Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oDrC0TvHC1AndrquPyFpFwEatHU.roa
File: oDrC0TvHC1AndrquPyFpFwEatHU.roa (raw, json)
Hash identifier: qTC5XyDMIGvOd4S/2m65Sgkky8DYK24zCto/8JZBvG4=
Subject key identifier: A0:3A:C2:D1:3B:C7:0B:50:27:76:BA:AE:3F:21:69:17:01:1A:B4:75
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186CA8AB51242DBE60D226CB185A198821C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oDrC0TvHC1AndrquPyFpFwEatHU.roa
Signing time: Fri 10 Mar 2023 08:02:13 +0000
ROA not before: Fri 10 Mar 2023 08:02:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.19.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:8a:b5:12:42:db:e6:0d:22:6c:b1:85:a1:98:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 10 08:02:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a03ac2d13bc70b502776baae3f216917011ab475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:a9:78:71:24:21:f4:40:2b:96:12:74:ce:
9b:54:75:30:cd:1b:be:d1:f6:f3:5d:7b:bf:69:5f:
26:c2:8a:17:04:7c:88:43:7d:53:ac:83:cc:11:96:
ed:a5:1f:ce:44:65:f1:a1:3f:71:a7:dd:90:f2:a4:
9b:c6:54:0a:54:44:50:ba:95:3c:ba:32:d2:d7:ae:
13:cf:d4:95:de:6b:e6:4a:91:6d:ff:82:05:be:e8:
4b:c1:95:08:ec:e7:6a:76:f7:23:19:a2:21:1d:49:
73:e1:f0:a8:26:96:25:5d:0a:ca:c4:d0:2f:a9:a9:
40:b6:b3:f9:a1:35:34:89:0b:f0:e0:4a:c4:63:bb:
29:ca:29:27:4d:ba:aa:8e:14:9b:90:ab:bc:35:cb:
f3:62:9e:ab:d0:0f:c8:b4:1a:d0:61:61:4e:ed:bd:
a1:ce:d3:59:9a:b6:4f:80:61:d1:32:e7:d9:04:7f:
95:16:77:59:62:69:a1:4a:ba:c8:57:91:62:56:3d:
aa:1d:e6:92:50:ef:9f:13:e2:41:e9:2d:c6:fa:04:
b4:c8:6a:1b:23:d7:f5:1c:d5:7a:a8:62:c9:f0:33:
b9:83:f9:15:94:5c:0a:b6:38:b7:37:40:f6:59:23:
ea:7d:f1:26:01:d3:ac:91:12:77:b5:86:4a:93:5f:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3A:C2:D1:3B:C7:0B:50:27:76:BA:AE:3F:21:69:17:01:1A:B4:75
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oDrC0TvHC1AndrquPyFpFwEatHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.65.0/24
5.105.81.0/24
Signature Algorithm: sha256WithRSAEncryption
32:96:91:de:7a:f5:45:7b:f6:11:61:dc:85:ff:b4:bb:4e:84:
76:f0:97:d6:f4:e7:6b:e5:3a:03:e0:78:1b:95:6a:e3:9d:05:
60:75:4e:22:67:5a:59:da:3c:4f:10:55:09:cc:2a:1b:e4:61:
6f:57:c4:72:7d:a0:8d:9f:a3:11:63:85:bf:ce:8f:16:45:9c:
18:f8:71:22:5d:50:73:6a:9a:43:21:35:9c:71:03:cd:68:08:
36:1b:2a:ec:4b:4e:d1:dc:72:77:0f:f6:6e:26:45:76:4c:c5:
14:f4:71:3c:ff:b6:7a:71:d0:37:18:cc:75:1d:f5:df:b4:f8:
dd:6b:9f:e8:95:e9:34:ec:6b:9f:82:cf:b0:9a:fc:f6:6d:e4:
2e:bd:31:a7:86:82:8b:45:79:7f:d4:3b:f7:40:41:69:67:aa:
29:a4:19:a6:6f:b3:f5:47:b9:38:6f:4b:71:77:45:b5:9c:c9:
92:4e:b0:20:c0:f5:a1:fd:62:8d:14:40:b7:42:f3:b4:ac:3d:
38:18:20:55:81:91:c7:44:61:6d:63:de:21:3a:54:bc:8e:49:
c1:e0:9f:ff:f2:05:a7:27:31:9c:47:82:c4:48:d4:b2:43:f1:
94:ae:f7:eb:34:5f:13:55:c2:9e:70:51:0a:e6:27:f9:5a:2e:
1e:2c:49:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org