Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Zgu6x-r1WjY09AhX5zr5m2Ksiss.roa
File: Zgu6x-r1WjY09AhX5zr5m2Ksiss.roa (raw, json)
Hash identifier: x77XCZppfHKe1AvhRMF5T6gMcXCeVCjR99S98MzpoTA=
Subject key identifier: 66:0B:BA:C7:EA:F5:5A:36:34:F4:08:57:E7:3A:F9:9B:62:AC:8A:CB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018682B2BA86E25257CF5B25B673B2298A60
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Zgu6x-r1WjY09AhX5zr5m2Ksiss.roa
Signing time: Fri 24 Feb 2023 09:13:16 +0000
ROA not before: Fri 24 Feb 2023 09:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.230.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:b2:ba:86:e2:52:57:cf:5b:25:b6:73:b2:29:8a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 09:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660bbac7eaf55a3634f40857e73af99b62ac8acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:29:09:c0:85:ed:3a:fc:f1:ae:04:1d:7c:
b7:de:ac:75:bb:e2:6a:14:a0:45:2c:b3:55:a3:eb:
2a:e1:3b:7d:37:d6:de:9f:b0:b6:27:7d:d8:2a:d7:
02:0d:01:0f:a4:6b:82:81:6f:a5:5f:62:6b:ba:e3:
ef:01:52:d5:f6:77:9b:36:27:0f:49:cd:e9:27:80:
0e:97:82:64:2e:65:35:f0:de:90:a6:a9:68:01:da:
1b:61:0d:14:1f:6c:36:e0:3c:53:31:3c:7a:ec:12:
9c:88:c7:21:42:d5:9e:6f:8f:ad:7d:07:1c:a2:2a:
8e:13:14:aa:98:c7:79:6d:32:89:45:78:a0:48:ef:
a2:72:b5:e0:63:76:05:6b:aa:bc:6e:04:e8:1d:93:
b4:b6:0f:49:3e:eb:e5:55:0b:24:5d:34:6e:f7:34:
2f:8a:74:35:26:24:9d:31:f1:f1:e8:59:10:75:3d:
63:8b:39:40:c9:64:2b:48:da:28:5c:f7:aa:c9:2a:
62:b9:6c:d8:93:51:9f:45:34:d8:93:1c:9e:46:ce:
28:16:e7:d9:4d:2b:52:ff:9b:bd:9d:53:9f:86:d9:
e4:13:38:b3:ad:eb:94:49:01:c9:6d:14:1f:33:65:
4a:a0:93:f3:1e:cb:60:70:33:95:f1:96:22:f9:44:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0B:BA:C7:EA:F5:5A:36:34:F4:08:57:E7:3A:F9:9B:62:AC:8A:CB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Zgu6x-r1WjY09AhX5zr5m2Ksiss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.17.0/24
5.105.76.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ff:23:a3:d1:62:ac:4a:b3:73:73:f9:df:14:7d:ee:50:86:
32:f4:87:c8:07:d6:40:21:6c:ab:9c:4f:f7:69:88:96:6b:b7:
37:72:4c:bd:d3:5a:78:88:b8:95:e5:29:82:47:c4:62:36:6b:
4b:a4:b6:62:84:57:61:c6:c1:17:01:90:73:83:c7:bb:46:4a:
51:2d:81:e3:12:15:ff:65:e9:8b:af:9f:fa:4d:bc:a4:d1:d4:
17:45:24:16:50:a0:b1:92:28:d7:d3:60:08:21:a1:fb:e2:f7:
37:03:f6:ee:8f:9a:96:dd:4a:5d:99:f6:de:77:4c:5d:11:99:
c2:77:91:6f:5b:4e:d7:74:54:92:91:eb:84:c9:af:2f:d7:52:
5c:d5:f5:19:ed:4a:b5:9a:35:53:32:0c:1c:e9:28:0a:27:75:
08:a0:84:0f:8c:f1:d8:99:15:10:5d:e4:95:e6:25:c3:38:8a:
90:52:a2:a1:54:5f:7a:20:87:66:23:6f:06:c1:56:63:fa:ee:
23:66:b6:f8:73:03:a3:97:12:4d:9e:bd:fc:be:51:b1:26:9f:
83:2a:f7:c3:21:70:09:33:19:41:89:cf:e9:58:a1:6c:91:de:
37:b8:ff:23:d2:0f:dd:1b:09:e0:5d:5f:e4:27:36:24:b6:b8:
89:7f:1a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org