Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jfvNB80UxclFgPJmJYrY2k6gIwY.roa
File: jfvNB80UxclFgPJmJYrY2k6gIwY.roa (raw, json)
Hash identifier: wz+r4eqHqICEzD1VtWkm9hxa1J1E5UQXYkZYoz3LLiU=
Subject key identifier: 8D:FB:CD:07:CD:14:C5:C9:45:80:F2:66:25:8A:D8:DA:4E:A0:23:06
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018794018D23F59D33D7F32BBDFD83EA1CE9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jfvNB80UxclFgPJmJYrY2k6gIwY.roa
Signing time: Tue 18 Apr 2023 10:55:42 +0000
ROA not before: Tue 18 Apr 2023 10:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:01:8d:23:f5:9d:33:d7:f3:2b:bd:fd:83:ea:1c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 18 10:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dfbcd07cd14c5c94580f266258ad8da4ea02306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:9a:bc:58:cb:05:51:3b:fa:2f:9d:8b:1a:
12:e6:64:49:dd:7a:6e:76:95:34:55:95:2c:31:06:
3b:cd:33:b6:46:8a:c8:1b:16:e4:25:c7:fd:13:b8:
c2:04:3b:9c:d3:c9:af:e2:24:52:43:38:d3:1d:b4:
5e:0d:72:0e:3f:98:dc:10:79:4d:2f:8e:3f:49:fa:
92:88:4a:6b:43:0f:a3:93:19:8a:47:71:ec:14:c9:
00:1e:f5:79:5c:72:46:96:2a:21:7d:55:6d:f0:e8:
48:cb:24:30:d2:f5:9c:4b:46:08:5e:83:e9:85:68:
7c:3c:1e:cb:0f:6f:e2:52:c4:e6:8d:76:73:b3:6b:
3a:40:bd:af:af:d1:47:fc:54:63:39:9c:3f:37:49:
9e:7c:98:a3:af:d2:ff:a2:42:c6:4c:d5:89:ca:c4:
18:8d:e0:73:6d:be:22:cb:9f:b3:ef:61:32:e0:14:
73:f8:ca:82:68:1b:b9:67:d2:e3:89:87:f8:7e:2d:
97:a2:5b:02:08:ec:a8:56:e5:ae:b5:9a:af:86:e1:
f0:3f:c3:30:f5:f6:cc:5a:1c:f4:02:4d:61:b3:a2:
da:2e:a1:fc:0f:eb:f5:35:19:da:9c:2e:34:c2:47:
f9:2a:bd:67:34:a6:e3:5d:70:6d:e2:9d:0a:92:82:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:CD:07:CD:14:C5:C9:45:80:F2:66:25:8A:D8:DA:4E:A0:23:06
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jfvNB80UxclFgPJmJYrY2k6gIwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.124.0/24
5.105.127.0/24
5.105.157.0/24
5.105.200.0/24
5.105.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c8:4d:53:d5:10:0c:4b:d5:6b:07:bb:ab:f2:bb:fb:42:45:
e4:98:7d:10:4e:b1:e7:04:b3:bf:0a:b9:15:a0:22:85:be:56:
7f:28:76:7e:15:17:9b:9f:f3:da:86:14:f0:b8:35:62:70:5a:
0f:8e:2c:03:ad:80:8a:c0:b9:25:93:31:17:aa:c7:d2:95:68:
ff:94:b4:50:e2:48:aa:76:a6:e4:bc:7b:e2:3b:e4:53:0e:7a:
81:66:77:52:92:b7:a5:10:4f:a8:02:83:97:9f:6b:84:0d:b5:
16:eb:32:7f:e6:83:cc:97:d8:38:23:ae:4b:ad:90:1a:f8:3f:
a5:5a:92:6f:fc:8c:43:12:13:9e:80:c1:3e:39:6d:f4:45:d8:
1d:9c:67:f1:e4:7c:10:03:f7:0f:c2:eb:28:f7:c9:4f:a0:ff:
56:da:5e:ca:8e:c2:25:14:76:5f:54:cd:e0:34:93:06:d7:fd:
62:c1:9b:61:33:82:e8:4f:38:a3:bf:f2:98:f5:15:5b:cd:47:
b0:7a:b8:c1:03:d8:98:ff:13:51:ff:73:d9:2d:74:cb:1d:84:
b1:f1:26:a2:1e:aa:77:1b:4e:12:d1:1d:1b:d6:8c:ee:16:94:
e1:12:a6:1d:3c:ba:89:c9:91:52:5f:c7:ac:44:54:d1:a7:8a:
9f:09:14:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org