Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t7nV2Sjn9kwZrQpSO0uDZoaOges.roa
File: t7nV2Sjn9kwZrQpSO0uDZoaOges.roa (raw, json)
Hash identifier: NhioH9gDFUh94JKGukBVsZy1TtmS1+NrMcPuvxvxLvQ=
Subject key identifier: B7:B9:D5:D9:28:E7:F6:4C:19:AD:0A:52:3B:4B:83:66:86:8E:81:EB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186834B9B338E44BA3D18863C30FEAEAC71
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t7nV2Sjn9kwZrQpSO0uDZoaOges.roa
Signing time: Fri 24 Feb 2023 12:00:15 +0000
ROA not before: Fri 24 Feb 2023 12:00:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60458
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:4b:9b:33:8e:44:ba:3d:18:86:3c:30:fe:ae:ac:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 12:00:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b9d5d928e7f64c19ad0a523b4b8366868e81eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:43:3d:fd:3d:a7:ed:92:a5:a2:d5:9a:61:
51:27:98:61:44:a2:58:d8:ed:20:0f:94:d7:fc:55:
2e:2b:07:51:9e:78:21:c1:99:ac:c9:c1:fc:14:12:
3e:d7:e8:0e:f3:5f:35:90:c2:56:6a:50:74:a7:87:
b8:53:fb:15:72:2c:62:a8:a2:e1:c5:78:73:0b:67:
eb:d5:6d:7c:d0:99:73:f7:93:2f:c7:e8:82:da:29:
f4:b8:04:12:8a:20:56:a6:5b:b9:3d:17:87:d8:b9:
1d:6a:d0:3c:ee:77:6a:e9:f1:43:b8:bd:1f:30:7c:
64:30:f2:6c:63:80:ee:68:fa:f6:2d:c8:99:e8:21:
49:3d:d5:38:b4:a7:71:78:8f:31:2d:b4:e3:ca:25:
4b:43:79:ca:67:54:91:2c:b6:87:18:3f:c3:59:6b:
d9:6e:4c:b8:e2:a3:8b:52:31:15:11:4a:a7:cf:81:
15:2e:e1:0f:a4:51:33:c8:3d:4a:6c:71:60:93:7d:
39:94:0e:4f:38:1e:20:13:ac:90:93:22:54:c1:99:
08:4e:3a:b6:47:76:81:20:dc:50:65:f8:83:19:5d:
93:7e:40:46:33:f1:5c:5b:bc:f1:79:4d:05:69:0a:
91:25:88:a1:2e:30:02:fe:69:91:fc:69:74:0b:08:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:D5:D9:28:E7:F6:4C:19:AD:0A:52:3B:4B:83:66:86:8E:81:EB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/t7nV2Sjn9kwZrQpSO0uDZoaOges.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.130.0/24
5.105.136.0/24
5.105.195.0/24
5.105.204.0/24
5.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:76:78:b4:a6:b4:0b:12:6f:3e:a2:d5:ee:45:4f:a9:c3:3a:
59:45:b6:30:db:3c:bf:52:2d:11:31:a4:28:b1:13:36:42:80:
c7:0a:68:34:9f:d2:85:f6:25:1b:2c:a3:3e:c0:92:42:58:ef:
ce:05:f2:f2:6b:02:b2:70:1f:b6:a1:8e:f0:60:0c:83:80:aa:
2f:1b:7b:ea:f1:36:df:fb:5e:7d:34:f0:d2:8b:83:48:fd:5e:
72:4b:77:a0:81:51:a7:92:c7:d7:81:23:ed:63:ce:9c:45:67:
fb:4e:90:c9:f9:c5:ab:e6:17:f4:85:99:d5:61:e0:cf:01:ff:
c8:19:a4:c9:e9:7b:61:8a:21:35:c2:87:3f:ef:21:2b:cc:4a:
d4:e8:38:82:dc:f0:92:f4:9d:6c:6a:ae:9a:80:4f:4d:ad:25:
38:09:66:40:93:62:ac:5a:61:c9:05:65:3f:6b:bb:26:d8:31:
ea:97:70:25:77:42:fb:41:89:61:33:b6:15:ae:14:2a:a6:a3:
9e:a2:3e:7e:ab:95:12:80:2e:9e:f9:59:c2:9c:73:35:34:30:
4e:f5:4b:de:70:58:f1:1d:73:58:3c:a1:79:a3:e4:ea:1d:f5:
23:f2:b2:cf:53:b8:28:d1:15:f0:9d:5d:f9:39:5f:7f:cf:f7:
fc:17:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org