Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2AFvCv1PrKB1bOU-_bTyIak0O3Y.roa
File: 2AFvCv1PrKB1bOU-_bTyIak0O3Y.roa (raw, json)
Hash identifier: v5ssOqzrh2QKs8l7bVTgxGRJn4cI6hjBkXd5gawLRcw=
Subject key identifier: D8:01:6F:0A:FD:4F:AC:A0:75:6C:E5:3E:FD:B4:F2:21:A9:34:3B:76
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187D6932B085E232E5CC03E7FD770300F54
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2AFvCv1PrKB1bOU-_bTyIak0O3Y.roa
Signing time: Mon 01 May 2023 09:09:41 +0000
ROA not before: Mon 01 May 2023 09:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.44.0/22 maxlen: 22
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:93:2b:08:5e:23:2e:5c:c0:3e:7f:d7:70:30:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 1 09:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8016f0afd4faca0756ce53efdb4f221a9343b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:bb:b3:a6:f3:6a:32:02:b2:97:fe:dd:e3:
16:2f:0d:a3:00:12:ce:22:66:56:c7:5b:31:4c:b1:
ba:dd:ce:f3:b2:cc:8b:4a:18:e1:6f:e6:c7:3d:da:
c4:b9:c0:55:f2:0b:aa:44:b9:58:42:14:b6:79:ca:
5e:97:a3:ef:af:f1:b0:22:2c:81:c8:e4:e4:26:92:
10:4a:30:04:f5:d8:db:d9:5d:49:7e:1d:b2:d6:34:
cb:ab:15:85:a9:47:73:ad:18:9c:64:c1:2d:16:57:
56:94:7f:6a:1c:21:b5:c5:7b:59:49:3f:93:e6:33:
55:85:21:1c:f2:f9:74:63:0e:1f:f3:1d:bc:79:18:
7b:57:be:9e:47:20:af:3d:7f:39:1b:b4:09:62:74:
4d:b1:71:b7:8a:18:5c:b3:9e:6f:40:76:6d:c6:e1:
40:7a:fa:56:5f:d0:dd:15:24:bf:72:dc:09:d0:63:
fd:06:bb:47:19:a3:2d:a1:f8:d3:eb:57:7d:bb:ae:
03:cc:09:83:51:b0:b5:51:21:64:ce:61:ba:5a:88:
6d:40:29:98:0e:98:c0:f2:2a:72:5e:0b:81:82:4c:
ae:47:a6:5d:b3:6e:b2:77:69:83:e9:b4:8a:fb:e9:
89:56:e8:6e:b7:e4:2c:8b:68:ee:10:92:8a:4c:ae:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:6F:0A:FD:4F:AC:A0:75:6C:E5:3E:FD:B4:F2:21:A9:34:3B:76
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2AFvCv1PrKB1bOU-_bTyIak0O3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.23.0/24
5.105.31.0/24
5.105.34.0/24
5.105.44.0/22
5.105.64.0/24
5.105.68.0/23
5.105.76.0/23
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.158.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
43:de:de:55:88:c5:a8:71:fe:88:4a:36:37:76:37:e3:09:8f:
91:cb:a4:f7:ca:8c:d3:ef:8d:4b:6b:74:09:4e:e2:69:09:a6:
d8:bd:67:83:ca:c7:2b:be:cc:5e:4e:25:f8:3d:fb:fb:d2:0b:
d6:9b:48:a7:7b:a8:fe:e9:cf:c8:70:85:8d:43:f8:09:46:f0:
3c:99:b4:fb:e0:68:52:ee:a3:ec:19:b3:43:60:f6:c4:50:dc:
b0:fd:91:f9:50:af:af:58:93:8d:96:05:23:19:3a:60:42:f1:
34:37:2e:d5:bb:98:05:ed:c0:2b:57:7e:d8:af:75:51:bf:99:
51:e5:25:1c:7d:e0:c6:c8:e0:10:9f:96:17:1f:63:34:3d:68:
83:3a:75:b5:d8:ce:89:aa:15:bb:11:d3:23:35:45:fb:4d:51:
ea:dc:51:1b:7c:cf:5e:38:4e:3c:2e:02:b4:8c:9a:b5:08:0c:
c4:af:ed:cb:a4:e2:37:12:09:64:d8:13:44:b5:57:10:0d:90:
17:b6:84:4d:49:c5:0c:e7:4d:c5:59:0a:bc:5c:0c:3f:1a:b1:
d3:f9:a5:d7:b7:e3:ef:09:4e:af:e1:01:8e:d0:a5:71:65:de:
08:36:e2:12:92:97:14:ad:d8:64:1b:5c:00:42:bb:24:74:78:
67:27:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org