Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e2jjIfjuIc7c5w1fjWCyiDNMRZ0.roa
File: e2jjIfjuIc7c5w1fjWCyiDNMRZ0.roa (raw, json)
Hash identifier: LUTiptcpxwFEzuNZbpr2rgM1vViu0Jb6V4VPimCogrI=
Subject key identifier: 7B:68:E3:21:F8:EE:21:CE:DC:E7:0D:5F:8D:60:B2:88:33:4C:45:9D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186B72C044C8B869D9B737E76D6B9160A22
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e2jjIfjuIc7c5w1fjWCyiDNMRZ0.roa
Signing time: Mon 06 Mar 2023 13:46:00 +0000
ROA not before: Mon 06 Mar 2023 13:46:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:2c:04:4c:8b:86:9d:9b:73:7e:76:d6:b9:16:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 6 13:46:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b68e321f8ee21cedce70d5f8d60b288334c459d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:db:95:04:cc:8d:ec:fa:ba:fb:b8:4d:a0:
e5:49:00:a5:bd:31:8f:b6:b5:b9:c5:6d:2c:ff:bd:
c3:e4:f5:5c:49:f0:4b:dd:f6:04:31:79:b5:de:9e:
8d:05:56:fd:71:3c:9e:18:bf:bc:84:db:ad:56:74:
38:0a:b0:89:88:7e:7f:95:e4:e9:81:7b:aa:11:29:
f1:64:30:2d:4a:6f:ae:49:36:af:00:1b:a7:79:31:
5f:a9:03:c5:55:92:9b:59:7f:cf:e2:78:52:67:ed:
de:95:fd:82:08:92:0c:44:00:96:d5:02:f3:ad:56:
47:90:b7:43:8a:aa:9a:69:91:ff:93:0e:31:0e:9d:
16:d2:f3:67:f4:ad:9a:39:6d:51:25:b1:7a:73:6b:
6f:26:71:55:93:cf:ab:7c:1a:81:6e:25:fb:8c:6d:
5f:38:57:e2:e9:7e:54:05:8b:0e:af:44:d1:73:7d:
1b:22:97:53:0a:8d:56:2c:9a:05:33:b9:d9:80:ed:
f6:7e:ca:47:58:7d:9b:83:9d:3b:d4:a8:3b:e0:e8:
af:ea:c3:f5:2f:f1:03:98:00:3b:6a:69:3a:06:19:
7e:9d:f3:dc:6b:bf:8a:fe:b0:37:46:b4:b4:5a:97:
fb:43:d9:d7:38:f2:6d:d9:6c:d5:e3:92:ea:a3:cd:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:E3:21:F8:EE:21:CE:DC:E7:0D:5F:8D:60:B2:88:33:4C:45:9D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e2jjIfjuIc7c5w1fjWCyiDNMRZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.84.0/24
5.105.94.0/24
5.105.98.0/24
5.105.105.0/24
5.105.158.0/24
5.105.188.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c3:30:f9:0b:c4:d5:28:7e:4b:a7:4e:22:ae:64:2c:2b:72:
77:72:4e:d6:f2:1f:25:78:d5:b6:1c:90:df:68:b7:07:10:b5:
ef:93:3a:81:f0:62:4f:8d:fc:3a:ec:cc:fb:51:3d:6e:09:42:
6a:c3:3c:1b:3d:32:c9:ec:f5:28:87:77:61:11:f7:14:38:3d:
ac:57:f6:5f:b8:a2:45:f1:23:d9:c3:1f:d7:2d:67:21:b7:5d:
85:af:21:da:1a:9b:b8:bf:07:46:c1:74:0c:de:fc:b1:fe:d0:
2c:7e:45:10:ad:45:00:01:a1:f5:f2:b7:50:a5:01:a9:22:2e:
3d:1a:9d:18:0c:ee:5b:0a:21:f5:41:6a:f0:18:2d:3d:6a:f1:
b6:88:80:5d:09:11:e4:a1:51:76:51:da:c9:d9:b0:bf:25:a6:
db:ea:06:3f:5f:c0:f6:03:aa:33:76:9d:61:88:42:3f:da:12:
50:61:2d:bd:29:b0:0c:bf:88:72:96:d5:12:b0:0b:1c:8e:2f:
fc:11:02:4c:73:04:fa:4c:44:b3:e8:61:83:13:35:67:da:53:
69:ce:2d:2e:5e:f6:ac:ca:c2:7c:b1:57:f3:13:39:b4:24:2e:
38:7f:ee:d7:01:96:6c:91:04:63:e0:5f:8b:69:cb:c2:b6:b6:
fe:d4:80:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org