Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0LZO8by-ysZPk4u893t0l-FWXO4.roa
File: 0LZO8by-ysZPk4u893t0l-FWXO4.roa (raw, json)
Hash identifier: yBImvjdh7bRDadPncsZzSb1syVMoRMcOHTxP1Jhq6Zg=
Subject key identifier: D0:B6:4E:F1:BC:BE:CA:C6:4F:93:8B:BC:F7:7B:74:97:E1:56:5C:EE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863A8399F7006CD0724F43C9305804CD4F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0LZO8by-ysZPk4u893t0l-FWXO4.roa
Signing time: Fri 10 Feb 2023 08:49:08 +0000
ROA not before: Fri 10 Feb 2023 08:49:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:83:99:f7:00:6c:d0:72:4f:43:c9:30:58:04:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 10 08:49:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0b64ef1bcbecac64f938bbcf77b7497e1565cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:d1:df:0c:37:8b:59:97:7e:c4:f7:b9:3d:
6b:f8:53:23:ae:2e:6a:28:36:b0:23:be:f0:f1:7f:
38:9c:91:21:dc:98:d3:5b:fd:e6:5a:45:8a:ea:87:
00:53:b7:a3:ab:a1:ac:ac:88:0d:25:84:8b:a2:49:
27:d2:4b:7b:a3:e1:64:17:24:e3:1f:66:95:44:0b:
41:20:27:32:04:5b:40:8c:79:46:5f:02:e9:90:8b:
f9:e9:ae:f3:34:d5:1a:b4:80:30:67:50:3c:66:4e:
50:f8:2a:8b:e2:cf:6b:da:6c:a9:84:4d:b6:74:21:
83:6f:ba:05:49:57:49:08:35:ce:86:73:a4:4a:e5:
59:6e:55:50:44:4f:18:6e:bc:93:f1:71:16:c2:89:
7a:b6:14:16:ae:7d:09:08:73:03:44:57:d7:a5:4f:
3a:a2:24:87:2d:22:0d:bd:9d:89:ed:ba:65:e6:bf:
b0:b1:64:ae:84:7b:56:63:e5:5a:23:f7:7b:13:46:
c9:a3:23:4f:32:78:08:2e:f5:2e:bd:96:e4:79:3c:
7f:df:5b:d0:c5:58:84:66:a5:c9:cd:8e:0a:6a:d8:
da:18:32:ec:c5:b7:14:20:09:78:c4:a8:45:48:d2:
a2:0e:87:b8:69:5a:77:70:d6:6e:fe:86:5c:98:2f:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:4E:F1:BC:BE:CA:C6:4F:93:8B:BC:F7:7B:74:97:E1:56:5C:EE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0LZO8by-ysZPk4u893t0l-FWXO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.38.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0/24
5.105.82.0/24
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.127.0/24
5.105.130.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.216.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.105.252.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:2b:7a:cc:14:8d:04:b7:44:00:94:b0:e4:87:63:28:20:9a:
67:50:77:5c:05:6e:7c:bb:1d:13:43:e8:5e:ec:2c:96:22:30:
c9:1c:17:f1:a6:53:f0:40:07:a4:a9:b1:e5:42:a3:4a:18:6c:
a1:93:41:9c:2d:ec:cc:5d:cf:6a:c8:4c:12:8a:1d:40:75:85:
07:8d:7b:1a:e7:50:08:ce:01:a0:a1:3c:60:52:a7:5e:3e:11:
b4:d1:5d:ea:86:63:ce:f3:c5:41:6e:09:27:ce:39:47:5a:7c:
17:04:88:59:63:5e:9c:cb:79:3e:dd:3c:4f:7e:25:4b:0b:0b:
9e:9a:75:6e:97:87:a5:4f:b8:b8:8e:36:79:fc:19:4a:4b:cf:
ff:49:68:9b:6b:3b:0d:19:98:bb:1a:7c:ca:72:07:90:92:49:
fd:ec:f8:8e:1f:37:ec:cc:2e:41:9b:52:23:20:af:54:84:9e:
fb:3c:31:80:5c:6e:bd:c6:ff:d2:90:26:5d:7d:b7:5f:1e:18:
ab:87:7b:b5:a2:b2:fe:d2:13:0e:d1:a3:9b:78:4e:18:f9:1e:
22:82:d5:a5:fe:c5:97:3f:98:90:9a:58:f2:39:ca:1b:67:71:
55:07:d7:f6:b2:ce:61:1c:f5:d0:0c:bc:c3:a4:4c:b2:4b:b5:
e1:21:00:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org