Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/whgidz-R-YE27zjl8L89BxG7fhY.roa
File: whgidz-R-YE27zjl8L89BxG7fhY.roa (raw, json)
Hash identifier: +3ezq0PgzpdHB6BzKXVLqYuMotqgEChmP4gg9EtKGWI=
Subject key identifier: C2:18:22:77:3F:91:F9:81:36:EF:38:E5:F0:BF:3D:07:11:BB:7E:16
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186A68E01087691E175F7DEC12A0D3547EE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/whgidz-R-YE27zjl8L89BxG7fhY.roa
Signing time: Fri 03 Mar 2023 08:19:29 +0000
ROA not before: Fri 03 Mar 2023 08:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:8e:01:08:76:91:e1:75:f7:de:c1:2a:0d:35:47:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 3 08:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c21822773f91f98136ef38e5f0bf3d0711bb7e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:06:38:7e:f6:39:20:5e:a7:a8:69:8c:1c:
ad:c4:a4:d6:9f:56:0d:35:7c:46:28:80:58:4c:67:
f8:00:95:06:20:43:83:cc:09:f5:99:6b:72:af:92:
a5:11:67:96:ca:be:a7:91:9a:0c:82:6e:cc:09:21:
31:ea:1e:3e:c2:80:70:55:25:4a:7d:73:29:da:9c:
03:5d:2d:0c:e9:96:b9:50:06:e7:4a:93:63:e1:5a:
e0:03:ee:1b:f1:95:83:bb:2e:50:24:93:d1:f5:91:
02:07:6b:4d:98:b4:09:ec:ee:4c:b5:80:c8:c9:5a:
d8:47:d9:7f:b0:e7:59:1c:23:ba:4e:78:93:fa:c1:
db:b0:da:ab:c7:cf:85:94:d0:5d:e0:c5:80:e2:81:
9f:f6:66:0f:a6:24:fb:47:ae:bb:aa:72:6b:60:78:
21:9a:ee:96:b7:21:29:bf:66:29:06:0f:d2:58:7f:
a8:e7:de:d3:5c:93:a4:b6:31:28:1c:a5:a0:9d:da:
a0:21:57:df:fb:19:af:bb:49:22:04:72:36:f1:3c:
c3:65:d1:0e:c4:98:b6:87:f1:66:e3:19:fc:62:60:
3c:12:91:cc:d6:f3:0f:59:1f:c9:84:e8:97:7b:c4:
8f:60:7e:d8:9e:68:7d:85:eb:79:71:c3:7e:b6:ab:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:22:77:3F:91:F9:81:36:EF:38:E5:F0:BF:3D:07:11:BB:7E:16
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/whgidz-R-YE27zjl8L89BxG7fhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.82.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.156.0/23
5.105.168.0/24
5.105.172.0/24
5.105.197.0/24
5.105.214.0/24
5.105.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8b:23:3a:9c:7e:2a:b8:0e:df:38:f0:d2:17:30:c2:43:3b:
8c:3b:c3:52:dc:15:dc:29:cf:28:27:d0:ca:6c:40:71:72:eb:
cb:05:f9:cf:66:74:b9:be:bc:db:f2:59:aa:5f:13:82:91:db:
de:45:6f:6e:d5:4c:88:dd:3d:38:38:72:73:12:94:18:37:28:
f3:52:19:ab:32:92:7c:60:24:89:3f:1a:f1:b9:63:2c:1b:77:
08:c1:b3:3c:70:ae:dd:52:ec:00:fd:3e:a8:ab:11:ac:c9:62:
26:7b:3b:9a:33:9a:f6:41:78:3e:43:2f:00:2e:cf:5f:e2:ae:
e8:45:81:47:a6:3b:e0:ef:5f:72:6d:41:79:02:31:4f:80:7c:
ff:26:68:fd:a7:21:95:54:dd:e0:e8:e9:7a:50:4d:12:e1:e3:
2f:72:3c:96:e8:cc:c0:bd:8a:b9:3a:10:a7:39:52:d9:dc:1c:
1f:da:e1:93:1c:58:1e:00:17:c0:8e:9a:a0:cd:a1:6c:1b:86:
4a:7f:7a:f7:69:e3:b6:f4:8d:01:8e:7c:37:20:0f:af:f2:32:
27:0c:a0:19:dc:c7:c4:32:67:5e:ff:91:4f:e3:02:c2:3e:68:
b8:75:ad:6f:a7:12:6a:b4:fe:59:26:90:eb:76:82:4f:98:4e:
0a:af:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org