Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1c6oUdti2Fz3TH6r6olWhht1W6k.roa
File: 1c6oUdti2Fz3TH6r6olWhht1W6k.roa (raw, json)
Hash identifier: kf8v/ml7z4Bnd9tIn7tLjxoZXMwxVLyW4rPkQPfbQmo=
Subject key identifier: D5:CE:A8:51:DB:62:D8:5C:F7:4C:7E:AB:EA:89:56:86:1B:75:5B:A9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186CA8AB48264697C7F7F36119ED51C905C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1c6oUdti2Fz3TH6r6olWhht1W6k.roa
Signing time: Fri 10 Mar 2023 08:02:13 +0000
ROA not before: Fri 10 Mar 2023 08:02:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:8a:b4:82:64:69:7c:7f:7f:36:11:9e:d5:1c:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 10 08:02:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5cea851db62d85cf74c7eabea8956861b755ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:8a:e4:25:ac:57:db:88:ef:a8:a6:02:85:
99:57:85:71:37:93:2a:00:5e:3d:01:7e:3b:ca:ab:
1a:ef:78:c8:57:00:f3:28:82:8e:fa:2e:8b:1c:bc:
dd:f5:ed:5a:2a:e2:a1:1e:29:23:fd:c5:06:03:3f:
50:8a:68:73:37:c1:da:e3:22:0a:5c:28:2e:bc:d1:
9d:48:20:83:9c:f1:40:31:9b:dc:7f:42:54:f1:19:
c5:7b:4e:52:79:ad:2a:1f:5f:0f:84:78:05:e5:cc:
f2:7b:aa:9b:9b:a4:82:b9:8c:55:36:cd:1f:66:58:
0a:b7:6c:ef:12:00:47:c6:c8:8c:72:27:0e:a0:c2:
b4:bf:89:bd:0f:c8:19:02:ea:5a:9b:f8:8e:6c:23:
78:80:e2:1d:27:f1:3e:d2:02:e4:90:49:65:75:c9:
99:c9:d9:c2:38:5e:de:30:07:22:4f:ea:bf:3d:05:
cf:41:ce:99:b9:39:eb:a4:65:5a:2a:62:f9:db:a8:
ff:a2:8c:d8:7e:42:8a:f2:de:46:76:9c:46:c2:b8:
af:20:dc:6b:09:4c:b4:00:48:cc:b8:25:90:ea:82:
5d:e5:bb:15:c9:d3:a0:75:fe:69:09:a8:d4:ae:2f:
09:25:64:3b:97:60:be:7d:58:6a:d3:c5:c6:aa:52:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CE:A8:51:DB:62:D8:5C:F7:4C:7E:AB:EA:89:56:86:1B:75:5B:A9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1c6oUdti2Fz3TH6r6olWhht1W6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.42.0/24
5.105.59.0/24
5.105.63.0/24
5.105.68.0/23
5.105.80.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.124.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.214.0/23
5.105.226.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2a:08:c5:7e:ea:73:15:db:0c:76:0a:3f:54:80:aa:1c:c0:
29:07:6d:e9:95:3d:aa:9e:cf:84:5c:2a:97:e6:4e:e4:02:99:
33:ce:01:2c:b4:8e:ad:b8:ba:80:e1:92:e0:40:b0:01:b3:05:
63:eb:c9:a9:31:33:5b:6a:4a:66:49:dc:06:df:9d:91:23:a3:
38:dc:ab:a7:d3:78:27:65:96:25:f0:65:24:5d:d8:0b:35:9b:
c4:cd:55:2c:c2:a8:50:7f:59:08:14:c8:37:e5:6f:f6:3b:7f:
d7:84:45:0b:06:af:46:7d:f8:0a:71:81:0f:9e:9f:80:a7:92:
e7:00:af:07:e1:a9:0f:fa:cd:4c:13:8c:00:b5:2d:6d:14:5f:
94:50:40:e4:de:46:16:94:de:84:8d:98:e8:e6:41:25:23:e3:
89:75:26:4e:1d:96:4f:a0:f5:53:55:a9:f5:a9:6d:f5:18:2e:
d4:84:15:e4:8d:cd:a0:db:74:4f:85:a1:c1:0b:c0:6e:c9:68:
cd:c4:21:ad:dc:a6:08:06:f4:b5:9a:cc:a9:a9:d6:73:87:51:
d3:0d:72:b6:c6:89:bb:69:a9:b0:f7:de:f9:e4:e3:93:4e:2b:
b0:f9:81:e0:ea:c3:31:2f:c6:f2:cb:20:c7:85:9b:54:68:da:
ea:6b:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org