Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qjOamkPCXHe10g5lAo0-OOne4GY.roa
File: qjOamkPCXHe10g5lAo0-OOne4GY.roa (raw, json)
Hash identifier: 1U9NyT/sWHdRJB+rmWR08bqA1Bc67UPPDW9HTDJTK1g=
Subject key identifier: AA:33:9A:9A:43:C2:5C:77:B5:D2:0E:65:02:8D:3E:38:E9:DE:E0:66
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A85B4D4F3EC2CF44B888E94340B576F7E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qjOamkPCXHe10g5lAo0-OOne4GY.roa
Signing time: Mon 11 Sep 2023 19:25:35 +0000
ROA not before: Mon 11 Sep 2023 19:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
5.105.248.0/23 maxlen: 24
217.67.78.0/23 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:b4:d4:f3:ec:2c:f4:4b:88:8e:94:34:0b:57:6f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 11 19:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa339a9a43c25c77b5d20e65028d3e38e9dee066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:b6:15:f0:71:3b:f6:43:4d:f1:6d:70:93:
dc:3e:ee:bf:7c:0c:a4:0b:00:d7:29:01:03:00:20:
2a:1d:88:b3:23:f2:ce:5c:e3:f3:46:02:c5:61:45:
4e:0a:7b:d9:e4:b2:c6:47:b2:45:e2:07:12:8a:bd:
ee:6c:41:b4:b7:76:4c:fe:af:79:bc:33:ec:1b:17:
72:82:7d:10:f5:b9:4e:2f:be:ad:cf:21:55:d5:ed:
d0:55:38:a3:12:65:e5:80:a6:ab:af:d6:32:ed:0e:
e1:e7:5a:51:db:15:0c:e6:9b:6d:ab:20:8f:9f:96:
5f:c7:ae:d0:c4:9c:54:5c:82:3c:a9:93:b9:85:31:
a3:6a:ae:2b:69:2c:ec:57:3f:1f:bb:b4:fc:64:16:
67:fc:d0:83:51:72:0b:27:9f:a9:ab:7f:d8:3d:85:
bf:3a:27:c6:7c:d9:d1:fb:7f:68:c4:d1:11:e0:cb:
28:54:b8:47:d0:5b:9e:49:91:ef:0c:e5:5f:3b:e2:
2c:fa:a3:95:ea:77:a6:f3:4a:7b:da:08:a4:87:21:
79:45:41:9c:b2:70:34:f9:70:fe:5a:09:00:70:2d:
33:81:f0:f2:d2:bd:d4:0c:32:62:d5:f7:07:93:c5:
65:c0:53:33:ad:25:61:32:db:9e:df:73:e4:42:ab:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:9A:9A:43:C2:5C:77:B5:D2:0E:65:02:8D:3E:38:E9:DE:E0:66
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qjOamkPCXHe10g5lAo0-OOne4GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.22.0/24
5.105.110.0/24
5.105.114.0/23
5.105.128.0/24
5.105.181.0-5.105.182.255
5.105.206.0/24
5.105.248.0/23
217.67.78.0/23
Signature Algorithm: sha256WithRSAEncryption
64:13:04:3c:72:03:2c:27:b5:d5:cb:a2:10:b0:23:e3:76:6b:
f6:95:91:44:3a:7e:29:42:6a:1b:09:47:20:f5:00:db:47:ab:
29:d2:c0:3e:ba:01:3d:07:f9:44:94:3e:c6:4f:f6:15:95:66:
77:0c:ee:dc:79:2e:bf:e9:08:a6:f1:b5:0d:21:54:80:31:91:
a2:56:fa:10:69:84:19:2d:fd:23:da:85:75:10:b6:cf:04:35:
cc:ab:35:ef:57:15:db:e3:e7:97:fd:9e:8d:b5:81:48:c1:42:
c4:7f:e6:59:25:db:68:38:30:38:c5:59:2b:e9:5d:0f:d7:ad:
5e:ec:c2:ce:4f:1c:5e:22:f0:0a:4e:dc:51:89:85:c1:11:68:
c9:db:a8:99:9a:e0:1e:8d:35:ab:55:60:f5:af:37:d9:eb:5d:
b8:42:4c:0c:86:e6:be:88:07:f5:29:cf:7d:ff:a7:fb:b1:b0:
31:a8:0b:45:7d:ef:16:7f:c2:f6:30:91:80:05:d8:76:ab:23:
95:c2:78:30:e4:c9:7e:31:ac:85:78:db:3b:18:99:d5:37:58:
b0:b0:6f:55:a8:1a:d8:bf:03:ee:67:26:14:f9:a0:0a:0a:a6:
9e:e9:d9:c5:a6:e8:4e:76:2e:18:23:36:df:16:93:08:71:c5:
7b:46:62:b8
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 13 22:23:31 2023 by rpki-client on console-fra.rpki-client.org