Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3LlMjU4qIUnUB1mEQruUS7HkO1Q.roa
File: 3LlMjU4qIUnUB1mEQruUS7HkO1Q.roa (raw, json)
Hash identifier: 08ZNBbqtmCQxlE7ebCgm/45KwcnUmpJJ1SoJSrDN42c=
Subject key identifier: DC:B9:4C:8D:4E:2A:21:49:D4:07:59:84:42:BB:94:4B:B1:E4:3B:54
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018902823FEA8B385EB90C71387E96410338
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3LlMjU4qIUnUB1mEQruUS7HkO1Q.roa
Signing time: Wed 28 Jun 2023 14:57:17 +0000
ROA not before: Wed 28 Jun 2023 14:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:82:3f:ea:8b:38:5e:b9:0c:71:38:7e:96:41:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 28 14:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcb94c8d4e2a2149d407598442bb944bb1e43b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:69:26:ab:4d:d8:7b:3b:d9:e6:05:0c:53:
11:7b:d2:b0:bc:0a:86:2d:f7:08:c3:b2:0b:eb:5a:
3d:f6:65:e3:75:98:49:49:7e:43:c6:17:b8:5c:51:
1c:d0:72:8c:e3:1f:dd:21:92:30:4e:1e:68:af:8b:
3a:d5:dd:26:1d:7b:c4:59:be:80:c3:22:6c:d7:ff:
0b:35:66:df:6b:d4:a4:d1:27:61:bd:a2:2c:7e:15:
93:d9:ad:4e:ed:ed:d4:9a:c6:69:0f:af:0e:c0:d9:
9c:f5:db:44:94:31:8a:9b:b9:8a:95:ac:fc:6a:10:
b9:1b:02:cf:ae:bd:98:e0:d5:1f:36:c1:e0:8b:eb:
ac:00:ce:0b:6a:cc:82:d3:88:31:ff:ae:64:2c:5a:
07:61:8e:70:47:46:25:85:f7:d7:be:dc:eb:ec:0a:
5d:76:3d:0d:a4:1a:83:79:b0:46:c1:57:b1:75:f0:
81:d8:99:b0:be:76:3d:3f:bc:77:2a:42:7d:c1:20:
c8:ff:05:ac:f8:2e:96:8d:00:ed:bc:20:03:0a:23:
3f:40:52:49:17:93:c9:e7:41:98:a7:46:5e:99:93:
52:62:f9:d6:eb:7d:df:16:ed:86:be:2c:11:6c:3f:
66:25:3e:cc:94:11:58:8e:83:b6:c1:d2:6f:11:24:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B9:4C:8D:4E:2A:21:49:D4:07:59:84:42:BB:94:4B:B1:E4:3B:54
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3LlMjU4qIUnUB1mEQruUS7HkO1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e2:b4:05:79:c4:bf:68:a8:57:1d:0a:53:21:62:4a:a8:62:
f7:a7:31:b3:fb:e6:10:e4:03:24:83:49:1f:89:6f:e1:a4:a6:
c5:04:af:e6:af:91:70:2f:76:e1:e1:ab:ff:42:fb:eb:c6:df:
c7:18:e4:90:2c:63:3d:04:53:15:fe:bf:3e:83:6a:ee:9f:77:
18:0d:08:be:a8:a6:a6:82:bb:94:f0:9d:50:9c:fe:e9:5f:5d:
5a:b2:ae:eb:48:63:ee:d9:14:6c:8d:0d:0a:92:b9:64:1e:c0:
18:1c:8a:0a:4d:d1:7a:91:59:40:51:69:04:7f:20:6e:ae:2b:
a4:75:86:74:97:c9:77:cf:ef:42:7d:39:fe:30:35:e9:cf:58:
a8:8b:81:08:21:01:a3:b5:7b:52:65:9a:9e:b1:fd:97:24:e5:
22:10:06:b3:55:10:f9:63:e8:f8:b2:e1:6f:e2:c3:d8:a8:2b:
1f:6a:32:c1:c9:43:e1:e2:cf:5a:c2:27:fa:cd:25:a2:77:83:
ae:02:00:f3:65:1d:24:53:73:78:53:01:96:6b:97:66:96:3f:
46:56:8b:80:ae:dd:22:56:46:19:10:45:eb:45:00:e5:56:70:
77:07:bf:a0:81:e5:33:a2:9e:c5:8a:e5:7a:b2:43:9d:e9:db:
d6:41:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net