Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oDOWsiyts0naGwdY8TW0yZ582v8.roa
File: oDOWsiyts0naGwdY8TW0yZ582v8.roa (raw, json)
Hash identifier: SEBVLuMyWcn27AefRaPatEeluWDpjkWpVwQCHfHfXsk=
Subject key identifier: A0:33:96:B2:2C:AD:B3:49:DA:1B:07:58:F1:35:B4:C9:9E:7C:DA:FF
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B3841D96BD2A99A099C7E264CFF6B3DF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oDOWsiyts0naGwdY8TW0yZ582v8.roa
Signing time: Tue 13 Jun 2023 06:49:19 +0000
ROA not before: Tue 13 Jun 2023 06:49:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.105.160.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.250.0/24 maxlen: 24
5.105.251.0/24 maxlen: 24
5.105.254.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.191.0/24 maxlen: 24
5.105.190.0/24 maxlen: 24
5.105.192.0/24 maxlen: 24
5.105.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:84:1d:96:bd:2a:99:a0:99:c7:e2:64:cf:f6:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 13 06:49:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a03396b22cadb349da1b0758f135b4c99e7cdaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:14:38:f2:fc:2b:cd:56:a6:a3:d7:3b:65:
7b:f0:68:44:17:f0:0a:81:34:48:27:88:53:8e:fc:
0f:ae:31:3b:22:61:1a:0c:a7:a1:c7:68:62:a4:50:
d2:ea:90:e3:b6:72:60:75:64:1f:cb:69:ea:d0:f2:
7d:04:89:3d:1b:c4:4d:20:ca:dc:f6:47:f3:10:de:
b6:1b:8e:fc:e6:63:7b:d0:be:1e:23:d9:25:a0:96:
1d:6c:47:c2:52:b9:88:dc:05:4e:e2:4b:87:8e:9a:
40:ed:0a:1d:71:d6:10:61:22:2a:49:ac:0e:eb:91:
2e:3e:38:e6:ff:92:2f:2e:68:0b:34:78:2c:20:51:
6a:10:21:15:94:c3:22:df:db:4c:6c:69:60:14:5e:
fa:f9:6f:50:cf:1f:5b:b8:76:94:7a:a2:21:d0:2b:
08:d9:47:b8:72:d3:74:28:e1:44:13:60:0c:d0:ab:
79:89:5b:14:d3:18:83:4c:01:0e:d4:f7:4e:50:f0:
9d:fb:bd:96:a2:11:75:8d:b6:05:65:91:ae:19:4b:
5f:a6:6f:71:5a:89:e8:af:9a:79:c7:21:a9:2b:44:
79:8b:e1:f3:73:47:76:11:33:4e:77:bc:cf:37:6c:
d6:48:4f:a1:a4:17:36:01:2e:64:e1:49:fd:e8:72:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:96:B2:2C:AD:B3:49:DA:1B:07:58:F1:35:B4:C9:9E:7C:DA:FF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oDOWsiyts0naGwdY8TW0yZ582v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.86.0-5.105.89.255
5.105.160.0/24
5.105.176.0/24
5.105.190.0-5.105.192.255
5.105.194.0/24
5.105.250.0/23
5.105.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:2f:0f:cb:1c:5e:4e:17:2b:70:44:5f:bd:f6:a1:3f:fe:86:
cb:85:71:89:b4:4c:5c:19:4b:95:d4:21:73:9b:00:ee:8a:1f:
14:1a:b7:4c:42:f9:02:f4:c8:13:4f:67:24:b2:ef:f5:fc:f4:
4a:ec:f3:b2:62:78:bd:fe:d5:c4:1a:d2:6d:de:ae:e1:ea:27:
25:41:db:ca:12:bf:d7:ff:a3:d4:de:7a:6c:f6:ac:15:c5:ec:
70:9f:f8:30:b7:f9:99:59:a0:43:56:41:b1:66:11:a5:79:5c:
92:c3:06:dc:aa:eb:56:f8:37:e4:b2:d4:10:8b:ed:cc:fd:73:
bc:d3:bc:b1:75:e5:e8:a5:8c:dc:d7:95:e2:7d:67:b8:2e:e0:
11:ee:fa:c6:ee:d1:d3:87:82:fb:18:23:9d:db:16:b0:87:07:
ab:21:ba:a1:3c:42:50:81:e2:33:c8:c6:cb:64:91:1d:65:34:
19:5f:b4:fd:93:e0:3b:e3:e6:a7:00:fc:9e:47:74:0b:56:c4:
11:a3:ca:ca:50:e0:18:88:67:72:28:fa:a5:8e:70:73:eb:64:
a1:43:48:60:c7:e5:c3:99:0f:f5:c7:05:cd:88:de:6b:13:9d:
64:8c:7c:74:ee:de:7f:0f:e2:a6:84:6e:7e:f1:b2:be:ea:d6:
9d:a5:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org