Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/r9d0PwUL_1-pO9llAWbsMVEOKk8.roa
File: r9d0PwUL_1-pO9llAWbsMVEOKk8.roa (raw, json)
Hash identifier: VVarJvn4L91sluI8dYSmoVHw8SAMvlweSYhSKrSq+tc=
Subject key identifier: AF:D7:74:3F:05:0B:FF:5F:A9:3B:D9:65:01:66:EC:31:51:0E:2A:4F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01860CF9A416BA811293A3FFE032F1D46FAD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/r9d0PwUL_1-pO9llAWbsMVEOKk8.roa
Signing time: Wed 01 Feb 2023 12:35:32 +0000
ROA not before: Wed 01 Feb 2023 12:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:f9:a4:16:ba:81:12:93:a3:ff:e0:32:f1:d4:6f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 1 12:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afd7743f050bff5fa93bd9650166ec31510e2a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:ec:a4:72:98:e2:4f:76:0f:25:1a:af:0f:
49:37:40:b2:2e:3f:db:1b:5f:ad:85:1f:4b:7e:2f:
d0:4b:56:f3:1f:df:66:c6:3e:90:28:da:51:91:0e:
eb:1c:ad:8b:84:89:2d:49:a6:c0:25:58:f8:2f:30:
ea:b8:29:2b:1e:e6:bb:d0:60:78:fe:86:75:90:76:
4c:25:92:82:57:8d:c3:3f:30:93:7b:d1:96:db:17:
c8:48:0e:ac:b6:88:19:42:0b:d5:de:98:c4:3a:ae:
43:eb:31:d3:0e:1b:6c:7c:b6:b8:51:26:a7:e8:eb:
57:e3:21:bd:15:0a:17:db:70:a9:df:d3:28:a6:64:
58:68:92:df:93:01:f7:8f:80:a5:37:be:83:77:b4:
24:8c:68:99:40:bb:a5:10:4f:19:c9:df:d7:21:c9:
b1:92:9d:41:91:41:9d:19:32:36:3b:b2:5c:ef:85:
56:b1:d5:72:ae:50:e5:13:7a:1b:2e:46:af:37:88:
25:ce:9a:33:45:06:36:0d:8e:ee:76:1f:ea:11:b8:
13:b2:7c:4a:ce:33:03:07:95:28:42:b0:3b:df:c7:
37:ac:0c:5c:b8:16:d4:38:f3:a5:77:e9:76:1b:46:
e1:05:ed:4e:65:66:37:29:f7:6b:29:1d:11:73:ff:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:74:3F:05:0B:FF:5F:A9:3B:D9:65:01:66:EC:31:51:0E:2A:4F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/r9d0PwUL_1-pO9llAWbsMVEOKk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0-5.105.32.255
5.105.38.0/23
5.105.63.0/24
5.105.96.0/24
5.105.136.0/24
5.105.184.0/24
5.105.200.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a0:05:8e:7a:d9:a1:71:e9:a8:00:37:4a:12:d5:56:65:bd:
71:e3:30:9b:f4:d3:9f:08:43:66:7c:c8:dc:f6:cd:6b:1b:d0:
f8:a7:48:64:6d:3b:d1:79:b4:58:cd:76:2b:72:c0:ec:66:f3:
dd:c5:8c:de:8a:1a:14:79:17:90:66:53:77:9d:c0:48:a7:30:
a0:f0:34:3f:6c:0e:06:61:16:0f:81:03:e7:cd:2f:67:5e:46:
b9:d5:fd:4b:1a:56:9d:45:50:93:48:57:a1:f8:5a:50:1d:e8:
5c:d9:60:bd:48:0a:58:12:fe:41:9c:6d:5b:1c:43:0a:5d:4e:
63:ed:67:c6:75:5a:8b:57:ea:57:d5:39:f8:a8:1f:fd:96:03:
95:78:7e:ed:7f:74:7d:26:da:c5:05:88:a0:f9:dc:b3:1f:b3:
5c:dc:b0:9d:5a:8c:1e:dc:95:6a:71:0d:f9:a0:01:70:83:55:
66:58:96:cc:b2:5f:be:2e:b4:01:5e:f7:22:d8:65:29:af:88:
85:7e:06:5b:d9:85:09:a6:99:43:1f:7f:f2:76:9c:0a:a2:26:
a0:84:37:5b:8d:bf:0e:c0:5a:07:8b:96:c3:e3:90:b4:97:b4:
db:ab:16:66:ae:81:2d:db:89:3b:2c:c4:93:96:6a:02:b1:3d:
ad:5b:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org