Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/owA1Jy67DH0RMnN-xoW9MUkO-HU.roa
File: owA1Jy67DH0RMnN-xoW9MUkO-HU.roa (raw, json)
Hash identifier: nVvHTUzJH0wQkzJy59Mtz8+SRSDc4M2T5hTl7fZSNRI=
Subject key identifier: A3:00:35:27:2E:BB:0C:7D:11:32:73:7E:C6:85:BD:31:49:0E:F8:75
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186E43B275B64F6465325A1B987413303BD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/owA1Jy67DH0RMnN-xoW9MUkO-HU.roa
Signing time: Wed 15 Mar 2023 07:45:27 +0000
ROA not before: Wed 15 Mar 2023 07:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.105.250.0/24 maxlen: 24
5.105.251.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.254.0/24 maxlen: 24
5.105.160.0/24 maxlen: 24
5.105.191.0/24 maxlen: 24
5.105.190.0/24 maxlen: 24
5.105.192.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.194.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:3b:27:5b:64:f6:46:53:25:a1:b9:87:41:33:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 15 07:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a30035272ebb0c7d1132737ec685bd31490ef875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:bb:43:24:ee:80:d0:67:01:dd:35:62:5f:
e7:f7:d2:37:a5:9d:58:eb:65:7b:61:da:48:aa:d3:
7e:b5:ab:3c:97:1c:72:95:ac:24:74:2b:24:d5:bd:
4c:12:23:63:8a:8b:55:4f:c8:9c:df:01:a2:9a:28:
25:d7:4d:42:4a:56:af:af:ec:71:c1:88:c9:1a:4f:
94:84:7a:cd:4b:8c:72:1c:1f:26:c2:95:19:0e:ea:
a6:6b:32:54:99:7c:e7:36:3c:3d:ac:c0:9a:58:c7:
eb:12:4b:a3:41:ea:c5:13:f3:c4:5d:dc:12:7f:e5:
3a:9b:dd:d9:33:b2:b9:3e:44:dd:15:83:59:a3:28:
54:61:a2:ef:d7:b0:d6:9d:c0:3f:02:18:70:dd:67:
9f:2a:d4:a8:01:e7:5f:0d:82:3c:82:b2:01:ee:41:
69:12:51:35:00:0a:78:93:e7:19:be:47:27:17:e6:
46:9c:60:30:4c:70:f7:41:fa:31:dd:12:f9:e8:20:
72:7e:61:e4:ad:77:27:bc:5b:f9:77:37:d2:cf:7f:
07:52:90:e4:59:5a:6b:a5:a4:67:34:ec:3e:84:26:
ab:7d:d2:2c:35:d5:02:c0:c1:fe:e9:04:61:60:26:
8c:22:37:d5:0a:b7:e1:6b:9a:4d:b7:ac:da:a3:88:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:35:27:2E:BB:0C:7D:11:32:73:7E:C6:85:BD:31:49:0E:F8:75
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/owA1Jy67DH0RMnN-xoW9MUkO-HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.87.0-5.105.89.255
5.105.160.0/24
5.105.190.0-5.105.192.255
5.105.194.0/24
5.105.250.0/23
5.105.254.0/23
Signature Algorithm: sha256WithRSAEncryption
08:ac:56:6d:4c:30:c8:f1:35:cf:98:b9:da:e9:6f:fb:09:db:
fc:2c:06:c1:9b:82:54:ea:31:ad:02:8d:4f:32:17:10:f6:68:
79:3c:b5:80:9e:95:ba:c9:20:3f:92:90:1e:63:8c:67:4a:fb:
2e:d8:11:af:ca:4d:2b:f9:59:db:07:46:fb:37:09:6f:fa:33:
d3:33:30:4b:af:4b:92:0e:f8:1e:e2:9a:84:52:c9:1b:5d:9f:
dd:05:f8:b4:74:40:11:1a:22:2f:45:49:ca:3f:1f:54:fb:2e:
f4:b0:61:45:cd:3b:57:8f:eb:cd:34:7f:a4:4f:9b:4e:30:1b:
00:86:d1:0a:3d:9c:86:b6:c5:c9:85:59:da:18:55:cc:c8:2a:
f3:d1:b4:5a:43:cc:d4:30:79:5a:bd:28:d2:a4:43:33:9f:2f:
70:b5:d8:c8:0a:08:e7:51:e2:38:2e:ba:a6:86:66:85:19:fc:
bd:dc:5d:81:e7:c3:d7:1d:8d:09:24:a8:a0:35:b9:4d:4a:14:
0b:c8:0b:47:09:a0:c8:18:cb:d3:82:74:a6:c7:05:49:c8:dd:
de:72:75:7a:a4:2d:28:a4:9a:1c:54:d2:a7:d0:0a:d3:56:8a:
64:9d:b4:1d:c6:c1:38:98:79:c7:b2:2a:f3:15:b2:c4:56:e4:
e3:02:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org