Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/q-LszG8O-2WNd9M7YgMndNkv5rU.roa
File: q-LszG8O-2WNd9M7YgMndNkv5rU.roa (raw, json)
Hash identifier: DUcDRyX4O4bkXMHBBnbpl0rg8Y+8dDUxqGvjfhRZ7jE=
Subject key identifier: AB:E2:EC:CC:6F:0E:FB:65:8D:77:D3:3B:62:03:27:74:D9:2F:E6:B5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185876D3EE98F5A791FF3AAC757A8FC4302
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/q-LszG8O-2WNd9M7YgMndNkv5rU.roa
Signing time: Fri 06 Jan 2023 14:12:41 +0000
ROA not before: Fri 06 Jan 2023 14:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.44.0/22 maxlen: 22
5.105.47.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.55.0/24 maxlen: 24
5.105.54.0/24 maxlen: 24
5.105.53.0/24 maxlen: 24
5.105.52.0/22 maxlen: 22
5.105.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:6d:3e:e9:8f:5a:79:1f:f3:aa:c7:57:a8:fc:43:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 6 14:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abe2eccc6f0efb658d77d33b62032774d92fe6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:d6:11:a2:8a:f2:34:9a:61:01:cb:b9:fb:
94:2c:fc:42:71:db:86:5f:c0:69:d7:0c:86:66:83:
7a:8b:e2:ce:e4:2a:a7:7c:f9:a8:03:d2:e4:f9:6f:
b7:ae:86:ea:b2:b8:d2:17:f7:27:f3:de:66:1f:37:
40:75:9e:b3:d7:30:9e:68:34:ad:21:20:61:62:48:
ea:48:bf:42:0a:6a:34:d5:01:90:f6:37:40:43:4f:
ba:fb:ea:e0:a2:de:b3:cf:59:5c:60:3e:c0:7a:57:
1f:bd:e9:c4:43:e2:e0:85:c5:77:9b:5c:15:97:2e:
e7:e1:7d:48:9f:bd:6a:1a:37:83:d3:7b:49:7e:5d:
09:01:c3:0f:a8:dd:8a:7c:64:3b:a4:84:78:17:2c:
0d:fb:b1:45:39:ca:d5:d8:53:76:2f:0a:44:ea:49:
17:6e:2a:ea:8e:9f:b0:e1:7d:cd:39:dd:48:c1:f9:
5d:51:06:3d:17:58:8e:73:3d:cd:71:12:af:bb:15:
61:85:76:e4:82:f2:b4:7d:e4:88:15:a8:3d:68:69:
6b:8b:c2:28:a3:52:f4:bf:4e:b4:15:b2:9a:da:15:
dc:7c:2d:4a:06:74:aa:e6:62:d3:65:ef:06:ad:ba:
74:c9:be:9a:6a:28:1f:0f:40:75:62:c4:90:72:70:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E2:EC:CC:6F:0E:FB:65:8D:77:D3:3B:62:03:27:74:D9:2F:E6:B5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/q-LszG8O-2WNd9M7YgMndNkv5rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.44.0/22
5.105.52.0/22
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c0:1f:4c:a4:59:43:2b:39:01:67:0a:ba:8b:2d:6d:98:e7:
68:d0:3c:8f:b0:29:e0:f6:56:b0:e0:d7:62:42:58:dd:e1:0c:
29:94:c6:93:95:68:b2:57:c5:89:6f:ba:2a:cb:55:dd:55:61:
fe:28:94:46:50:b2:07:0c:0a:23:72:05:54:6a:ac:00:1b:00:
3f:ad:b4:34:5d:b4:8c:ab:80:74:f9:9b:f3:f5:dc:97:74:79:
dc:8f:45:c1:14:89:1c:70:cb:d3:08:f5:0a:a7:59:36:26:60:
8c:36:7b:43:c2:74:56:43:54:4e:d2:34:de:ce:a8:1a:f1:de:
58:cc:a3:4d:cc:4e:20:b0:b9:82:26:05:f5:4d:ef:25:de:b1:
6f:c5:b8:d0:94:b0:1d:f0:3b:cc:b5:42:19:9b:32:20:1f:6a:
10:d4:cf:1e:1a:0d:3a:39:30:65:49:2a:98:83:68:e0:f6:2a:
52:34:45:13:6a:c0:e9:9c:c4:c6:29:25:04:50:32:25:c0:2b:
be:a9:15:0b:34:7d:a7:62:35:27:c5:5a:ba:c4:30:95:71:e3:
64:be:c7:5c:f2:84:b7:9e:e6:2f:b3:bc:e9:4a:c2:94:0c:60:
b7:24:72:cb:22:a9:0f:7e:d8:58:37:80:1f:7b:32:9f:d7:25:
66:aa:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org