Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-Z42DfaoVliTp2b_eQI53r2NIac.roa
File: 1-Z42DfaoVliTp2b_eQI53r2NIac.roa (raw, json)
Hash identifier: oKbZyHm9SDKLg/iIJAiOYv+v+8uiYsva4D62H0PNzrQ=
Subject key identifier: F9:9E:36:0D:F6:A8:56:58:93:A7:66:FF:79:02:39:DE:BD:8D:21:A7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E0A7C1B1DB519A2D05831C8BE3B139C7
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-Z42DfaoVliTp2b_eQI53r2NIac.roa
Signing time: Wed 03 May 2023 08:08:23 +0000
ROA not before: Wed 03 May 2023 08:08:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:a7:c1:b1:db:51:9a:2d:05:83:1c:8b:e3:b1:39:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 3 08:08:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f99e360df6a8565893a766ff790239debd8d21a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:a9:7d:24:b5:be:62:0a:a8:74:fa:27:80:
9f:5a:c8:6f:73:a6:10:ab:85:c3:9c:c6:01:3b:0f:
0c:41:6a:2b:68:22:01:1e:4e:2a:69:12:55:c5:09:
32:08:3c:98:46:08:9d:84:ee:32:5f:97:6c:e9:ad:
7d:bd:56:8f:5a:22:e9:c0:b5:23:76:af:c5:e3:ba:
be:8a:42:3b:0e:7c:54:5c:0a:07:99:01:27:7a:a8:
bd:16:fe:bd:0a:5e:d7:15:d6:6f:64:82:f0:ee:31:
e9:e8:f2:81:7b:94:e0:2b:9c:c4:23:0c:aa:6e:7c:
4a:b8:0d:66:89:75:b2:f6:bc:46:c2:e4:01:f0:9f:
2b:b8:0e:f0:4c:e9:da:2d:f5:d7:af:6a:50:e5:14:
88:90:d5:fd:28:ad:49:e9:1c:0f:65:56:99:c2:b4:
df:9c:76:2e:a1:6a:ca:14:9b:66:11:1a:7f:dd:e2:
af:49:34:b1:72:53:97:83:3b:5d:ba:aa:9d:6e:b8:
04:bf:8a:ef:9e:e9:65:24:d1:ff:fa:66:13:7f:7e:
66:11:14:84:52:03:39:8f:08:22:2d:23:62:ab:da:
fe:69:a1:b1:ab:70:46:bd:87:26:88:1d:5e:db:86:
2a:48:55:08:c3:36:c7:a7:03:e1:b7:35:bf:55:de:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:36:0D:F6:A8:56:58:93:A7:66:FF:79:02:39:DE:BD:8D:21:A7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-Z42DfaoVliTp2b_eQI53r2NIac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.34.0/24
5.105.49.0/24
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.158.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:84:26:4e:4c:f6:c9:aa:9b:ae:76:91:a8:37:3e:4b:bc:0c:
13:ad:1d:89:9b:a2:49:0d:8d:59:fe:ad:40:2d:aa:bf:e1:40:
8c:28:63:86:f2:e6:38:83:83:4f:5e:40:95:c5:6a:fe:39:e6:
4c:5e:82:6c:62:08:49:8f:2a:40:bc:3b:13:43:94:72:2e:2c:
f0:d5:b1:73:87:ff:99:83:e0:c4:d3:09:79:e9:38:b6:90:f6:
7d:b5:3f:52:60:f7:e4:55:33:a9:6b:11:08:dc:dc:bd:46:0e:
8f:49:36:7a:9e:f4:38:07:b8:5d:96:f3:38:0b:62:34:7d:18:
7c:81:83:c0:c2:17:06:47:23:fe:d0:fc:b2:65:21:33:69:05:
b2:ec:21:aa:51:76:6d:8a:de:a7:bd:b8:52:a4:eb:8f:4c:ff:
e4:b3:8f:e0:1e:e1:05:68:7d:82:05:82:05:45:cf:bd:55:1e:
d1:ee:46:8b:c4:9d:9e:81:ad:66:d1:39:e9:92:d1:9c:60:bc:
88:76:94:0b:43:79:e4:88:b6:7c:d8:c9:17:2a:f3:31:0d:a6:
7f:f4:ca:a1:e4:c5:e8:38:c3:08:a1:85:8e:e7:76:e8:c5:c3:
1e:73:60:37:25:2b:da:91:98:fd:da:3c:de:39:e3:45:98:56:
62:03:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org