Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YQLFZoDgiTlKOTyF42sJw53hqwM.roa
File: YQLFZoDgiTlKOTyF42sJw53hqwM.roa (raw, json)
Hash identifier: gVOmOPudIOEMNNGkEDWNETlk9J46izGWQoa5WFhcc1Q=
Subject key identifier: 61:02:C5:66:80:E0:89:39:4A:39:3C:85:E3:6B:09:C3:9D:E1:AB:03
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5AF827D6FEDFFF42EA6BDEA6E5E24
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YQLFZoDgiTlKOTyF42sJw53hqwM.roa
Signing time: Sun 01 Jan 2023 05:54:52 +0000
ROA not before: Sun 01 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54600
IP address blocks: 5.105.145.0/24 maxlen: 24
5.105.144.0/24 maxlen: 24
5.105.146.0/24 maxlen: 24
5.105.147.0/24 maxlen: 24
5.105.179.0/24 maxlen: 24
5.105.189.0/24 maxlen: 24
5.105.193.0/24 maxlen: 24
5.105.201.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.208.0/24 maxlen: 24
5.105.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:af:82:7d:6f:ed:ff:f4:2e:a6:bd:ea:6e:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6102c56680e089394a393c85e36b09c39de1ab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:fc:1c:c3:f6:f1:b7:f5:c0:91:ad:6c:0a:
a8:e5:ef:72:ff:3c:d3:02:95:59:3e:5f:e6:90:6e:
16:09:f7:34:ad:cb:16:f7:2f:c4:86:f9:a4:2d:fd:
4c:56:6f:51:59:e7:93:a8:f7:00:38:76:75:90:01:
66:1b:cd:b0:33:91:ab:5a:37:9e:81:9a:ad:b7:ff:
98:bb:7a:aa:61:c3:e5:98:ef:43:a9:5b:21:66:80:
0d:b5:3e:fd:4f:c9:1d:e6:74:e4:f3:e3:dc:59:09:
e5:37:00:4a:41:e4:5e:53:75:e7:89:07:dd:19:af:
06:76:47:2d:ec:d8:24:55:8d:6c:8c:94:9f:c7:ff:
30:a2:f1:6b:ca:15:17:00:45:97:e7:aa:f2:b4:ab:
89:1d:68:78:71:37:41:7a:fe:a6:87:3e:c4:79:00:
89:e2:01:a5:46:82:71:8c:5d:0b:b2:92:8c:6d:37:
ec:34:48:4b:53:b5:f4:d3:8e:fe:40:7d:1f:dd:9f:
8d:15:82:e1:21:a8:2c:60:a5:5e:cb:51:bf:36:81:
26:72:ae:3c:44:27:85:34:b8:fe:36:13:97:db:ce:
bf:3d:4d:e6:9f:42:ea:18:29:71:ae:20:fe:a6:ae:
ec:8f:b7:cd:52:b3:4d:5a:50:58:3a:1f:4c:71:75:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:C5:66:80:E0:89:39:4A:39:3C:85:E3:6B:09:C3:9D:E1:AB:03
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YQLFZoDgiTlKOTyF42sJw53hqwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.144.0/22
5.105.179.0/24
5.105.189.0/24
5.105.193.0/24
5.105.201.0/24
5.105.208.0-5.105.210.255
Signature Algorithm: sha256WithRSAEncryption
92:ee:fd:ac:1b:71:97:cd:a7:ee:0c:8b:11:6c:77:29:69:1d:
8f:fb:fd:97:68:bc:a9:d3:28:d5:70:8a:4b:33:13:84:cf:f4:
3b:44:61:63:56:8d:f1:73:2f:bb:81:9b:01:30:e9:9f:a5:81:
91:79:be:9d:c1:f5:35:7a:e9:1d:b5:5f:a3:2e:71:07:79:bf:
71:2b:10:6d:b5:49:5c:1d:67:7a:a4:c6:29:2b:4b:e8:48:bf:
07:ee:c8:e5:70:57:2d:44:7b:25:a2:33:20:8f:ff:6d:ba:ad:
83:2b:4f:bd:d7:92:75:aa:29:d6:bf:a5:d9:63:2d:3e:a7:72:
5f:fc:ab:77:de:f6:2d:88:68:71:b0:51:4b:1b:4c:a3:3c:03:
89:d5:46:e5:c2:0a:81:d7:45:5f:ef:75:60:91:d0:bc:e9:4f:
0c:15:7e:7c:b5:98:e1:c1:08:dc:4e:d2:5e:a3:dc:73:cb:ab:
5c:3b:3d:7b:3d:d3:8b:b4:35:f9:e4:85:75:e5:73:fa:f0:7e:
24:c5:7a:13:c4:49:43:2a:94:d1:61:be:6c:c5:41:86:84:8d:
c6:09:79:39:99:41:a3:f1:7f:af:bb:4e:80:85:b0:d6:87:fa:
95:66:27:81:f8:29:1c:90:e3:8d:54:99:8f:01:34:ae:12:88:
b5:30:6b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 09:00:47 2023 by rpki-client on console-ams.rpki-client.org