Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5sutCTZfLGk7CuL5BEosgtcgEMQ.roa
File: 5sutCTZfLGk7CuL5BEosgtcgEMQ.roa (raw, json)
Hash identifier: d3uV+sqnSJppash1Dpw9+aN+X7hnKT49BNnj2KaYvYY=
Subject key identifier: E6:CB:AD:09:36:5F:2C:69:3B:0A:E2:F9:04:4A:2C:82:D7:20:10:C4
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189924871878EBB131E8EC67DDA5DFD6B66
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5sutCTZfLGk7CuL5BEosgtcgEMQ.roa
Signing time: Wed 26 Jul 2023 12:59:28 +0000
ROA not before: Wed 26 Jul 2023 12:59:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:48:71:87:8e:bb:13:1e:8e:c6:7d:da:5d:fd:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 26 12:59:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6cbad09365f2c693b0ae2f9044a2c82d72010c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:4b:86:49:fd:ce:f1:29:53:3a:3c:b1:84:
fb:01:f3:e3:21:4e:da:9b:2e:97:99:23:e7:09:aa:
af:18:f4:7c:fb:93:96:d5:a1:df:7d:51:72:64:f1:
77:3c:f3:76:fd:8e:a4:93:bc:94:56:89:e6:8e:2c:
72:38:ea:2a:90:2d:46:55:d7:db:8f:51:dd:47:21:
a7:0b:c1:69:51:8a:4a:20:17:ee:37:f9:e0:c3:ca:
c4:c8:c6:e1:8d:94:ba:2a:ba:92:00:81:e1:b6:13:
da:1b:c4:24:88:0d:93:18:81:16:bf:92:e1:34:8a:
24:be:61:e2:11:87:80:75:e0:17:3f:16:a3:03:54:
e4:9b:1b:da:58:4b:85:35:fb:64:57:aa:95:45:f2:
1c:2a:a8:11:e3:b6:3d:fa:61:83:34:b9:b7:8d:14:
44:97:d2:f3:64:dc:8a:bd:ea:f7:29:df:03:8a:a9:
16:82:c4:7c:b4:c1:60:65:68:d1:7e:4e:ab:12:45:
9b:2e:50:f2:ef:6b:31:c2:15:31:bf:59:b6:79:60:
74:ce:76:55:e7:03:ce:40:32:c4:a2:c2:62:f2:79:
34:68:4f:7f:00:09:b2:e1:80:ef:d9:38:e7:63:23:
05:2a:2e:35:c3:01:e2:df:e6:5d:a1:56:8c:f9:00:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CB:AD:09:36:5F:2C:69:3B:0A:E2:F9:04:4A:2C:82:D7:20:10:C4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5sutCTZfLGk7CuL5BEosgtcgEMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.18.0/24
5.105.21.0/24
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0/24
5.105.143.0/24
5.105.157.0/24
5.105.162.0/24
5.105.166.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.216.0/24
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
26:77:18:84:4c:7c:fc:fa:86:bf:f6:77:81:6f:22:b1:c9:55:
ca:4d:ee:d5:0f:a7:be:49:27:87:0b:56:98:e9:46:e3:e2:0c:
8e:fc:a8:eb:51:7d:39:c3:28:b4:3f:24:a5:66:de:92:94:8a:
de:71:5a:2d:5a:ef:be:69:4c:68:f1:e9:7f:e8:2d:ea:be:4a:
99:b0:e7:88:06:e6:e5:33:03:55:6d:d6:3d:b9:4e:3b:95:7f:
5b:de:3e:7c:9c:67:ce:02:a1:81:29:78:40:71:95:ad:02:c5:
7a:01:c3:e8:29:c8:a0:9a:9a:7d:8c:e0:77:51:7d:52:c8:3b:
7b:ef:75:d6:78:52:58:b2:66:5d:52:9d:3c:bb:61:2c:6d:6d:
01:f1:e7:00:3c:25:e2:9c:ae:0a:94:1d:83:38:31:e9:58:57:
c9:e6:13:0a:da:1a:d0:1c:07:21:ac:49:99:a0:f0:88:29:99:
47:3a:98:ee:c5:92:cc:05:c6:96:99:48:af:a3:be:47:be:2d:
31:d9:a9:21:1d:7d:2e:e5:c9:a3:55:96:ab:47:46:85:49:da:
c0:e3:24:11:df:e8:b1:8c:a9:bc:d3:09:cd:33:3a:51:fb:d2:
04:ed:71:b1:f9:66:62:f3:1a:d6:2e:01:9b:5f:9f:51:66:14:
09:f7:2b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 08:34:13 2023 by rpki-client on console-ams.rpki-client.org