Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/clgGLHOkO1VDpoQtEB1tigyqqpc.roa
File: clgGLHOkO1VDpoQtEB1tigyqqpc.roa (raw, json)
Hash identifier: W6/VjzOyZYrLIv3npshHnqdlbnfu1EwN3eLehA2DGIU=
Subject key identifier: 72:58:06:2C:73:A4:3B:55:43:A6:84:2D:10:1D:6D:8A:0C:AA:AA:97
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01881F31612546D9B06F5486D1AAB1258A21
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/clgGLHOkO1VDpoQtEB1tigyqqpc.roa
Signing time: Mon 15 May 2023 11:35:09 +0000
ROA not before: Mon 15 May 2023 11:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.168.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:31:61:25:46:d9:b0:6f:54:86:d1:aa:b1:25:8a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 15 11:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7258062c73a43b5543a6842d101d6d8a0caaaa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:77:8a:2d:da:73:16:59:b7:a0:b1:a1:ab:
b9:aa:43:97:a2:8c:90:f3:6a:04:a5:4a:80:a4:68:
72:66:e2:1a:fd:74:95:47:be:86:81:c8:a7:75:3c:
23:10:75:75:f3:59:49:32:0d:2b:ad:22:97:76:ec:
e5:a6:72:a1:cd:7f:49:bf:c3:9f:ad:cc:3d:9d:b6:
f8:9a:1d:b1:77:83:96:14:53:8d:0b:d9:2d:3b:68:
25:b4:f7:4c:c2:50:24:2f:d9:49:86:c4:05:f4:5b:
da:02:ee:a2:a9:e7:4e:a6:7c:f5:78:d3:8b:51:dc:
2b:34:38:c3:ce:bb:a7:99:7b:96:b0:f2:28:14:28:
e6:84:78:ce:6d:ec:54:9d:7d:43:ac:f0:ce:18:12:
90:f8:88:48:6b:6d:f7:14:aa:a1:be:c2:db:5c:bd:
85:ec:22:80:12:f8:f5:eb:aa:53:0e:78:62:00:64:
fc:58:d8:00:55:5e:57:c1:8f:f4:b8:3c:e3:f1:54:
44:57:9d:8e:1a:26:59:51:84:5c:f8:ae:e6:2c:db:
5f:45:db:b9:9d:0e:e2:cb:fa:78:03:c8:83:29:41:
37:db:31:0b:62:58:6d:75:30:4b:18:dd:a1:cc:53:
46:b0:18:1d:5f:59:cf:21:60:aa:79:6d:93:74:3d:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:58:06:2C:73:A4:3B:55:43:A6:84:2D:10:1D:6D:8A:0C:AA:AA:97
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/clgGLHOkO1VDpoQtEB1tigyqqpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.65.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
5.105.184.0/24
5.105.218.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1f:e6:41:82:37:64:49:c0:28:70:26:25:f8:09:8e:d6:0d:
18:59:78:0b:be:1e:ed:b5:ee:17:cf:97:88:75:0b:06:ae:71:
b9:3f:04:c6:e0:48:b7:cc:62:1c:31:88:a3:2d:15:23:9f:5a:
cd:f6:5a:e9:19:7e:e8:4b:89:14:11:58:ec:b7:86:5c:13:d8:
49:0a:5d:b6:91:55:a6:ec:d8:86:59:20:15:15:e6:be:d5:9e:
78:1c:1a:25:17:ea:14:f0:78:4d:74:d7:ca:d2:5b:f3:75:70:
43:16:ff:27:f4:b5:4f:3b:8c:61:ef:a7:1a:f3:53:cf:1b:d3:
bf:73:5b:f3:c1:5a:26:f0:ef:f6:36:c2:31:64:f0:f0:71:81:
28:47:72:ae:a7:cc:4d:89:22:42:15:ba:5c:5d:f9:3e:1b:7d:
74:78:79:23:0e:8d:0b:08:26:8e:a2:ba:9e:7b:b3:a6:6b:ce:
42:40:44:da:fb:09:11:b6:1f:d7:24:33:c0:49:b3:0e:20:e3:
04:c9:f0:ef:bc:98:13:b8:a0:a5:4c:4f:f5:71:ae:8d:7a:97:
ca:8f:61:c0:f2:9d:94:7c:d2:f7:10:b0:ef:9e:95:51:9b:2b:
e1:45:a9:39:75:52:47:40:4f:7a:af:ed:bf:b3:3b:9b:78:bf:
e8:2c:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org