Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/sOCi6ZRrp0e5cIrHE_Ry9eyZp0A.roa
File: sOCi6ZRrp0e5cIrHE_Ry9eyZp0A.roa (raw, json)
Hash identifier: zc8Lklm+FRs8R37xv6027+eHAk3DO7VhTcCwk1wrjlg=
Subject key identifier: B0:E0:A2:E9:94:6B:A7:47:B9:70:8A:C7:13:F4:72:F5:EC:99:A7:40
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018731934BEF3AD388EE5CB4483BA9E3990C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/sOCi6ZRrp0e5cIrHE_Ry9eyZp0A.roa
Signing time: Thu 30 Mar 2023 08:12:29 +0000
ROA not before: Thu 30 Mar 2023 08:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.26.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:93:4b:ef:3a:d3:88:ee:5c:b4:48:3b:a9:e3:99:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 30 08:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0e0a2e9946ba747b9708ac713f472f5ec99a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:05:73:1e:e2:6c:b5:f4:ee:ba:d0:9b:17:
de:87:4c:b2:93:5a:49:c7:10:b6:29:77:f9:bd:a6:
21:6e:92:ce:52:0c:8d:bb:c2:39:17:9c:f0:b9:91:
95:da:bd:fc:cf:6b:62:a3:65:56:95:b3:c4:5d:ca:
77:7a:65:be:9f:e7:eb:84:4b:75:6a:72:60:f3:17:
ac:5f:9b:0b:7f:d0:f7:31:27:14:d1:5a:26:49:8c:
4c:13:a7:43:8f:9b:88:ca:24:1a:17:1a:ff:e7:bd:
48:18:20:b4:a6:42:d2:3d:78:3e:07:43:ff:d7:1d:
8b:b6:aa:ed:4f:aa:89:7a:55:3b:95:6f:27:1b:8c:
0d:25:61:24:df:33:b6:36:96:46:46:fc:7f:5b:23:
ae:4b:4c:2d:85:38:c7:8f:e2:88:8c:4a:a1:30:57:
43:a6:c3:ed:2f:ee:30:1b:1c:93:c5:fe:b8:e9:0e:
74:c0:d7:1c:2e:39:f2:a2:6a:06:55:75:ba:36:98:
2b:98:d5:a0:16:d8:a9:7c:f4:b7:35:bf:0e:07:19:
9e:10:86:b3:49:c2:a3:cf:6e:e5:26:67:2a:d1:6b:
ee:7f:08:00:50:1d:de:5d:8a:5f:ca:38:30:26:0d:
27:2c:a9:4f:d3:64:72:93:37:75:f2:b2:aa:85:14:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:A2:E9:94:6B:A7:47:B9:70:8A:C7:13:F4:72:F5:EC:99:A7:40
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/sOCi6ZRrp0e5cIrHE_Ry9eyZp0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.26.0/24
5.105.59.0/24
5.105.75.0/24
5.105.80.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d4:5a:47:27:d6:88:08:cf:69:28:e8:fa:60:45:af:d3:14:
f0:fb:fd:81:ab:95:3d:b4:3b:ef:e2:ef:7a:7a:82:8b:26:b1:
83:45:38:54:5c:43:95:1a:1b:5b:01:24:99:84:2e:cf:ac:5e:
3e:31:af:8c:63:24:96:ef:2b:f3:1c:91:76:66:56:5f:bb:51:
f8:b8:20:71:7f:a6:5d:94:06:92:f5:5b:9f:0a:d3:de:b2:68:
12:31:2c:f1:55:36:e0:1a:b0:97:54:2b:98:3d:c3:f1:67:f0:
a2:06:b6:49:7c:62:14:9e:19:77:19:73:b0:f2:42:81:80:1a:
bd:42:fb:65:91:30:79:f7:8f:70:07:7a:7e:9b:66:fc:01:f9:
d5:82:72:85:06:0c:61:65:3a:6a:b8:b4:d3:31:85:be:9e:79:
29:30:07:94:af:75:ab:60:c3:79:73:50:ba:6b:00:a9:53:9b:
44:a6:65:07:1e:76:b3:0b:da:e6:72:8a:43:ac:70:e8:32:64:
d2:5a:9d:4d:47:33:f0:c5:5c:16:78:b9:f1:38:ec:73:d1:28:
9b:e8:6e:7b:c7:2b:8a:40:09:d5:6d:8d:f9:f2:4b:be:77:6d:
73:05:27:ec:ff:b9:11:12:b5:be:b5:b0:d2:fb:ad:9a:c3:6f:
2b:0d:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org