Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yAJRLZCZyLzQOzHY2VVPK6U8tPQ.roa
File: yAJRLZCZyLzQOzHY2VVPK6U8tPQ.roa (raw, json)
Hash identifier: MPyXWYwtPkIg3Jf5pRVaTyHo610fRrp1DInppMQVhC8=
Subject key identifier: C8:02:51:2D:90:99:C8:BC:D0:3B:31:D8:D9:55:4F:2B:A5:3C:B4:F4
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186834B9ACCCD1172600223F8078EE472FB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yAJRLZCZyLzQOzHY2VVPK6U8tPQ.roa
Signing time: Fri 24 Feb 2023 12:00:15 +0000
ROA not before: Fri 24 Feb 2023 12:00:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:4b:9a:cc:cd:11:72:60:02:23:f8:07:8e:e4:72:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 12:00:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c802512d9099c8bcd03b31d8d9554f2ba53cb4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:22:11:77:dc:83:9c:4b:08:92:64:fd:8d:
24:27:d0:8e:1f:ca:37:20:65:cc:a7:50:36:19:40:
58:f1:fa:f6:81:cb:20:a8:2a:79:e1:73:46:fa:6c:
36:6b:c4:8e:a8:28:88:b2:e6:8a:eb:e2:56:1f:29:
3b:b0:2f:e1:77:9f:f7:8a:43:38:10:13:d4:ff:02:
9b:34:0d:44:82:39:95:4e:06:43:01:62:2b:62:39:
61:30:25:90:01:d4:03:40:7d:b8:07:50:27:c9:49:
23:03:25:93:25:ba:f3:97:e3:25:e7:11:4e:fb:58:
75:a7:ab:13:24:43:32:12:35:6b:fd:7f:08:9c:ae:
a8:00:b9:36:82:18:ce:bd:9b:31:73:80:08:7b:3a:
f1:5f:5d:3b:5f:4a:f8:a1:4e:97:a4:b5:f6:8f:33:
2f:b6:f4:1c:b2:66:0c:dd:38:d9:f0:75:7b:b0:ba:
a3:71:86:11:5e:36:35:6c:a8:95:9d:d1:7f:08:a4:
fa:85:0a:46:66:74:9e:e5:de:a4:cd:b4:87:48:18:
66:70:b0:e7:93:b1:64:2a:35:ea:9b:94:5b:10:69:
25:6a:6b:71:b0:a2:a0:38:3a:db:c3:f2:89:d9:01:
f3:36:dd:ff:f3:05:e1:66:3f:81:d2:fc:3e:0a:dd:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:02:51:2D:90:99:C8:BC:D0:3B:31:D8:D9:55:4F:2B:A5:3C:B4:F4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yAJRLZCZyLzQOzHY2VVPK6U8tPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.84.0/24
5.105.94.0/24
5.105.98.0/24
5.105.102.0/24
5.105.105.0/24
5.105.124.0/24
5.105.158.0/24
5.105.188.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:26:32:66:78:f5:54:43:a6:ec:d9:04:24:16:95:a0:82:79:
f2:fe:3f:eb:41:d5:62:2a:b2:57:81:bb:88:01:dd:f2:fb:23:
2b:b3:4f:d2:fe:d5:da:9f:a2:5b:af:9a:dc:68:31:dc:2e:68:
08:76:e0:05:a2:9b:03:27:e6:9f:67:1e:f6:de:1a:8a:bf:a5:
8a:17:92:39:7a:6f:0a:26:ac:df:95:14:84:ee:5e:e1:c9:11:
d3:7e:6a:4d:dd:9d:2c:35:a4:4e:90:89:ab:f9:2c:c7:c7:57:
49:8e:45:d7:f1:6d:17:1f:e8:ac:27:2b:d0:38:6a:f1:c2:d0:
99:d3:34:60:2f:21:04:83:6c:a4:6d:45:4f:de:29:23:99:19:
92:77:88:58:9d:83:8e:f9:bc:15:e6:f4:44:dc:4c:3a:75:50:
5d:2b:d0:56:16:00:43:83:15:59:d6:5a:37:5f:63:85:1e:12:
86:e7:5c:d7:9b:77:70:fa:30:1b:65:84:bb:8d:2d:24:15:3f:
2a:22:97:65:a7:cf:8f:eb:18:81:73:3e:63:17:0a:72:59:e7:
56:4a:9a:bd:4e:9e:bc:64:90:0c:10:d3:10:a0:66:fe:db:fc:
4d:f0:82:f1:ab:ee:bd:02:96:c5:0c:4a:a8:5d:5c:ac:27:97:
84:f0:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org