Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gnnb-UPj99bEkLfv7WvWfehp3rs.roa
File: gnnb-UPj99bEkLfv7WvWfehp3rs.roa (raw, json)
Hash identifier: 7sJ+PG1aqlJwrynZyc8ndpG3qtmoRh5ha2mTacJ2Iyc=
Subject key identifier: 82:79:DB:F9:43:E3:F7:D6:C4:90:B7:EF:ED:6B:D6:7D:E8:69:DE:BB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188BE30B7A2166CA7B5F3C6460F532AB2B4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gnnb-UPj99bEkLfv7WvWfehp3rs.roa
Signing time: Thu 15 Jun 2023 08:34:03 +0000
ROA not before: Thu 15 Jun 2023 08:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.38.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:30:b7:a2:16:6c:a7:b5:f3:c6:46:0f:53:2a:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 15 08:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8279dbf943e3f7d6c490b7efed6bd67de869debb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a3:7a:42:c1:c4:29:fd:77:85:50:f8:ba:7c:
7e:f0:46:e6:6b:ca:f5:58:2e:ac:c5:76:8f:50:b7:
1e:3a:d3:1a:b0:29:c1:fe:94:43:1f:98:8d:f4:01:
88:a0:c2:b3:a6:20:e9:84:28:2a:d4:00:2c:f4:b6:
d4:dd:45:57:0c:d8:8a:af:a5:e6:17:fb:39:03:15:
e5:0b:69:3b:d0:93:e3:47:28:ff:30:a5:a1:d5:64:
b8:27:f8:dc:92:e8:37:12:a6:06:1c:8f:79:a6:34:
cc:f9:02:28:19:7b:8b:b2:77:a9:b1:f2:a0:e3:e3:
56:76:26:ec:d0:00:41:e5:86:34:55:c1:fb:68:33:
fd:02:f0:84:1a:e9:f4:88:25:9d:56:c7:74:63:8f:
03:8a:d9:1b:1e:17:9f:2c:00:de:71:1b:1e:12:96:
eb:cf:82:67:ef:4e:a7:8b:d0:90:e6:a1:94:5a:3c:
df:1f:0e:b4:e9:85:6d:41:30:46:b7:3e:cd:85:65:
ed:91:eb:d2:cc:4c:1f:9a:17:5c:b7:98:f4:83:fe:
6f:21:5a:8f:9f:a1:26:e2:a7:12:c1:01:44:80:c5:
2e:fc:0e:26:4f:79:d2:74:c4:19:ff:e2:eb:5c:cc:
84:7d:44:23:d8:52:f6:9d:88:29:47:9e:cd:05:58:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:79:DB:F9:43:E3:F7:D6:C4:90:B7:EF:ED:6B:D6:7D:E8:69:DE:BB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gnnb-UPj99bEkLfv7WvWfehp3rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.38.0/24
5.105.79.0/24
5.105.90.0-5.105.93.255
5.105.108.0/24
5.105.222.0-5.105.225.255
Signature Algorithm: sha256WithRSAEncryption
0e:32:2f:38:9f:d6:c8:c0:07:02:95:f7:24:3b:52:3b:32:f4:
74:25:c6:57:6d:ff:78:22:25:6c:36:e7:d6:7a:76:03:ae:99:
a8:91:ca:ce:30:cf:4e:52:48:87:77:f7:9a:3b:33:89:4f:78:
c3:85:f3:bf:41:f8:26:47:d9:8b:7f:fa:42:a8:25:93:6e:0d:
60:b0:d1:55:ff:3e:6b:e0:aa:8f:a7:45:72:c6:4f:ab:55:5a:
ea:a0:10:93:98:8f:0b:f2:fa:0b:e1:f1:80:6d:6c:66:d9:55:
8e:7a:0c:19:7f:d5:98:20:e0:7d:c9:29:ea:30:ea:ea:82:02:
04:ed:3a:da:78:6f:2d:20:c8:5e:fb:f6:9f:72:c2:4b:c4:c4:
44:73:1e:f0:d2:5f:eb:d8:a6:e8:fd:54:2a:54:a4:b1:59:45:
ea:f4:46:fd:6e:18:3d:df:fc:59:33:4b:53:04:e5:1e:6f:0e:
ba:bf:3e:a4:c4:af:f7:79:67:88:89:fd:dc:b7:9d:7e:65:b7:
e9:e9:07:13:9f:73:af:a6:1f:34:9b:16:e1:cc:3d:e1:75:78:
61:78:1e:cd:cf:8d:b4:4a:39:98:87:bb:95:53:b7:98:24:d5:
56:f7:86:ac:61:be:2c:aa:9e:2e:6d:dd:ca:97:bd:1c:c0:4c:
0c:eb:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org