Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t4dekIi33KBHI156ROQKdIsJZyc.roa
File: t4dekIi33KBHI156ROQKdIsJZyc.roa (raw, json)
Hash identifier: 6KzG80mE/ZUDN1BaQULSWSRcaIxN/AhLrmxD1L2QbCw=
Subject key identifier: B7:87:5E:90:88:B7:DC:A0:47:23:5E:7A:44:E4:0A:74:8B:09:67:27
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018709BBAD1AF07BD01C2166B9010EDAA4FB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t4dekIi33KBHI156ROQKdIsJZyc.roa
Signing time: Wed 22 Mar 2023 14:31:47 +0000
ROA not before: Wed 22 Mar 2023 14:31:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:bb:ad:1a:f0:7b:d0:1c:21:66:b9:01:0e:da:a4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 22 14:31:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7875e9088b7dca047235e7a44e40a748b096727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:0b:8c:a2:df:d8:08:5a:97:90:13:60:1c:
f2:d4:d6:ca:d2:52:fb:92:a4:2f:86:d6:5b:03:cd:
71:0d:b4:a0:90:7a:eb:b4:f8:89:89:b0:3e:08:c0:
51:cd:d7:4b:f5:55:b0:07:8f:c4:7e:06:5d:d3:f7:
17:ac:e6:a3:8f:6f:f0:11:42:e1:45:14:ee:38:7c:
eb:dd:1a:27:53:12:4d:43:75:f4:7a:aa:04:8b:48:
47:75:be:75:94:77:39:fa:cb:39:27:15:54:e9:69:
c7:f9:d4:7c:0c:a6:60:b3:bb:7e:86:fd:d8:93:09:
c0:4b:38:da:34:f9:bb:7d:c0:50:78:99:ed:2e:25:
db:2b:85:64:01:6f:6c:20:db:b0:05:16:4f:36:a4:
cc:b9:31:bb:68:65:7f:3f:2d:d1:1b:4e:80:75:a6:
61:3a:83:40:4d:c8:eb:63:f0:12:20:63:2b:1d:45:
02:32:5c:6d:c1:39:5e:8a:a7:d5:35:8d:78:53:d0:
c5:5e:e2:17:40:4f:bc:19:de:70:f5:ed:f1:a8:3e:
df:3e:bf:2f:e0:89:a9:5c:8d:fe:48:21:5a:26:67:
dc:31:b9:55:25:02:57:db:c3:f2:e7:05:d1:15:b0:
c4:02:cc:ab:32:90:bd:8d:ad:a3:96:bf:c7:9e:35:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:5E:90:88:B7:DC:A0:47:23:5E:7A:44:E4:0A:74:8B:09:67:27
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t4dekIi33KBHI156ROQKdIsJZyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/23
5.105.63.0/24
5.105.85.0/24
5.105.96.0/24
5.105.184.0/24
5.105.200.0/24
Signature Algorithm: sha256WithRSAEncryption
67:39:a9:8c:ab:3f:f5:d5:a3:c9:87:43:84:f0:4f:18:51:fd:
c3:33:7e:62:7e:1d:d6:28:d8:62:0c:e3:27:42:d8:f0:19:e5:
1e:57:31:f5:e7:5f:d7:21:b0:1d:50:40:87:25:46:b6:dc:9f:
ef:58:68:ea:61:c5:8a:fd:31:fb:e4:6e:c4:80:40:54:ad:a8:
e6:1c:ca:77:04:53:dc:f5:71:19:e8:4d:1d:2e:5f:0d:b0:dc:
af:36:7c:8e:0e:84:f6:a6:ac:4a:ad:09:1b:49:8c:b6:16:2f:
40:ad:e0:47:e7:63:19:ac:7e:1c:79:56:42:68:23:db:01:73:
ae:14:01:c7:12:b2:8d:34:3a:45:1d:2a:af:f0:b0:79:3e:6e:
31:13:88:ba:94:67:d0:c8:93:de:4b:3a:57:5c:39:f8:a4:1e:
9a:18:54:89:5c:36:46:d3:e0:31:3a:89:46:7c:6a:09:66:70:
08:23:8b:68:4f:74:79:d7:b2:75:a0:28:00:00:61:af:b5:57:
0d:0b:d1:44:78:bc:bb:34:73:38:e8:87:43:f4:49:a7:be:d5:
6f:c0:fd:b7:fc:f6:b5:ff:4e:66:6d:61:0c:ff:a3:56:3a:41:
8b:1b:ec:56:cc:6a:13:fe:38:2c:25:12:bc:71:d6:ce:65:cf:
f2:f3:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org