93ecb04888ee5db27d8897fc7fe55d0434e31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:b9:b1:21:2f:da:65:19:34:a9:03:88:af:
59:74:29:8a:30:ba:18:ca:d1:5c:ee:9c:4e:a6:73:
31:ff:7f:34:fe:9b:1b:b9:f7:28:8d:e4:32:d8:ef:
f5:6d:4f:55:41:51:3f:00:d6:1c:7d:3f:12:d3:41:
d6:bf:40:2b:7d:fe:cc:ad:c7:a0:5a:e4:6e:3e:48:
e4:40:36:8e:0a:50:ca:bc:f0:a4:b2:49:5a:10:a3:
50:6a:9d:fe:b6:b9:b2:5b:dc:b5:01:f7:91:a9:d0:
8a:c8:e4:60:f3:f3:72:56:19:28:3f:e0:90:e1:e6:
8b:75:9e:e1:72:58:ce:f4:7f:50:67:ba:1f:13:2f:
49:75:5c:df:a9:c4:26:5a:4e:70:07:2a:82:51:1e:
9c:1a:d0:60:88:49:b9:12:12:fa:39:0e:ef:db:c9:
b6:a4:ed:84:b9:00:32:e4:27:8d:d8:95:3d:bf:4b:
58:7b:8d:c1:4e:6c:91:17:06:c5:d0:4e:11:3b:14:
7a:89:37:2d:0d:34:e2:0d:9d:b1:d1:7c:78:d5:40:
a6:db:9f:2f:14:fa:59:33:75:e3:26:1a:3b:d4:49:
af:8e:47:d9:d9:b6:c2:b2:89:de:ab:17:3c:19:d4:
80:1d:00:61:37:e4:c4:42:9a:d1:05:f4:3c:e8:b5:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:EC:B0:48:88:EE:5D:B2:7D:88:97:FC:7F:E5:5D:04:34:E3:1D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XJPssEiI7l2yfYiX_H_lXQQ04x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.65.0/24
5.105.81.0/24
5.105.96.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
66:34:a4:e7:42:3c:20:fa:0e:e7:7e:95:ac:40:cb:d6:d9:96:
be:e9:95:17:1b:63:2d:a8:8f:a2:48:97:e4:d1:8d:b0:64:73:
81:bd:39:20:21:54:67:47:d7:64:b9:4a:9f:e3:e3:a4:90:c0:
8e:09:1a:61:1e:05:0c:ae:08:33:5a:47:61:fc:87:44:97:c3:
9f:91:45:d6:ad:1b:f4:10:b1:5f:37:57:25:38:38:99:01:9f:
2e:03:dc:7e:93:dc:87:c9:17:fa:db:88:95:cc:a1:d1:28:ce:
8d:83:91:84:55:5a:65:dc:d2:24:65:75:43:10:46:72:3d:58:
90:44:0a:aa:77:36:81:b1:a0:18:2f:6c:50:82:e7:de:33:0e:
a5:77:33:db:27:00:c3:b4:fc:e8:6c:29:59:f2:36:71:44:e5:
26:93:0d:26:95:4d:2c:e9:3b:6d:5b:59:8f:be:42:a2:a3:6a:
60:79:8c:69:86:d4:3f:d2:0e:f5:ea:55:d4:57:2d:15:2f:b9:
43:e3:9c:8c:aa:9e:78:b2:8d:2b:d7:f3:fe:9f:30:59:d1:b6:
f1:dc:38:01:4d:2e:e2:c9:ac:f8:36:64:03:72:0c:63:59:e2:
e4:d1:36:44:0c:9e:fe:74:71:a9:b3:8a:54:83:e1:50:77:ac:
d8:7b:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org