Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4iayJM6uaQZTaXubSd78UfMTPe4.roa
File: 4iayJM6uaQZTaXubSd78UfMTPe4.roa (raw, json)
Hash identifier: xgleo5RJl5VCFBt3X+HQSOHa34EI0g9OpniqvvTwfEM=
Subject key identifier: E2:26:B2:24:CE:AE:69:06:53:69:7B:9B:49:DE:FC:51:F3:13:3D:EE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C8575D7C07EAB9887680C9B8077CBA9E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4iayJM6uaQZTaXubSd78UfMTPe4.roa
Signing time: Fri 28 Apr 2023 14:49:41 +0000
ROA not before: Fri 28 Apr 2023 14:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.44.0/22 maxlen: 22
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:57:5d:7c:07:ea:b9:88:76:80:c9:b8:07:7c:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 28 14:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e226b224ceae690653697b9b49defc51f3133dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:1a:0f:11:8b:18:aa:e8:42:b7:e0:70:08:
38:94:95:8e:e5:0e:3b:68:9c:bd:23:90:64:ce:ce:
1c:78:f8:6a:81:3f:43:34:2d:4c:f0:22:40:da:ba:
5b:f0:9a:b5:14:43:78:51:0e:ba:c3:1c:05:b1:1c:
8c:ee:84:8d:da:bc:9c:f5:43:9d:40:12:b2:c8:31:
cd:9f:39:f3:07:c5:fa:50:f5:25:64:ee:6f:af:e0:
6c:a3:9a:c6:e8:94:d9:b6:b1:da:18:10:c1:c9:89:
89:cd:6f:bb:0f:67:5a:35:d4:68:67:5c:24:6a:54:
bd:4f:ce:e3:b3:42:08:bb:63:b6:ec:0e:5c:70:b2:
74:24:90:86:0b:e0:4f:14:2c:ad:9e:ec:39:0f:6d:
12:f8:49:18:63:46:21:4b:df:ff:5a:94:5c:55:b6:
ff:36:07:ba:d5:f6:0c:0c:69:d1:11:bd:8c:05:bf:
3e:45:47:84:94:91:11:f2:c4:f5:0b:78:c7:aa:ca:
85:78:5b:4b:f4:41:c2:39:88:ca:72:e4:b3:0d:41:
4d:a3:a4:77:24:6f:ae:0c:2a:57:ab:f9:33:06:0e:
fa:f3:6a:35:78:d9:10:ec:5d:c1:72:10:4b:4e:66:
13:ca:3a:54:7f:92:e6:93:17:98:0f:54:bb:6a:20:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:B2:24:CE:AE:69:06:53:69:7B:9B:49:DE:FC:51:F3:13:3D:EE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4iayJM6uaQZTaXubSd78UfMTPe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.23.0/24
5.105.31.0/24
5.105.34.0/24
5.105.44.0/22
5.105.64.0/24
5.105.68.0/23
5.105.76.0/23
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:5b:69:0c:6b:7a:bf:e0:6b:43:59:b4:63:5a:6d:9b:ae:c8:
a6:89:62:bf:71:56:da:9a:50:db:f6:4c:d2:36:fe:49:a3:75:
09:7d:86:88:96:7a:52:e0:d6:d3:07:60:bb:ee:3f:eb:5c:19:
3c:a3:3f:f2:c9:10:f2:ac:6d:4d:6f:74:88:01:5c:4f:31:72:
d5:3f:37:e8:bf:ca:b3:ca:50:55:21:aa:4a:03:55:ea:1e:56:
52:d0:ca:97:64:50:c8:1c:12:fa:3a:69:b9:d6:13:7c:48:20:
0d:11:43:57:66:81:a0:eb:cf:bf:49:9c:9c:e0:a0:ea:49:f0:
38:b6:5b:8c:96:20:a0:91:de:e0:49:88:e4:ab:ea:c8:3a:01:
11:e5:36:11:1b:cd:03:00:bb:2a:ad:1b:88:c6:26:a3:a2:1b:
0e:4a:39:87:a1:f0:d7:49:39:45:d0:35:62:18:29:b0:71:a6:
26:a5:fb:5b:98:7a:81:e4:39:cf:a7:ff:f9:fc:9a:89:1d:de:
12:50:3c:ab:e9:d1:cb:c2:fd:a6:3d:95:41:53:62:a7:0e:dd:
fe:a1:f6:a6:86:3b:a4:a7:b2:4d:62:bc:d6:11:63:94:4b:12:
1d:88:cb:99:52:d8:e2:0d:61:f8:56:b5:4c:9c:7d:75:94:52:
8b:93:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org