Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4evV7yzv4vM_fkZwfAFJrdMmnWw.roa
File: 4evV7yzv4vM_fkZwfAFJrdMmnWw.roa (raw, json)
Hash identifier: SffudU5nqz6KRlt0CzixeTYT6XSuXaqIFSZ5D3RN9Nc=
Subject key identifier: E1:EB:D5:EF:2C:EF:E2:F3:3F:7E:46:70:7C:01:49:AD:D3:26:9D:6C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189AD69A028D0A0A194143BEA65FCF54574
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4evV7yzv4vM_fkZwfAFJrdMmnWw.roa
Signing time: Mon 31 Jul 2023 19:25:27 +0000
ROA not before: Mon 31 Jul 2023 19:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.227.0/24 maxlen: 24
217.67.76.0/23 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:69:a0:28:d0:a0:a1:94:14:3b:ea:65:fc:f5:45:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 31 19:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1ebd5ef2cefe2f33f7e46707c0149add3269d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:72:b5:9f:5b:0a:1e:61:f3:2e:85:b5:7f:
5b:a8:82:f2:93:0c:d6:9b:5a:07:17:9f:54:cd:ec:
2e:3e:39:6c:41:08:75:ab:c8:5d:41:6d:e7:dd:6f:
dc:5f:99:38:91:0e:f5:dd:25:0f:66:46:34:a7:98:
d1:db:88:fb:79:59:57:c6:eb:00:c3:07:42:99:8e:
f7:e3:2f:9d:5f:f5:10:53:57:32:fc:44:2b:37:a6:
7c:a6:bf:4c:4b:62:46:38:ba:d4:55:1a:9e:08:47:
cc:ef:88:ff:1c:39:b0:39:1c:d6:1a:cc:84:9a:e8:
51:cc:dc:09:cd:39:50:7a:af:07:c7:c0:82:e2:19:
e6:cc:86:e0:81:c8:7c:71:2f:f2:de:21:ea:47:87:
2d:75:d4:d0:49:6e:9c:cb:b2:75:be:b4:a0:df:d3:
d6:41:ef:e8:10:78:21:cb:36:62:74:23:38:6c:54:
7a:0e:76:38:66:b5:ff:a1:e7:43:0f:98:7a:bb:da:
01:59:13:7b:5d:e3:b6:cd:8e:88:76:3e:7f:60:c3:
05:59:de:1b:63:0a:00:3f:62:47:27:33:74:c7:3c:
1a:ee:43:23:c9:27:c9:42:cb:02:51:c3:23:5f:0f:
f5:45:7b:45:d4:a3:00:1b:37:68:d2:5c:05:f3:7f:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:D5:EF:2C:EF:E2:F3:3F:7E:46:70:7C:01:49:AD:D3:26:9D:6C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4evV7yzv4vM_fkZwfAFJrdMmnWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0/24
5.105.51.0-5.105.55.255
5.105.66.0/24
5.105.69.0/24
5.105.72.0/24
5.105.94.0/24
5.105.100.0/24
5.105.102.0/23
5.105.106.0/24
5.105.118.0/24
5.105.124.0/24
5.105.126.0/24
5.105.137.0/24
5.105.143.0/24
5.105.166.0/24
5.105.168.0/24
5.105.198.0-5.105.200.255
5.105.216.0/24
5.105.218.0/23
5.105.221.0/24
5.105.226.0/23
5.105.229.0/24
217.67.76.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:6d:8e:ca:25:e5:01:a1:0f:6c:64:ee:f1:b8:9c:65:fe:2e:
d7:a2:20:95:50:88:2a:2a:3c:88:0f:e9:6c:79:ef:0e:b1:26:
a1:3d:29:a7:d5:f0:b2:21:a8:3e:2d:7b:10:3e:e1:fe:35:3a:
31:a4:7f:7c:9d:bc:ba:11:14:47:db:5a:4d:fd:10:28:b5:1c:
20:eb:76:35:31:ea:7b:b2:60:b9:54:c5:54:6e:95:61:8f:8e:
49:c7:b8:4c:35:ea:27:40:19:78:14:21:a6:c3:61:ea:d6:26:
b9:33:3a:19:fc:73:c7:47:e8:fd:eb:86:5d:84:6b:d0:1f:22:
81:8a:0a:98:c5:b7:5a:3d:e0:d5:2a:5c:37:b7:fd:78:e7:b9:
bc:d0:7f:61:1c:eb:51:07:55:33:f2:70:3e:bc:7e:c6:95:8b:
95:97:47:46:66:63:7f:e4:22:67:40:25:1a:09:85:6b:92:3d:
62:5c:2c:e9:f2:9a:f3:ff:4e:8a:98:81:11:8c:e3:7f:94:a6:
ec:58:c3:91:2e:04:47:f0:2a:f6:47:57:32:e4:35:01:44:6b:
48:1e:bb:ce:f4:5d:ca:8d:98:a1:f2:39:1b:ba:e6:df:20:4d:
2a:54:e0:a9:9a:c9:b0:d9:6e:7a:f3:35:e6:b6:4d:d8:5e:de:
ed:ab:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 05:57:18 2023 by rpki-client on console-fra.rpki-client.org