Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/n-FvHr7W4uqPy-ToQx09DyD3U8Y.roa
File: n-FvHr7W4uqPy-ToQx09DyD3U8Y.roa (raw, json)
Hash identifier: 3IEobffrncTnSCFjxKKJkq/XKVNF+NsCjizAp4yRBD0=
Subject key identifier: 9F:E1:6F:1E:BE:D6:E2:EA:8F:CB:E4:E8:43:1D:3D:0F:20:F7:53:C6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01872C3F4EC276C3AFD2051D46262360AFBB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/n-FvHr7W4uqPy-ToQx09DyD3U8Y.roa
Signing time: Wed 29 Mar 2023 07:22:39 +0000
ROA not before: Wed 29 Mar 2023 07:22:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.65.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:3f:4e:c2:76:c3:af:d2:05:1d:46:26:23:60:af:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 29 07:22:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fe16f1ebed6e2ea8fcbe4e8431d3d0f20f753c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:da:c0:24:6b:fa:90:16:07:c2:91:df:05:
25:c4:46:1c:9c:73:b7:6a:1b:8b:45:e0:45:32:df:
44:1b:6f:82:6a:73:af:2d:71:1b:48:38:6a:dc:e1:
7a:b8:ef:1f:35:a2:a6:0b:a0:ce:70:d5:75:2a:b0:
ae:83:5b:9f:50:a8:72:8b:70:35:d2:91:b9:c5:61:
36:88:94:7a:4a:56:42:e4:71:96:2e:54:51:4a:fd:
2f:76:1e:13:19:6d:10:2f:00:27:10:64:8c:b6:60:
46:af:b4:66:c6:8a:ff:be:57:04:7c:0f:f8:69:64:
40:66:49:cb:6d:c6:21:8a:19:83:43:ce:36:29:af:
10:d6:1c:a5:24:b4:18:4c:81:d2:52:87:d5:f9:80:
2c:77:eb:b4:00:89:20:8e:0e:ee:b6:1d:f8:83:7b:
fc:1e:d9:ed:07:da:e5:26:ef:cd:02:2d:8d:c2:dc:
51:4e:60:c6:3f:59:6d:4d:41:dd:a6:d9:46:39:a1:
48:2c:38:5b:79:c9:7f:8d:8f:de:f1:ff:fa:1f:df:
dc:0a:98:80:db:e4:4a:02:cd:51:79:4c:3b:72:74:
b9:3c:7d:50:68:d6:df:13:a7:82:92:21:4a:7f:e9:
65:ea:aa:8b:96:50:29:7f:02:85:91:48:27:ef:8a:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E1:6F:1E:BE:D6:E2:EA:8F:CB:E4:E8:43:1D:3D:0F:20:F7:53:C6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/n-FvHr7W4uqPy-ToQx09DyD3U8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.65.0/24
5.105.81.0/24
5.105.96.0/24
5.105.230.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f1:ab:ba:88:e8:e5:cf:96:fd:ac:10:97:2c:40:7a:84:79:
eb:ad:d2:99:70:4f:43:a0:69:4d:62:cb:44:6e:51:8a:93:69:
c5:fc:97:5b:51:8c:8a:4f:3f:9e:33:29:66:9c:4c:6a:c7:99:
7d:bb:9a:a3:71:28:d0:36:d0:b5:fb:5e:a9:d0:d5:9d:cc:5e:
f4:49:de:3f:c7:1b:11:77:34:e5:29:9d:93:22:06:63:d6:68:
a5:1e:b7:bf:1f:8b:28:9b:25:4e:5f:3f:ee:e1:45:d0:f2:95:
48:0b:c3:9f:c4:ea:e4:f3:2a:12:22:ba:e4:30:47:ee:1f:64:
ac:93:ab:f7:6b:33:7d:c9:4b:4a:b2:8b:d6:49:7b:47:17:d6:
90:5a:0e:44:82:9a:e6:9e:b1:7e:1e:bd:5c:33:e8:71:cc:58:
e9:db:98:be:56:c2:94:e7:b6:1e:c8:4f:9f:21:eb:88:31:a9:
3d:3e:94:eb:55:cb:e9:19:f1:1e:16:cf:f2:65:ec:cd:2e:ac:
bf:e4:46:13:07:a3:fb:91:f2:68:cf:85:3c:d7:e0:ef:29:ef:
21:3b:4c:dd:59:6e:6d:5f:ce:ce:c8:97:45:83:0d:0c:ef:e4:
5b:71:42:60:96:77:98:f2:32:77:8c:04:0d:f2:71:4d:14:00:
85:6b:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org