Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2Cf0r9cehjq4Ojdn4kupSeNKDvM.roa
File: 2Cf0r9cehjq4Ojdn4kupSeNKDvM.roa (raw, json)
Hash identifier: P5oPsufrL/LLNVPe8O6dJKkB3CsDD9aJr818/uvwvaA=
Subject key identifier: D8:27:F4:AF:D7:1E:86:3A:B8:3A:37:67:E2:4B:A9:49:E3:4A:0E:F3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189C6D55244EFD0EEDAC7B4CF7EE1A7ABC2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2Cf0r9cehjq4Ojdn4kupSeNKDvM.roa
Signing time: Sat 05 Aug 2023 17:53:36 +0000
ROA not before: Sat 05 Aug 2023 17:53:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:d5:52:44:ef:d0:ee:da:c7:b4:cf:7e:e1:a7:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 5 17:53:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d827f4afd71e863ab83a3767e24ba949e34a0ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9a:a6:1b:c3:57:ea:b6:b8:d5:15:26:22:25:
2f:7a:bb:eb:d5:e2:6a:9e:91:79:07:5d:8a:86:10:
50:6f:1b:cb:a8:a6:53:af:7c:c9:0b:18:59:04:a5:
e6:a2:d0:fb:82:54:ec:f9:86:0c:9a:5a:30:ae:93:
11:b4:86:15:4a:07:5e:ef:e2:62:d5:e4:59:8e:07:
f7:bd:4e:17:26:4e:60:00:73:81:16:f7:12:84:59:
91:34:88:6f:cb:ad:a9:2f:88:89:65:76:b1:2e:13:
46:e4:87:24:8b:d5:7e:e1:97:ff:35:06:07:9a:6e:
23:93:81:c9:8f:ea:8b:b3:c8:6a:4a:1c:c2:a7:c7:
1d:0c:40:52:24:76:aa:c7:d2:d6:c0:59:06:ca:ff:
a7:ef:0f:97:75:13:bd:e2:30:11:53:92:60:c0:d5:
4e:ce:c5:6f:46:bc:5c:f0:ae:4b:fc:6a:1d:e1:e3:
95:e6:3e:5b:8b:89:d2:1f:01:11:35:e1:a6:21:e6:
78:42:8d:ef:a1:bc:3d:38:af:54:f4:16:49:a1:1d:
54:d4:73:c1:ec:88:fe:7e:a3:90:dd:e3:eb:c6:bd:
40:b4:c1:d2:62:e7:c6:07:95:66:f8:f9:5a:12:40:
13:30:e3:1e:71:08:af:31:d4:3f:a1:ee:e8:22:ca:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:F4:AF:D7:1E:86:3A:B8:3A:37:67:E2:4B:A9:49:E3:4A:0E:F3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2Cf0r9cehjq4Ojdn4kupSeNKDvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.13.0-5.105.15.255
5.105.18.0/24
5.105.21.0/24
5.105.23.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.40.0/24
5.105.44.0/24
5.105.57.0/24
5.105.63.0/24
5.105.101.0/24
5.105.111.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/23
5.105.169.0/24
5.105.209.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.249.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a8:3e:55:9c:0d:e1:de:81:31:d2:d4:00:91:7c:06:aa:e1:
92:3c:f9:d1:82:a8:47:2d:b8:ef:a3:00:b3:bd:a0:6b:d1:f8:
47:f2:cb:23:a5:2d:db:36:49:d9:21:62:d3:ae:de:f7:ff:cb:
23:74:9e:f4:b1:54:b4:36:89:0b:35:73:70:62:cb:71:97:27:
64:07:ad:77:41:69:52:63:52:b8:af:b9:70:cf:92:b8:93:88:
fa:c7:fe:bc:ab:88:a5:27:b4:fb:01:d0:9e:13:e7:88:e2:18:
b3:7a:25:dc:f2:c3:ff:ed:4f:b3:13:6a:ea:57:ec:49:e0:18:
4b:8f:4f:aa:22:46:78:58:f9:cb:c1:fd:dc:52:e6:76:3f:e1:
22:9e:99:24:00:6b:2a:19:d2:33:7a:aa:83:a0:45:f5:4e:cc:
8a:85:eb:b1:c9:82:e0:01:21:10:8d:15:32:d7:51:01:2d:42:
56:8b:91:e9:79:23:29:91:03:a1:dd:90:77:c7:db:0b:84:2b:
74:e1:ac:0c:37:c2:95:bd:cb:51:83:b4:a7:f0:9d:4e:31:38:
fa:84:50:6f:87:6d:9e:98:a6:1a:f0:73:d5:09:a8:8d:18:6b:
34:1d:e6:15:67:b3:1d:f2:e1:44:f3:71:3c:8c:d2:84:e4:9d:
8f:7e:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 20:33:16 2023 by rpki-client on console-fra.rpki-client.org