Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/j60rHifmvdQI8tpLmLQWIoUoHjA.roa
File: j60rHifmvdQI8tpLmLQWIoUoHjA.roa (raw, json)
Hash identifier: EPrdj6zUPU+gE12EeKLywC/dA3wu5PvYtKLsuijqshQ=
Subject key identifier: 8F:AD:2B:1E:27:E6:BD:D4:08:F2:DA:4B:98:B4:16:22:85:28:1E:30
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01869D7D9963BB1478DEE4DF7FA071A897B3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/j60rHifmvdQI8tpLmLQWIoUoHjA.roa
Signing time: Wed 01 Mar 2023 14:04:59 +0000
ROA not before: Wed 01 Mar 2023 14:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:7d:99:63:bb:14:78:de:e4:df:7f:a0:71:a8:97:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 1 14:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fad2b1e27e6bdd408f2da4b98b4162285281e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:db:02:37:17:29:10:d5:1e:04:ce:8e:a1:
e9:09:15:74:81:72:11:1d:85:f5:95:b5:ba:e3:d7:
80:3b:cb:66:8f:fd:fe:b8:b4:b9:1f:c1:5a:b7:e8:
49:31:04:46:e1:c3:05:10:d2:99:ae:dd:cf:a9:e9:
d7:8c:a4:b1:3e:08:89:9c:92:f3:da:a2:ef:3e:e0:
36:fa:98:f4:f1:34:47:01:35:93:24:4e:35:33:5f:
89:06:ab:bd:2d:a8:fd:6c:3e:ab:1a:32:17:d7:4f:
41:41:91:5d:79:3b:73:23:1d:33:3f:bd:53:bb:4c:
7b:a7:d3:3a:74:3d:3c:ee:4e:54:b7:2f:26:93:c5:
ee:64:82:60:8b:40:dc:ff:85:99:43:00:91:3f:d3:
5f:d0:2f:52:79:5d:f5:f0:aa:80:b3:80:e3:33:3a:
2b:2d:c0:d5:64:84:71:11:10:a5:4d:d3:f3:19:53:
ea:e7:e5:6a:95:ff:26:00:74:0a:88:58:78:7b:29:
4f:ba:85:a0:80:ac:2e:e3:fa:93:64:4a:41:5d:a6:
c4:89:d8:a8:8c:03:e1:09:24:0e:0e:e7:c6:4e:93:
c6:70:58:57:e4:83:ee:9d:ed:46:9b:56:ad:ff:ca:
8f:4e:d9:50:98:9d:d9:02:74:62:7f:89:22:73:f7:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AD:2B:1E:27:E6:BD:D4:08:F2:DA:4B:98:B4:16:22:85:28:1E:30
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/j60rHifmvdQI8tpLmLQWIoUoHjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/23
5.105.96.0/24
5.105.184.0/24
5.105.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:8c:62:c7:c2:ce:a7:63:2a:7a:f9:fc:cb:99:6a:69:7a:cd:
04:05:70:82:d6:86:45:02:dd:f9:60:a8:b1:33:bf:95:8f:9d:
3b:f8:62:33:8a:1b:b5:13:62:c5:0d:dc:3d:eb:b4:69:81:24:
18:19:a9:b5:d3:ab:ce:aa:35:fd:69:89:41:b0:b5:51:4d:07:
91:9c:53:24:dc:20:46:62:17:fb:62:e4:c5:ac:da:8e:37:cb:
b0:ca:83:a7:f8:4b:fe:dc:a5:58:71:65:16:d5:66:7e:be:33:
61:dc:f3:b5:02:8d:25:00:76:c1:3b:8b:ab:f6:b0:3f:af:40:
ca:33:14:1d:b2:d6:1e:c8:12:99:b2:a2:01:b9:04:09:fc:b1:
65:41:97:82:38:88:ed:fb:7e:ca:d3:18:71:f3:31:73:66:97:
e0:25:49:fd:f3:9f:09:01:c5:c7:2b:96:7c:c1:e7:2a:af:8e:
7c:6c:4a:00:6c:29:d6:97:33:5f:7c:7c:66:8c:8d:32:6a:13:
88:e7:7e:84:e9:a1:6e:90:90:86:e2:44:70:c7:48:cc:f3:d4:
dc:6f:67:45:05:e1:1f:f0:7c:6f:fc:05:20:6e:1c:5b:ba:c2:
2e:84:46:0e:55:c9:5c:88:c9:f0:d9:45:df:c7:31:98:da:b5:
88:d0:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org