Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0pzJ8eHeUz03pkrjVmZqB4CQ4gc.roa
File: 0pzJ8eHeUz03pkrjVmZqB4CQ4gc.roa (raw, json)
Hash identifier: 9/kqnbu1E2wNxUBD6+8T0h8gvr7fvAULWaQrlM4Whfo=
Subject key identifier: D2:9C:C9:F1:E1:DE:53:3D:37:A6:4A:E3:56:66:6A:07:80:90:E2:07
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B382083BB7E11645A8873ECEEDC781FC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0pzJ8eHeUz03pkrjVmZqB4CQ4gc.roa
Signing time: Tue 13 Jun 2023 06:47:03 +0000
ROA not before: Tue 13 Jun 2023 06:47:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 06:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:82:08:3b:b7:e1:16:45:a8:87:3e:ce:ed:c7:81:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 13 06:47:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d29cc9f1e1de533d37a64ae356666a078090e207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:ab:dc:9e:7e:31:31:71:d5:ac:9c:31:db:
67:68:61:89:91:3a:6f:82:f6:ae:95:56:54:04:3c:
3b:e5:42:01:48:6e:81:ed:44:d6:1a:fe:6e:c5:cb:
a6:15:93:06:e0:f5:69:f2:16:2a:26:e4:10:a0:84:
9e:b8:c3:02:a8:87:1f:1a:8a:a7:05:96:f2:c6:c1:
d6:bb:d3:7f:8a:64:4a:6f:33:06:33:4a:4b:ee:e3:
9a:06:ab:8b:47:30:7e:b0:4c:4a:6f:f5:bc:9b:ec:
9d:be:4c:02:7a:8d:6c:1f:7e:97:90:c1:78:a9:80:
9f:c0:6c:c7:85:bb:37:8b:90:ea:12:d2:ba:78:3c:
e7:bb:7a:c2:19:cc:83:16:57:87:0b:7b:00:98:cf:
ab:67:2d:93:d8:71:18:e7:f2:3a:19:80:ac:49:0c:
41:74:d2:a8:28:56:e9:51:98:72:22:52:c4:d8:cd:
01:8b:4b:d3:85:77:69:cc:ad:57:a9:5c:d4:52:23:
17:b4:e9:f8:23:cb:6f:7c:ac:1a:d3:7a:e6:ce:ae:
fc:44:61:49:de:08:85:4b:5f:a7:02:4e:13:96:86:
86:8c:30:7d:b2:3d:88:e1:6e:84:5e:ea:3f:03:39:
b9:d3:73:d8:ab:b1:8b:34:a9:ce:a5:b3:1f:63:12:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:C9:F1:E1:DE:53:3D:37:A6:4A:E3:56:66:6A:07:80:90:E2:07
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0pzJ8eHeUz03pkrjVmZqB4CQ4gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/23
5.105.5.0/24
5.105.7.0/24
5.105.15.0/24
5.105.18.0/23
5.105.26.0/24
5.105.36.0/24
5.105.113.0/24
5.105.118.0/24
5.105.123.0/24
5.105.143.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.253.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:94:7d:5d:fc:3c:80:18:5b:a1:be:4d:0d:d6:81:3d:2c:ab:
93:42:85:65:6d:73:67:cc:6a:f3:3e:b4:4e:98:65:4b:bd:da:
20:42:ca:c7:91:5a:e4:6e:cf:e6:cb:3e:30:95:d2:87:1a:1a:
d5:c5:80:43:81:d4:49:ae:b6:a7:c6:76:ff:a9:de:05:06:93:
2e:b0:f6:47:a1:01:43:5f:c3:b6:7d:7d:4f:26:2f:60:a7:14:
65:31:b3:93:3f:35:b5:5b:1c:a3:2a:1f:0c:e3:47:9c:7c:b9:
68:00:df:24:3a:bf:f5:78:ad:29:01:13:c0:05:dd:a9:dc:5a:
bb:eb:9a:f9:a4:5f:98:09:bd:b3:ee:22:86:05:5c:5e:63:74:
86:5f:75:ab:12:97:fa:11:03:e5:88:8f:eb:a7:6b:5b:7b:7d:
2c:78:9b:b6:d5:a5:ca:be:73:72:a6:b7:be:a1:56:72:0c:da:
3f:1a:e7:c2:ff:ca:90:82:d1:6e:99:d3:f8:db:eb:b9:32:42:
12:20:dc:0f:58:2f:53:75:64:78:e1:43:dd:2c:2c:cd:2b:ff:
6a:ab:59:a1:95:97:9e:59:23:37:6a:28:e7:91:70:2a:d2:b2:
17:6f:32:ee:ba:56:1b:3a:11:9a:0a:19:a2:05:7c:1b:1a:b4:
e8:79:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:54 2024 by rpki-client on console-ams.rpki-client.org