Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fTyCWrwhu0CtQxCB4fy_M058APw.roa
File: fTyCWrwhu0CtQxCB4fy_M058APw.roa (raw, json)
Hash identifier: hcjj/xpqZCn8LRvXhW/JSfJto7br1KkDj+ezTWdGdOU=
Subject key identifier: 7D:3C:82:5A:BC:21:BB:40:AD:43:10:81:E1:FC:BF:33:4E:7C:00:FC
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01880F3C4A514DC88C53DBC2DDD39DD27285
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fTyCWrwhu0CtQxCB4fy_M058APw.roa
Signing time: Fri 12 May 2023 09:13:09 +0000
ROA not before: Fri 12 May 2023 09:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:3c:4a:51:4d:c8:8c:53:db:c2:dd:d3:9d:d2:72:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 12 09:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d3c825abc21bb40ad431081e1fcbf334e7c00fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:ec:0d:e8:87:aa:3c:7f:d5:3a:77:e4:0e:
05:e9:73:ac:1a:6c:3e:0d:8b:4e:01:f8:53:a5:56:
72:99:2d:d4:39:41:0f:ae:a0:e6:66:e7:b1:19:41:
3f:f9:1a:10:cd:5a:e7:65:ac:08:8b:f8:e6:51:7c:
e4:02:2c:e8:37:62:7b:79:da:9d:9f:08:1b:6b:d3:
fb:42:78:da:85:f6:3f:30:b1:fd:95:da:7c:79:e1:
9f:2b:3d:d4:ea:e7:53:bd:d0:25:f9:f4:6d:70:88:
69:61:3f:33:64:2f:d8:24:90:cd:e6:92:55:7d:ba:
79:00:a7:1e:fe:0f:3c:78:4e:e4:5b:aa:0a:92:34:
85:03:ca:14:00:b2:3d:09:24:fe:c5:c4:ec:b4:66:
80:35:0d:6e:3c:98:cc:d9:d7:64:94:7f:f9:c1:45:
f7:de:59:51:bd:3e:33:ed:65:4e:94:6f:cb:6d:56:
81:e8:81:c8:4b:27:d2:af:d8:d3:40:43:cb:c1:04:
c2:3e:e5:b5:df:76:44:f0:9b:82:26:68:b9:b6:ec:
aa:fb:6e:a6:c2:2c:d9:d2:cd:89:fa:8f:36:92:48:
de:36:8c:69:49:60:a9:a6:b7:47:b0:ef:cf:59:23:
f5:c5:20:ca:cf:6f:00:2b:27:6b:9b:25:ec:fa:59:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3C:82:5A:BC:21:BB:40:AD:43:10:81:E1:FC:BF:33:4E:7C:00:FC
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fTyCWrwhu0CtQxCB4fy_M058APw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.26.0/24
5.105.59.0/24
5.105.80.0/24
5.105.123.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e4:03:5b:2e:98:f1:5b:48:09:ba:4c:e5:f2:05:99:f5:83:
0e:d0:5b:10:dd:93:66:a8:cb:c9:e4:f6:cd:7c:1e:7b:b1:8f:
48:bd:c2:cb:c9:da:29:f3:1f:d3:b1:3b:4e:a1:44:5a:40:39:
7f:36:e5:24:e8:1d:90:30:a3:cc:3e:e3:f7:b3:61:5b:82:b7:
72:c5:7a:86:6e:9e:d9:a1:80:00:c3:6e:7b:2d:27:f4:ea:b4:
ae:1f:4a:e2:c7:06:1d:f3:a2:53:61:94:7c:a9:3c:41:56:08:
67:5d:b2:39:98:fd:4e:f1:84:64:e4:f5:9a:05:58:f9:2e:f0:
27:7b:94:af:62:a1:c2:97:f3:eb:94:f1:cf:ca:6e:da:60:13:
58:cb:c9:b2:8c:5a:aa:7f:37:3d:3e:e1:3c:0c:ec:ee:d8:54:
b0:fe:7f:82:43:bb:b3:30:32:25:8a:12:5e:ea:d5:37:20:4e:
21:e0:71:fe:bf:bb:3b:1d:72:02:87:ed:af:b6:35:b5:b0:84:
c2:42:9a:e0:ed:36:c5:64:8a:4b:89:d1:43:82:32:38:2d:18:
cf:22:8b:74:48:7c:88:e5:07:ae:32:f9:43:d0:b7:9f:68:f4:
4e:a5:73:45:52:fe:2d:32:65:12:78:db:0e:e3:a8:1c:4d:0d:
61:58:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org