Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xjl5tijSLnLrPlOoiBSBquIHNqY.roa
File: Xjl5tijSLnLrPlOoiBSBquIHNqY.roa (raw, json)
Hash identifier: Q0WjP0Zlr8jkPEudSqwKmuT4yiUaw8oWipMz1OQ4BhY=
Subject key identifier: 5E:39:79:B6:28:D2:2E:72:EB:3E:53:A8:88:14:81:AA:E2:07:36:A6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E69EFEB346A8E8B5E261074484347AF7
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xjl5tijSLnLrPlOoiBSBquIHNqY.roa
Signing time: Thu 04 May 2023 11:56:32 +0000
ROA not before: Thu 04 May 2023 11:56:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:9e:fe:b3:46:a8:e8:b5:e2:61:07:44:84:34:7a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 4 11:56:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e3979b628d22e72eb3e53a8881481aae20736a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:2f:f8:50:2f:39:5d:3a:3d:ca:bd:51:d2:
7f:3f:f1:b9:5c:52:67:76:cf:4d:61:69:59:97:84:
25:d2:0c:f5:38:9a:a3:a0:49:d7:95:c1:79:b3:4d:
c1:fa:e7:38:15:44:3f:41:a6:c5:b5:9f:2b:4d:8d:
e5:16:04:c4:24:99:e9:18:5d:42:dc:ae:7c:bb:5b:
a6:ca:c8:3a:4f:7f:44:d2:04:c1:2e:1c:76:29:1c:
17:37:4d:4e:4e:b9:a5:44:82:b1:b8:eb:69:66:a6:
5e:9c:05:19:14:39:15:de:fc:45:d9:d2:cc:df:cc:
b9:e0:ae:c4:0e:5a:4d:63:04:86:fd:77:e4:40:a0:
11:a9:6c:ef:f0:d6:30:f0:a9:5a:be:fe:19:99:4a:
95:38:7e:cc:68:4b:a8:4a:87:1a:2d:e3:d4:b9:cb:
a0:c3:bc:7c:46:0f:ea:7c:48:be:aa:b5:9b:ea:93:
37:8e:82:76:c6:a0:89:f1:29:e5:f8:07:8b:d2:93:
68:1b:cf:e8:9f:35:4c:d4:78:ef:55:d3:64:86:6c:
fb:82:c5:d4:37:f4:1e:eb:83:9a:2b:95:c7:b1:85:
88:49:8d:3a:23:ca:21:b6:6a:30:2a:d8:93:1e:93:
99:89:23:14:fd:76:3b:e8:0d:d0:d2:7d:9b:f9:fa:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:39:79:B6:28:D2:2E:72:EB:3E:53:A8:88:14:81:AA:E2:07:36:A6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xjl5tijSLnLrPlOoiBSBquIHNqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.34.0/24
5.105.39.0/24
5.105.124.0/24
5.105.127.0/24
5.105.157.0/24
5.105.200.0/24
5.105.207.0/24
5.105.216.0/24
5.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
01:69:28:51:c1:05:30:a4:71:4f:3b:7b:f4:2c:ac:be:a4:6c:
6b:8a:15:55:06:8f:45:65:ed:23:9d:75:dc:54:82:f4:68:89:
46:cc:b4:6e:15:05:e5:55:b4:4f:22:c7:8d:ba:28:85:77:41:
84:5b:a7:2d:c6:51:fd:1c:13:9c:7d:12:b6:8d:b5:04:22:ed:
6e:ec:54:95:b9:fc:f8:0d:68:54:fc:e2:ce:9b:51:4e:f3:ce:
bb:fc:3a:9f:97:ea:75:b1:b4:fe:d0:ef:1b:22:e2:e4:cd:0b:
db:ee:5c:49:b2:85:b9:56:30:f0:95:60:db:7f:c3:7a:cb:23:
b1:72:6b:0d:67:4d:87:cd:af:e7:65:19:b9:9d:49:f9:3a:e1:
a7:07:66:80:a8:ae:6e:76:55:f9:8e:71:86:64:ca:2d:f8:1e:
6f:35:64:89:94:0f:b4:ee:d4:38:0d:07:b4:e5:43:37:f7:d5:
24:c1:80:9f:11:8a:97:af:22:42:66:e2:43:23:72:de:3c:c2:
bb:72:55:7f:94:12:54:81:5f:90:55:c2:29:c2:d3:fc:73:0f:
d6:f5:de:48:07:8b:95:70:57:83:a9:3b:8a:a8:79:e9:70:ab:
99:28:b5:6e:6f:f6:70:9e:18:a0:14:93:6d:8b:74:f3:0f:bf:
e0:7b:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org