Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mtZZ2i7KH0v8FkFPz-aJM7DDjIA.roa
File: mtZZ2i7KH0v8FkFPz-aJM7DDjIA.roa (raw, json)
Hash identifier: 5Iv014QZi5dSOFTY9ViorkOUeMV3WaKX80r2eM6cVV8=
Subject key identifier: 9A:D6:59:DA:2E:CA:1F:4B:FC:16:41:4F:CF:E6:89:33:B0:C3:8C:80
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186030D511B74DEA455784BBE4EB507F88A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mtZZ2i7KH0v8FkFPz-aJM7DDjIA.roa
Signing time: Mon 30 Jan 2023 14:20:49 +0000
ROA not before: Mon 30 Jan 2023 14:20:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:0d:51:1b:74:de:a4:55:78:4b:be:4e:b5:07:f8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 30 14:20:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ad659da2eca1f4bfc16414fcfe68933b0c38c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:f8:c2:9e:e3:d1:75:57:e9:6a:d9:7c:ae:
cd:18:80:e4:4e:3d:a2:ed:92:77:96:e3:59:33:0c:
b5:41:e7:ac:49:8e:9a:6e:a4:25:ef:1d:39:c1:5a:
8b:20:34:b1:69:e6:01:cd:1b:54:62:26:93:d5:df:
55:37:ca:ca:13:b7:e1:92:76:d8:35:06:ba:31:f6:
f5:f6:5d:78:5d:09:cf:65:42:7d:36:0c:fb:59:1f:
d9:9d:43:fe:c5:e2:93:53:41:c0:4d:64:25:72:2d:
33:14:94:2c:74:87:24:3f:f3:c5:ab:ef:36:f5:55:
ca:ba:5e:b4:8f:70:11:c1:54:5a:1c:3f:f0:70:ce:
25:10:84:48:c1:49:9c:d5:58:b1:da:0e:da:31:eb:
cd:29:53:89:ec:5a:2b:5e:e4:d3:87:a6:c5:52:7c:
18:5c:61:25:6d:6b:28:9e:7f:73:e5:c8:a5:be:35:
6d:37:6a:3c:97:34:ef:90:00:3a:98:39:b6:75:31:
96:5f:48:7f:5a:71:09:26:bc:a7:f7:d9:ec:32:74:
31:1c:7e:d0:88:07:32:87:73:b9:a9:62:31:c4:1e:
e0:d3:57:8d:cb:69:ea:25:e2:a7:f2:9a:a3:ba:d5:
70:0c:d5:10:0e:d1:fc:04:45:d0:18:57:25:5e:27:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D6:59:DA:2E:CA:1F:4B:FC:16:41:4F:CF:E6:89:33:B0:C3:8C:80
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mtZZ2i7KH0v8FkFPz-aJM7DDjIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/23
5.105.38.0/23
5.105.136.0/24
5.105.200.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8d:d2:86:2c:4e:47:ea:cb:ec:30:60:b0:ed:49:e9:57:cc:
44:c0:e7:9a:23:86:aa:94:99:11:03:26:b1:72:91:26:86:f4:
37:89:91:e3:2a:41:16:d5:91:78:f9:b7:30:b9:ce:58:18:8d:
0c:5d:a4:4a:b6:7b:22:e6:df:06:13:c1:74:97:4c:d3:34:c0:
b7:ca:44:c3:9a:99:80:b8:02:79:94:ba:7b:50:5d:64:dc:7c:
d7:26:03:5f:fb:3a:00:23:e9:de:ab:4c:23:74:2b:b5:5c:38:
aa:07:0a:7f:c3:2d:b0:b4:73:e2:1b:f1:71:d8:ef:16:19:da:
ae:47:31:2d:fc:16:81:70:47:e3:10:53:e9:5b:ec:55:da:99:
47:1e:89:bc:c5:fb:d3:23:8b:98:d2:59:ae:e4:b6:cf:00:bf:
5d:e5:3f:c7:7e:b0:4a:d2:8e:98:44:d1:24:31:7b:f3:5e:e8:
21:17:f3:93:5e:9c:19:23:ae:41:18:5e:1f:d9:23:27:45:f8:
58:73:83:19:ee:81:79:5e:73:1e:64:95:2c:85:21:25:fd:09:
4a:17:e0:b3:3e:db:c3:52:d2:fd:14:c3:d0:47:92:c5:0b:81:
26:c5:13:19:fc:01:a8:e1:98:c6:d3:23:8d:8d:6a:14:7c:18:
0e:54:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org