Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pr1wEZ32QoiAhL1T9VN3tAFsbCM.roa
File: pr1wEZ32QoiAhL1T9VN3tAFsbCM.roa (raw, json)
Hash identifier: QJmj+253nm1aUy/KlOxAmWvYPg1eEXVWUm2JVF5Nai8=
Subject key identifier: A6:BD:70:11:9D:F6:42:88:80:84:BD:53:F5:53:77:B4:01:6C:6C:23
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01872205EEA3EB11A937AE6BCC3130CD91AD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pr1wEZ32QoiAhL1T9VN3tAFsbCM.roa
Signing time: Mon 27 Mar 2023 07:43:46 +0000
ROA not before: Mon 27 Mar 2023 07:43:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.242.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:05:ee:a3:eb:11:a9:37:ae:6b:cc:31:30:cd:91:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 27 07:43:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6bd70119df642888084bd53f55377b4016c6c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:d0:96:fc:7a:60:a9:0a:89:84:1a:c6:0e:
c9:54:a8:ac:19:a9:41:9e:97:09:19:d9:67:9b:8d:
d6:ea:2a:f5:09:a8:26:f8:de:00:75:66:6a:46:71:
2b:9e:9d:b4:6a:18:47:74:d7:ef:c9:fd:14:ad:3a:
aa:4b:7a:72:57:91:1c:1d:e3:48:8a:63:8c:8e:d0:
41:08:77:c6:e4:8a:cb:57:8f:17:4a:09:b5:e0:cf:
69:e4:54:05:e1:37:07:46:8e:1b:da:35:e9:f7:9d:
c5:39:74:95:98:0f:21:8b:3e:4d:1a:14:59:e6:7d:
7f:ef:9c:d6:bd:0e:b5:eb:da:f1:a8:2a:5e:10:e4:
f1:ee:c8:32:df:82:b9:0e:18:a5:f1:61:11:b5:a6:
0f:fe:bf:22:d4:39:c1:b9:05:e7:e2:76:b2:8d:9b:
b4:36:8a:60:e7:fb:37:bc:98:90:51:9f:1c:9e:5d:
5c:05:65:e6:21:ed:37:19:f2:78:81:2b:76:67:ee:
7d:a9:5d:8e:5e:50:0a:1d:3e:0d:f9:6a:d8:7b:d8:
78:8f:7b:b4:dc:90:a9:1d:31:a5:33:03:c6:f9:6d:
4e:da:0b:3f:60:35:b8:6b:41:28:3e:60:a5:59:f5:
08:f2:ce:fc:2a:7f:a2:46:69:c0:6d:79:c3:dc:00:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BD:70:11:9D:F6:42:88:80:84:BD:53:F5:53:77:B4:01:6C:6C:23
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pr1wEZ32QoiAhL1T9VN3tAFsbCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.169.0/24
5.105.185.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3f:da:29:89:19:ed:8b:55:15:38:a9:4a:b6:f1:3b:01:15:
b4:5a:c6:d2:e6:ca:f8:70:d5:7a:88:24:15:2f:09:3f:04:72:
fb:41:ac:52:00:92:04:9c:32:cc:88:f6:26:ff:80:20:38:cc:
73:88:49:9f:ab:8b:4b:fe:5e:e2:21:7a:17:d3:7c:89:f9:b6:
f4:a9:29:0a:0c:40:ad:20:39:c5:24:38:4c:8f:0f:5d:1c:d7:
bd:72:8b:5d:f8:34:50:38:e1:f6:85:ba:c8:a9:5a:b9:61:89:
2c:a8:55:5e:de:39:02:5f:3a:98:47:d2:b0:d8:fb:f2:ca:03:
51:98:cd:55:5d:d5:1b:64:c3:ac:77:fe:e6:1c:f4:e9:02:3e:
44:e1:d7:1b:ae:75:1c:1a:38:d9:98:75:cd:29:59:63:67:84:
22:a3:36:7c:73:5b:48:05:e9:85:82:06:39:8d:8b:aa:97:0a:
28:2e:74:f0:db:44:6a:9d:67:ef:ad:47:6c:99:48:e9:1c:6b:
35:ce:cc:e2:c5:94:76:a4:4a:41:bc:6e:b2:58:79:bc:2e:43:
94:9f:09:70:0e:da:08:e2:f5:c3:c3:af:0c:21:16:e5:86:d1:
fa:f4:7a:e6:8c:30:b1:59:80:bd:d2:68:f8:fd:61:4f:ba:db:
6c:23:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org