Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xnm9rq8OqMGqKLtkyDBdNxg7Cb8.roa
File: Xnm9rq8OqMGqKLtkyDBdNxg7Cb8.roa (raw, json)
Hash identifier: 4JDoNKL5x+nc61Sk684vmYXl3eVJqUR18B5TizUsxLk=
Subject key identifier: 5E:79:BD:AE:AF:0E:A8:C1:AA:28:BB:64:C8:30:5D:37:18:3B:09:BF
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A9081F394FA04F57BD7A297FAB3DD7EFE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xnm9rq8OqMGqKLtkyDBdNxg7Cb8.roa
Signing time: Wed 13 Sep 2023 21:45:50 +0000
ROA not before: Wed 13 Sep 2023 21:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
5.105.248.0/23 maxlen: 24
217.67.78.0/23 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:81:f3:94:fa:04:f5:7b:d7:a2:97:fa:b3:dd:7e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 13 21:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e79bdaeaf0ea8c1aa28bb64c8305d37183b09bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f6:c2:87:97:7a:c4:46:7c:ee:b1:11:a5:c8:
35:44:d9:2a:0c:ab:cf:69:36:b0:63:08:d5:68:24:
61:3b:af:64:61:1e:21:3d:a2:f7:a3:16:da:29:03:
a4:f3:72:c0:eb:cf:2e:09:48:04:26:a8:67:be:f3:
7a:1c:39:12:12:45:16:9d:b5:08:97:ee:b2:4a:2f:
10:79:c3:b0:4d:cf:dd:7e:b6:11:bf:76:3f:c3:31:
9b:94:fb:99:8a:43:c2:be:38:ae:50:54:42:87:9e:
44:24:21:e5:17:0b:cf:d1:08:81:25:e3:b1:48:ef:
23:f1:b9:4c:d0:d5:76:d7:95:7b:d3:5c:87:c2:2d:
18:23:2b:59:5d:0c:00:8b:0c:cc:fd:a4:53:e0:ab:
28:74:70:e9:52:45:4a:7a:83:40:ef:5b:68:2b:49:
5d:32:20:f7:f6:f3:00:79:84:7b:c4:d2:3b:a9:19:
8e:f6:5d:2b:49:5d:c8:81:32:27:c4:f3:54:ad:be:
0e:65:c8:a2:1e:ea:94:77:5d:2c:cc:08:fd:1b:6f:
9c:19:37:80:56:db:e0:eb:5e:82:83:8e:80:dc:56:
cd:2e:73:79:e5:9b:a1:c6:ad:e8:5e:b6:d0:11:c8:
2e:40:21:82:ea:3b:9a:c4:aa:33:df:a3:e0:20:d3:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:79:BD:AE:AF:0E:A8:C1:AA:28:BB:64:C8:30:5D:37:18:3B:09:BF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Xnm9rq8OqMGqKLtkyDBdNxg7Cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.22.0/24
5.105.110.0/24
5.105.114.0/23
5.105.128.0/24
5.105.206.0/24
5.105.248.0/23
217.67.78.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:9c:50:01:fc:34:98:a1:9f:21:e0:8a:9e:14:98:bc:f5:05:
25:62:13:7e:d8:86:71:04:5b:a7:51:57:60:93:4b:58:fc:5d:
36:9c:77:f4:1e:57:9e:81:6b:48:4d:29:e7:c7:d6:4b:0c:04:
5f:fb:21:35:a3:f2:f6:44:f9:64:ef:f4:b9:95:62:47:99:3d:
58:a1:cd:7e:10:b2:e6:ac:78:e9:9b:d7:07:05:c3:87:4b:e7:
ad:6c:29:17:9d:96:4d:ab:2c:dd:47:db:fa:20:51:cc:97:0a:
dc:4e:01:d1:c3:3e:9a:92:2f:64:90:51:56:e1:84:48:2f:80:
af:7f:23:6b:41:88:f6:ed:88:4b:d2:a2:b6:fe:3b:e1:3d:ec:
f2:91:58:a1:5a:a0:57:28:fe:30:c3:7c:d5:f6:e8:b6:b9:45:
06:af:84:0d:b5:5e:e2:bb:f8:38:47:cc:a8:a9:9d:6c:a2:c7:
01:9f:50:21:ea:f2:6f:b1:b0:b8:0d:a7:93:e6:cb:82:14:32:
3c:50:1b:6c:24:13:0a:bc:55:df:ae:e5:c4:f7:c4:71:07:e0:
7d:ac:04:6c:d7:9e:6c:23:1e:f5:60:49:c4:b0:0d:f7:c6:7c:
a3:01:78:51:07:3b:d8:65:cd:e4:7f:fc:0e:10:f2:05:f3:ab:
c4:f2:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 11:03:39 2023 by rpki-client on console-fra.rpki-client.org