Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kEQ9O6WCILXhN1_lQiuF0eMYf1E.roa
File: kEQ9O6WCILXhN1_lQiuF0eMYf1E.roa (raw, json)
Hash identifier: ys7v1wWZgVm7skCnfg+4SJO9O+/N2F3b1+AByHHzdPc=
Subject key identifier: 90:44:3D:3B:A5:82:20:B5:E1:37:5F:E5:42:2B:85:D1:E3:18:7F:51
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188D76BC7D2BA84986259B528175A1BC2FF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kEQ9O6WCILXhN1_lQiuF0eMYf1E.roa
Signing time: Tue 20 Jun 2023 06:09:04 +0000
ROA not before: Tue 20 Jun 2023 06:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.14.0/24 maxlen: 24
5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:6b:c7:d2:ba:84:98:62:59:b5:28:17:5a:1b:c2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 20 06:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90443d3ba58220b5e1375fe5422b85d1e3187f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:c1:5e:87:da:94:6e:72:ee:ff:0b:e5:db:
fd:d3:6f:6c:ae:e7:4a:e3:3a:9a:96:e8:ba:bf:59:
cb:68:d3:56:cb:71:dd:b4:fa:4e:d0:42:61:78:59:
d9:f0:82:fe:d2:8b:b9:e0:f0:62:25:a8:92:95:1b:
ed:fc:44:18:4b:ec:35:f5:4c:46:1b:66:86:1e:90:
2e:37:b0:c7:0a:5b:33:44:9f:3f:c5:57:e4:67:ca:
f3:a7:93:8c:89:c9:e4:d1:8f:e1:30:af:54:a5:55:
5e:1d:4b:cc:6f:12:41:69:0e:31:cb:8d:5b:3f:4b:
60:16:9f:98:6a:4e:91:b4:8c:7d:f0:9e:a1:a8:48:
1b:16:94:27:9e:68:45:e7:8a:b2:53:c4:25:e0:98:
18:4e:6a:b8:a0:d7:06:fc:21:36:00:09:8a:09:e4:
59:ae:7f:71:91:79:26:77:cd:62:a8:63:0c:a5:c9:
2c:36:c8:45:7e:78:22:5c:21:4e:b6:ab:11:13:d0:
5b:56:31:3f:12:d5:03:96:90:23:3b:d2:2e:21:8b:
04:73:e5:a4:e9:27:73:24:cd:3c:05:fa:db:30:9f:
6b:3f:a7:15:34:5d:6b:9b:3d:5b:59:99:79:5c:e7:
4c:20:a0:3c:6e:e7:b0:dd:f7:ec:8c:5a:6b:12:59:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:44:3D:3B:A5:82:20:B5:E1:37:5F:E5:42:2B:85:D1:E3:18:7F:51
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kEQ9O6WCILXhN1_lQiuF0eMYf1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.14.0/24
5.105.34.0/24
5.105.39.0/24
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.142.0/24
5.105.157.0/24
5.105.200.0/24
5.105.207.0/24
5.105.221.0/24
5.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8f:1c:61:3e:28:d9:b4:6a:6a:3e:81:54:2d:99:46:b9:69:
f5:03:ff:80:bb:28:63:e1:93:f6:35:f8:be:b6:a4:e7:69:65:
74:8a:8a:b3:c3:60:c2:8c:72:e1:70:0b:64:d1:53:76:87:1a:
ee:da:e5:82:35:d0:28:b3:9b:56:e5:be:2d:43:96:59:48:c0:
21:af:b9:e5:9a:d6:f8:65:78:4b:e7:24:b4:fb:82:cd:ac:9d:
30:ac:e7:b1:41:6b:c4:de:57:08:49:f8:d0:3c:ef:ed:ef:1d:
1e:94:50:8c:6a:e7:25:bc:2e:3a:5e:89:7d:30:0a:59:e9:cb:
6d:79:d3:54:9c:3f:0a:f1:23:92:89:fc:b0:af:bc:7f:b6:f5:
68:d1:8c:8a:86:d3:32:e1:21:06:bb:58:36:27:26:ca:09:d9:
70:95:ae:d4:e9:55:50:f4:fa:d8:e7:38:01:64:4c:ad:71:d3:
52:14:84:56:9c:44:6e:04:b8:6a:ec:dc:8e:f2:29:74:ae:6b:
19:23:c2:1b:12:46:ae:3f:17:73:9d:76:4c:c1:e8:2c:2f:c3:
92:d9:75:a4:1d:6c:63:95:ef:33:de:86:be:af:8a:8a:42:af:
98:30:0d:6a:50:72:13:40:3d:b3:8e:79:7f:0c:b9:5f:2b:f9:
3e:2e:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org