Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A7-QnvEArn7rRrihZZqCESitop8.roa
File: A7-QnvEArn7rRrihZZqCESitop8.roa (raw, json)
Hash identifier: jHVTNaM6MrAspcnp0Q8RO+rRcNDUciacQwGc+VGKvxQ=
Subject key identifier: 03:BF:90:9E:F1:00:AE:7E:EB:46:B8:A1:65:9A:82:11:28:AD:A2:9F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01872205EF03E473CB74DDA8C2BF1673CD09
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A7-QnvEArn7rRrihZZqCESitop8.roa
Signing time: Mon 27 Mar 2023 07:43:46 +0000
ROA not before: Mon 27 Mar 2023 07:43:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:05:ef:03:e4:73:cb:74:dd:a8:c2:bf:16:73:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 27 07:43:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03bf909ef100ae7eeb46b8a1659a821128ada29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:60:41:4a:ce:44:d5:57:15:3a:51:7d:4f:
90:00:3b:82:2b:27:a9:43:c5:05:38:82:9a:b9:66:
63:fd:9b:ed:bb:1a:81:3b:ca:f4:a6:8c:3f:1e:20:
c2:b8:b6:97:d6:6e:6b:ac:4a:2e:b3:24:01:80:62:
a7:3b:b8:71:48:a4:0f:99:77:a3:a0:ea:fc:8b:e7:
e7:9a:2b:29:f1:c0:f3:d9:1a:a4:66:c2:0a:bc:e0:
47:88:14:a4:d0:68:4f:4e:04:6a:e8:5d:79:fc:11:
9e:17:c1:db:00:72:0a:69:7d:fc:4b:9e:0b:17:1b:
be:40:d6:3e:9f:4e:41:e9:04:12:0b:cb:e3:8e:fe:
e8:6d:5f:dc:1c:89:4c:8c:39:8a:f0:38:e8:7d:8a:
80:ef:e9:71:72:66:6c:c1:08:fc:d7:8e:cd:ab:70:
a4:c2:d1:4e:25:38:94:42:3b:a7:74:9c:19:e0:85:
c8:d4:65:b8:31:2a:a4:72:c1:85:d5:aa:32:e1:1b:
eb:e4:47:fc:e3:2a:93:36:43:ff:17:f4:0a:43:f3:
88:1d:0f:e8:29:4f:7a:9d:d2:27:f7:c0:52:83:eb:
c0:2d:48:a9:f7:0c:a9:39:3b:eb:e2:ed:2c:8b:2c:
30:cd:f9:d2:ea:0b:b0:3b:8c:88:e9:fa:69:6b:aa:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:90:9E:F1:00:AE:7E:EB:46:B8:A1:65:9A:82:11:28:AD:A2:9F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/A7-QnvEArn7rRrihZZqCESitop8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.68.0/23
5.105.82.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.186.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.226.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:13:ed:46:8f:03:b0:21:3d:6e:cf:c7:71:93:5a:c1:51:9f:
94:49:56:bc:49:7e:9c:23:35:65:c5:50:da:5d:b6:77:ef:de:
b1:82:6d:d7:d3:21:6a:e3:6b:27:d3:88:0c:73:97:1d:a6:55:
12:51:df:d8:73:1b:32:8e:c1:53:db:00:02:ec:5d:af:6b:61:
d4:56:b7:a9:9e:19:5e:b4:5a:01:11:a8:13:57:f3:24:c5:cc:
b8:92:d8:a1:55:ba:5e:37:17:28:d9:6c:f6:9f:f4:a9:37:aa:
c2:ec:92:33:fe:30:52:1e:df:e5:10:e9:35:8f:77:ce:92:28:
bd:36:7a:29:6d:66:91:71:c3:e1:3e:af:2a:38:a0:40:b6:b2:
43:f4:67:e7:4a:0c:90:48:3f:79:54:a8:58:75:ba:9d:ab:13:
63:cb:80:50:64:e7:c0:96:5a:20:68:8e:ac:46:72:8d:e3:4d:
30:df:00:87:de:63:f4:47:c1:eb:0d:03:72:31:a0:f3:ef:74:
41:5f:5b:5a:02:07:e2:41:cd:2c:d5:5b:dc:98:0f:8e:c9:af:
7e:2a:c5:5e:23:8d:10:a9:37:ba:01:a3:d2:24:9c:b0:24:f9:
db:5a:6f:fc:f9:eb:6c:ca:9e:03:2c:c7:4e:c8:d6:5b:93:7c:
86:88:0b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org