Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A5YtGtFq5Dw6lQOBqzJB_Ekh3o8.roa
File: A5YtGtFq5Dw6lQOBqzJB_Ekh3o8.roa (raw, json)
Hash identifier: X4JE+sAHQjRyPtjKkRna1pquy/GjT1TGApY9wmC2HSs=
Subject key identifier: 03:96:2D:1A:D1:6A:E4:3C:3A:95:03:81:AB:32:41:FC:49:21:DE:8F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01877EFDE6665A8355E4B08030D93C311D44
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A5YtGtFq5Dw6lQOBqzJB_Ekh3o8.roa
Signing time: Fri 14 Apr 2023 08:59:41 +0000
ROA not before: Fri 14 Apr 2023 08:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:fd:e6:66:5a:83:55:e4:b0:80:30:d9:3c:31:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 14 08:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03962d1ad16ae43c3a950381ab3241fc4921de8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:30:b8:db:3d:21:5b:33:e3:f5:aa:c7:4a:
59:38:6a:97:8e:08:7f:02:2e:28:a0:b4:5f:dc:a9:
56:a2:2d:e7:5b:27:79:18:5f:97:a1:3d:28:57:52:
16:8c:01:f9:be:fc:2f:34:ce:44:ab:22:8c:20:a2:
e6:1a:37:b6:e1:0c:b9:43:22:03:06:df:61:85:b5:
45:40:63:6c:04:c2:bc:1d:89:2e:47:3d:e9:28:5d:
7c:04:3a:a8:7a:3e:39:22:d6:56:5f:68:53:61:4a:
c1:b0:c6:89:e2:22:79:96:b9:cb:07:e8:1e:4a:1e:
52:56:92:c8:6e:18:22:b2:00:40:ef:8c:64:ab:84:
d2:5e:00:b4:2e:99:8c:f8:6b:3b:82:bd:15:d0:9a:
06:be:69:5a:d6:e8:76:25:82:a2:d9:5d:29:72:41:
3e:26:e5:bd:23:a0:e2:40:8d:28:10:28:b6:b8:cf:
3b:1e:b9:3b:31:02:d2:b8:b4:b3:23:5c:b4:2c:d5:
44:35:c8:4b:10:fa:3c:b2:ff:fd:b6:a5:2d:ef:f4:
b4:e3:58:73:fa:0a:bf:0b:e5:41:62:26:2a:c2:c1:
a7:bc:32:ae:2b:c2:ed:2e:10:af:ce:fb:74:28:12:
5c:5b:27:09:f8:e6:e1:96:57:aa:e8:f4:b5:ea:e3:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:96:2D:1A:D1:6A:E4:3C:3A:95:03:81:AB:32:41:FC:49:21:DE:8F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A5YtGtFq5Dw6lQOBqzJB_Ekh3o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.17.0/24
5.105.30.0/23
5.105.68.0/23
5.105.82.0/24
5.105.94.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f3:66:d5:c7:f4:35:0c:0f:af:9d:5e:e7:d2:62:a1:62:69:
70:45:35:25:3c:83:3e:cf:79:be:7d:f0:b2:d7:04:6f:22:86:
ca:c8:2c:01:d8:2e:c5:5f:db:11:85:fd:85:d3:10:19:92:24:
3a:de:cc:28:62:dc:7e:c4:58:8b:37:d0:e0:8c:58:89:73:ca:
7f:16:4d:75:d7:4d:fb:1e:4a:d1:8a:f1:03:13:a4:5d:2d:5e:
60:be:30:b4:39:9a:0b:7d:d1:4a:6b:14:e0:48:a7:7b:33:e4:
6f:2d:30:64:1b:a0:21:11:d8:0e:e9:e8:8f:6e:e0:9c:7c:c0:
c0:f6:41:12:d6:7f:2c:c8:91:e4:8a:31:03:71:1e:1c:b5:91:
b9:e8:e8:01:6f:03:30:02:b2:14:f7:f9:8e:5c:e6:2d:1b:39:
f7:42:a1:82:04:fb:c3:77:c9:b7:0d:86:e4:aa:cd:0d:fc:af:
6a:d3:d9:43:b9:4e:17:a2:4e:9e:d6:47:15:84:dc:49:f9:53:
66:80:f1:e6:86:dc:f7:da:c2:49:30:34:a2:a7:27:19:da:3a:
ac:23:7a:37:85:ab:45:fc:98:21:2d:28:49:01:22:54:8d:c7:
10:56:5f:c5:46:71:cc:c4:ef:ed:69:12:97:e5:31:ba:4e:1e:
b6:09:0b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org