Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/p3XhwlfpufWawb4XuLXoAmH0P8E.roa
File: p3XhwlfpufWawb4XuLXoAmH0P8E.roa (raw, json)
Hash identifier: pMGFVp/bBnvao87cGm6UKx0dPmjwdrJh5GcBYs98lQY=
Subject key identifier: A7:75:E1:C2:57:E9:B9:F5:9A:C1:BE:17:B8:B5:E8:02:61:F4:3F:C1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A5A54ABAD0D40F288D6630CF19B692801
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/p3XhwlfpufWawb4XuLXoAmH0P8E.roa
Signing time: Sun 03 Sep 2023 09:16:52 +0000
ROA not before: Sun 03 Sep 2023 09:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.105.128.0/24 maxlen: 24
5.105.160.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.114.0/23 maxlen: 24
5.105.248.0/23 maxlen: 24
5.105.250.0/24 maxlen: 24
5.105.251.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.254.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.191.0/24 maxlen: 24
5.105.190.0/24 maxlen: 24
5.105.192.0/24 maxlen: 24
5.105.194.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:54:ab:ad:0d:40:f2:88:d6:63:0c:f1:9b:69:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 3 09:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a775e1c257e9b9f59ac1be17b8b5e80261f43fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:34:7f:06:e3:57:cc:8b:36:85:cc:74:ab:
0c:6b:94:60:e7:1b:5e:8f:53:4b:e9:26:29:8e:be:
f3:c1:a4:7a:80:13:cb:ce:b2:40:c3:f6:29:72:f8:
03:bc:b5:e3:97:46:5d:e4:f6:24:c2:77:cb:64:0a:
b6:e7:a9:b8:f2:fe:d9:f1:96:5d:6c:ce:59:12:3b:
2c:50:b2:a5:31:71:25:d4:f6:aa:7b:57:93:eb:5f:
3b:5a:55:5b:ce:74:fc:39:1b:50:b1:49:8d:b6:e2:
25:8c:c3:0d:22:84:57:e2:d1:1b:ce:04:1f:c0:3f:
66:cf:19:1d:8b:8c:1a:77:53:02:06:bc:40:85:36:
4d:1a:a8:e1:36:d1:0d:cc:3b:aa:41:5e:a9:ef:40:
a9:14:e2:a1:f0:95:e1:bf:ad:e2:af:ce:a5:26:68:
f3:69:39:af:7f:ef:09:b0:42:6a:70:ba:4b:cf:b7:
fc:53:88:21:cf:cb:1c:29:a4:2b:b0:89:05:5a:0b:
4d:e1:b7:96:5a:fd:a8:80:a0:90:bf:ec:c2:6b:c0:
0b:60:06:e0:24:c5:d9:97:08:fb:2d:56:85:53:1b:
e9:50:eb:82:2f:40:11:28:ee:70:eb:99:d1:8c:ca:
fa:3a:c2:7e:dc:a3:49:9b:73:db:7c:d4:24:7e:4e:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:E1:C2:57:E9:B9:F5:9A:C1:BE:17:B8:B5:E8:02:61:F4:3F:C1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/p3XhwlfpufWawb4XuLXoAmH0P8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.86.0-5.105.89.255
5.105.110.0/24
5.105.114.0/23
5.105.128.0/24
5.105.160.0/24
5.105.176.0/24
5.105.190.0-5.105.192.255
5.105.194.0/24
5.105.206.0/24
5.105.248.0/22
5.105.254.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:5f:f7:15:fd:9a:cd:1f:0a:74:96:a7:76:8c:ba:f2:86:96:
71:2e:ec:30:f0:69:cb:45:1a:55:73:92:00:fa:76:e8:2d:6c:
73:50:39:fc:c9:f5:9c:aa:cb:e5:74:60:e8:3f:f6:97:42:50:
b4:34:61:4d:38:12:1e:7d:6f:1e:94:9f:b5:bf:64:6a:22:8c:
4a:d2:12:b9:2f:0d:47:4c:91:17:24:b2:da:21:a3:1a:52:94:
0a:46:5c:90:0f:0b:91:bc:4b:3d:46:55:2d:e9:c6:ce:d1:82:
50:b8:db:83:29:86:78:9f:39:9d:63:e3:e3:be:f4:51:a5:26:
94:a7:36:a9:68:cc:7b:27:14:9a:86:d0:d0:ce:58:a3:a6:f0:
60:ee:e4:d2:f1:ff:44:e4:86:77:ad:bb:25:00:0e:fa:2b:15:
0c:6e:16:3a:ef:d8:5c:83:ae:ee:77:1b:a0:90:39:f7:2e:52:
28:70:3a:8a:49:87:35:ca:15:80:13:f2:c3:c5:86:0b:ef:b2:
94:76:04:1b:1b:8f:50:24:aa:0a:00:1c:58:a0:29:be:43:4e:
a0:30:81:3b:3d:34:3b:d2:a8:65:e4:27:ea:17:c6:f0:78:99:
33:22:3f:79:1a:2f:b1:fd:f6:9a:3a:25:2c:a8:e0:86:0c:43:
de:0d:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 15:10:59 2023 by rpki-client on console-ams.rpki-client.org