Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uP5L-15LTBI50g6DKzEyWmrUCP8.roa
File: uP5L-15LTBI50g6DKzEyWmrUCP8.roa (raw, json)
Hash identifier: WNjU3dUmluTjx6M2jYZSddJFpgLyTaxenpqYwV1Kb6A=
Subject key identifier: B8:FE:4B:FB:5E:4B:4C:12:39:D2:0E:83:2B:31:32:5A:6A:D4:08:FF
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186380A0D5FC2792C404D7D05C4A311F640
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uP5L-15LTBI50g6DKzEyWmrUCP8.roa
Signing time: Thu 09 Feb 2023 21:17:08 +0000
ROA not before: Thu 09 Feb 2023 21:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.138.0/23 maxlen: 24
5.105.142.0/23 maxlen: 24
5.105.248.0/23 maxlen: 24
5.105.164.0/23 maxlen: 24
5.105.68.0/23 maxlen: 24
5.105.186.0/23 maxlen: 24
5.105.198.0/23 maxlen: 24
5.105.206.0/23 maxlen: 24
5.105.202.0/23 maxlen: 24
5.105.112.0/23 maxlen: 24
5.105.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 21:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:0a:0d:5f:c2:79:2c:40:4d:7d:05:c4:a3:11:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 9 21:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8fe4bfb5e4b4c1239d20e832b31325a6ad408ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:99:eb:a5:9e:16:0c:59:31:5d:6f:f4:4c:
c3:0c:21:08:57:43:74:a8:30:d4:a0:f6:1f:62:66:
e6:5a:11:3d:41:1b:a4:92:88:f6:dd:3b:2a:4b:01:
4c:36:15:eb:7b:bd:da:84:93:48:03:e2:6f:16:b9:
f4:b2:93:62:ad:24:ef:03:b3:79:9f:85:38:36:84:
86:2c:87:52:ed:ca:27:b5:7c:ac:82:38:89:0e:b9:
6b:5e:f4:c0:81:da:cd:ab:24:4f:71:8d:20:0e:e8:
c6:f4:3d:f5:e8:99:6f:fb:a6:20:5f:da:1d:2f:72:
d0:76:30:c3:23:10:ec:d2:a7:cb:8d:f9:4e:04:bd:
2c:63:d7:13:74:d6:15:15:a2:05:b2:c4:b2:6d:b4:
75:58:9f:7b:85:2e:0a:17:93:42:5a:35:4c:6d:57:
22:ee:74:a1:38:05:43:31:f1:84:a6:25:89:fe:49:
af:09:12:f9:cf:98:7e:2d:7e:25:2a:4c:a4:ed:07:
c5:ed:74:6f:50:ff:7b:f6:fa:7d:ec:8d:79:7e:03:
d7:11:3d:34:c2:d6:1b:31:8e:3c:04:bd:4e:7e:b7:
5c:67:e8:70:c2:d5:85:b2:22:66:50:5d:b3:6a:8f:
83:bc:3f:cd:42:51:82:19:49:12:95:24:ab:70:31:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FE:4B:FB:5E:4B:4C:12:39:D2:0E:83:2B:31:32:5A:6A:D4:08:FF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uP5L-15LTBI50g6DKzEyWmrUCP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/23
5.105.112.0/22
5.105.138.0/23
5.105.142.0/23
5.105.164.0/23
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:11:17:db:73:e6:69:69:d4:3a:c2:f0:41:9c:ab:f0:a0:fe:
a0:23:8a:2a:94:14:72:82:51:c4:5b:38:28:a4:75:82:b4:6e:
95:e9:9a:4b:55:97:fa:c3:cb:08:85:ac:a3:0d:73:71:01:2b:
3e:bb:76:fc:01:ba:c5:22:ba:1a:d9:24:9c:89:c8:54:03:5e:
74:53:7d:b1:a2:59:8d:85:d9:a5:d1:40:1d:7c:5e:19:5e:b6:
09:5b:85:e9:03:a1:03:5d:a0:42:aa:42:a9:8c:45:b3:02:a4:
12:35:55:f7:6e:6e:43:7e:6f:ad:d7:94:d5:d8:4a:bc:ac:6e:
bc:2f:1e:fa:d8:af:b3:1a:77:ea:61:dc:bc:80:9a:20:29:be:
f2:8c:8f:f4:e8:03:a5:95:66:44:95:36:bb:26:07:0e:30:c1:
0b:46:cb:d1:c6:03:1b:60:53:d3:47:db:f9:03:4c:34:d2:a4:
52:b3:63:4a:fb:31:b1:04:f1:d9:f4:3e:95:4c:f6:52:8c:0e:
b5:74:a0:57:74:50:ee:97:24:6d:af:3a:01:9a:3c:05:f9:2f:
99:d5:0e:bb:34:0c:b5:42:da:dd:3c:7b:f5:a4:fb:12:b1:07:
8f:93:4b:eb:cb:fd:d0:1f:a5:5c:8c:c4:d2:39:d6:96:dc:ee:
df:f3:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:59 2024 by rpki-client on console-ams.rpki-client.org