Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yTJ1tba4NPDL1vnAcSywti4PTY4.roa
File: yTJ1tba4NPDL1vnAcSywti4PTY4.roa (raw, json)
Hash identifier: 1kz6/clapE9BLnzwkwu52F8+CuV1TXi3wwgnyBIEkjU=
Subject key identifier: C9:32:75:B5:B6:B8:34:F0:CB:D6:F9:C0:71:2C:B0:B6:2E:0F:4D:8E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186C67C7FF4B45ED2484898C7E0A8FB5BE9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yTJ1tba4NPDL1vnAcSywti4PTY4.roa
Signing time: Thu 09 Mar 2023 13:08:13 +0000
ROA not before: Thu 09 Mar 2023 13:08:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:7c:7f:f4:b4:5e:d2:48:48:98:c7:e0:a8:fb:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 9 13:08:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c93275b5b6b834f0cbd6f9c0712cb0b62e0f4d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:93:02:32:1f:a4:b5:16:f5:96:7b:28:7f:
a2:06:82:2c:39:af:b7:41:09:e2:b8:4b:24:5c:61:
f5:52:f5:b1:3c:74:4a:c2:41:a3:f2:57:d0:05:9a:
08:7b:e7:30:5c:51:e8:42:3b:41:e8:0c:a2:d6:6f:
b0:1c:a9:5d:7b:be:10:1f:ae:0c:be:73:50:9a:e6:
67:6f:90:ad:be:a2:cb:1a:b5:89:31:ab:fe:5a:f6:
3c:44:fa:49:dc:b7:60:76:1d:85:18:e2:20:fa:c5:
ad:dc:50:5b:6b:15:f1:f8:bf:a8:2d:f8:20:30:e4:
3f:a6:e7:c2:62:e8:e5:5f:6b:2f:3d:3d:0d:1a:94:
45:50:0d:80:91:df:76:24:8b:09:8c:2b:9a:03:2b:
d0:f4:62:c0:6b:2c:98:08:6a:b7:18:75:19:e6:82:
8a:f0:0f:22:4a:a1:94:b6:49:f6:97:7b:78:0e:70:
66:53:55:89:2e:c4:12:3f:9f:74:47:03:f8:c2:cd:
86:53:e5:27:3c:85:fe:c0:69:bf:c4:64:60:54:96:
a0:76:d4:17:81:b7:e3:a4:7d:b7:7a:de:01:75:6a:
2d:ab:6a:54:4f:31:b2:18:a5:16:68:33:d6:5f:9d:
1b:c5:e2:ff:0b:99:1a:a5:2a:42:2a:c3:02:2e:77:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:75:B5:B6:B8:34:F0:CB:D6:F9:C0:71:2C:B0:B6:2E:0F:4D:8E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yTJ1tba4NPDL1vnAcSywti4PTY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.82.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.156.0/24
5.105.168.0/24
5.105.172.0/24
5.105.197.0/24
5.105.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5a:e3:53:4d:56:93:0f:5b:c4:47:e8:19:b3:49:19:29:fd:
5b:74:c4:51:67:8f:5a:3d:de:67:20:91:39:a8:73:2b:83:b4:
5b:cd:1b:9b:5a:e4:3c:8c:6a:fa:3f:ba:0b:2c:dc:91:d9:d3:
03:05:85:6a:b2:09:ed:c3:b9:81:47:a9:6a:35:b5:be:85:29:
51:a8:cd:0d:87:50:f9:c2:10:c7:e0:97:0b:9a:97:80:fa:1a:
04:bb:4f:97:0e:b2:f1:65:57:58:01:4d:72:b4:4a:2b:e9:12:
d7:db:9f:de:0d:4d:e6:d4:6a:bc:66:19:c9:f6:4c:65:f8:99:
50:5e:79:70:15:10:e7:b6:e7:68:6b:36:d8:2b:76:b2:75:77:
55:3c:3d:ca:e4:84:87:fa:c4:c5:e2:28:60:cb:86:4c:e5:d1:
fd:db:f6:b0:2d:6a:16:dd:0c:d7:71:49:3b:62:8a:a1:9e:49:
e9:4f:7f:06:2a:d4:a0:a2:71:95:2e:e3:c7:fb:fc:22:1b:fb:
b3:76:27:23:62:34:1e:c0:30:f5:5a:28:d9:f3:f1:65:b4:bf:
04:4e:c5:a2:87:9b:9f:9e:74:f7:07:f8:41:eb:f6:c6:16:c5:
97:a1:b7:74:7a:b4:82:15:36:9a:c3:e1:d8:e9:95:a2:7d:50:
9b:fa:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org