Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xZBIw0Ug6Aq6dIJowrLh7GvF-Us.roa
File: xZBIw0Ug6Aq6dIJowrLh7GvF-Us.roa (raw, json)
Hash identifier: DE5IHEVzXz2jB5nRE+MsArX+xAgOA/8iQM/AoxRWtsQ=
Subject key identifier: C5:90:48:C3:45:20:E8:0A:BA:74:82:68:C2:B2:E1:EC:6B:C5:F9:4B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01859739189553E5AD19551C0A70C961FB7D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xZBIw0Ug6Aq6dIJowrLh7GvF-Us.roa
Signing time: Mon 09 Jan 2023 15:49:39 +0000
ROA not before: Mon 09 Jan 2023 15:49:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:39:18:95:53:e5:ad:19:55:1c:0a:70:c9:61:fb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 9 15:49:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c59048c34520e80aba748268c2b2e1ec6bc5f94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:e9:1e:c8:d6:99:9b:de:87:6a:a3:39:45:
2e:32:04:df:81:cb:eb:2f:04:79:23:0f:cf:b6:1c:
34:9c:3a:72:dd:87:04:96:2a:09:05:e7:2d:d4:a6:
c0:65:5a:fd:ac:09:6a:b8:09:1b:10:1b:26:37:f0:
cd:7c:bb:9f:ef:67:4d:24:92:51:81:b2:c1:9e:68:
03:e0:66:00:4e:70:70:3d:82:7f:70:76:92:b3:d9:
bb:20:d8:b3:d1:c7:c8:4f:4f:93:10:a0:5a:ed:2a:
33:28:1d:f1:a3:6f:10:68:d9:f2:6c:5d:9b:fc:a3:
a2:db:86:96:c0:eb:6f:e8:bc:33:d5:2a:12:7f:bd:
66:03:f0:d1:ec:e6:e7:24:96:d1:ce:f1:d7:d8:39:
75:19:10:dc:3a:83:2f:17:c3:35:c3:c0:cb:62:3c:
61:51:a0:64:f1:31:e3:ff:0e:08:20:23:a3:99:76:
c6:e1:ea:39:58:21:2d:0d:49:b1:cd:85:fd:bf:25:
21:cb:80:db:48:bb:30:60:4d:69:32:f6:14:ea:ba:
44:d1:5c:0b:5f:20:58:30:c6:1d:7b:3f:b0:c6:4a:
9b:5c:38:7a:ca:8a:16:1d:e7:c6:b1:54:ec:92:06:
e1:bc:b3:f8:e0:2f:e4:c6:79:0b:04:8d:a1:7d:5d:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:48:C3:45:20:E8:0A:BA:74:82:68:C2:B2:E1:EC:6B:C5:F9:4B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xZBIw0Ug6Aq6dIJowrLh7GvF-Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.32.0/23
5.105.38.0/23
5.105.63.0/24
5.105.96.0/24
5.105.130.0/24
5.105.184.0/24
5.105.215.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:c7:8e:d2:49:b8:f6:c4:70:27:2e:cb:37:07:18:0b:a8:fe:
d6:9e:7f:35:96:b0:6c:b7:60:c3:dd:a3:11:3c:6f:3b:fc:d8:
9e:0b:3e:04:3f:90:03:5d:a6:ba:18:5b:10:6b:03:fc:b2:07:
88:7e:0a:3d:b5:23:07:d9:15:f9:1b:c8:8d:db:e7:ff:81:07:
3e:68:8d:86:d7:f6:3e:fc:4b:1b:20:bc:59:54:8b:41:e2:3e:
c3:0a:02:d3:a5:89:3a:ee:60:5e:a2:ea:18:bf:7a:d1:51:81:
28:7b:f2:9a:06:17:dd:55:2f:a3:e2:75:cd:48:81:a7:49:e6:
65:3d:27:97:9c:f6:ba:9f:f3:df:86:2c:a0:9b:15:12:b3:9a:
df:a0:f6:b3:85:dc:7d:0e:72:0c:2c:da:35:7f:58:f8:45:1d:
de:9f:b5:e7:00:d5:3e:8f:d6:c5:41:19:8a:c9:2d:6a:d3:28:
9a:31:10:b2:93:c3:a1:fa:da:6d:3f:44:68:e5:78:43:3c:58:
58:97:a8:4b:ea:94:21:d9:58:a5:9e:a5:09:3a:9b:67:23:0e:
fa:36:1e:b4:28:58:0e:8c:9f:5a:f8:35:35:81:18:98:86:3c:
d9:22:b2:57:04:5c:21:89:fb:e3:84:72:02:95:67:71:ee:32:
cc:cd:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org