Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AjiObT8_ISGFk0wXA6FUBetToDE.roa
File: AjiObT8_ISGFk0wXA6FUBetToDE.roa (raw, json)
Hash identifier: i61xYKdjDlOstExhx8mAD+z/D1DTEuHOuieHIXOhucs=
Subject key identifier: 02:38:8E:6D:3F:3F:21:21:85:93:4C:17:03:A1:54:05:EB:53:A0:31
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018902832AC38190D8648A928EADC2803700
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AjiObT8_ISGFk0wXA6FUBetToDE.roa
Signing time: Wed 28 Jun 2023 14:58:17 +0000
ROA not before: Wed 28 Jun 2023 14:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:83:2a:c3:81:90:d8:64:8a:92:8e:ad:c2:80:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 28 14:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02388e6d3f3f212185934c1703a15405eb53a031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:05:df:61:54:57:e5:df:69:1f:cd:03:e9:
d4:36:f3:dd:72:df:df:2d:1b:4d:c2:db:8e:b3:5a:
7b:ca:36:b7:58:ea:0b:7e:5e:f3:c9:bd:33:f6:ba:
e7:ec:b0:63:b0:c5:9e:44:e4:8b:f0:ca:a6:87:2d:
11:0e:4b:7b:a8:ec:57:fd:12:12:eb:72:53:9c:43:
85:ce:6f:bc:25:22:2b:04:03:6b:72:a0:30:bf:77:
0b:ad:27:22:9e:91:e8:2f:97:d5:ba:89:10:68:e1:
bc:de:7b:0a:5d:d4:8b:af:d3:71:ed:90:2a:dc:2d:
5c:6c:2c:7c:43:20:ef:c4:6c:69:fe:ea:ae:a9:fa:
3c:b2:70:4b:b4:0d:94:a7:f1:22:59:6a:c4:2e:fb:
cb:9b:b2:da:47:4d:20:87:88:e7:c4:c4:9d:4b:be:
4e:b7:e5:1b:74:81:16:ad:c3:91:ba:22:cf:77:3f:
13:0c:b7:f1:80:fb:4e:5e:c4:fe:1a:4e:33:6d:9c:
0f:1f:4f:86:a6:f9:ba:e4:0a:1c:f6:b1:cd:fb:22:
b2:02:17:60:f7:39:36:1b:c4:56:b8:12:4e:14:5a:
6d:b1:0d:0e:26:70:34:d3:3f:4c:19:c0:5a:f4:77:
48:ee:dc:28:38:89:5a:e0:0a:3f:9d:ef:60:11:1f:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:8E:6D:3F:3F:21:21:85:93:4C:17:03:A1:54:05:EB:53:A0:31
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AjiObT8_ISGFk0wXA6FUBetToDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0/24
5.105.36.0/24
5.105.63.0/24
5.105.75.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0-5.105.128.255
5.105.157.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:11:33:b4:a9:7a:67:35:fd:6f:00:68:f2:80:da:a2:1e:f1:
91:f6:6a:33:12:e0:c7:88:f3:42:62:d1:79:e3:fe:a1:21:51:
51:f7:9e:c3:f4:ac:63:f0:c4:90:18:97:5a:c3:b7:a6:d6:22:
87:1d:9b:cf:99:19:7c:a0:af:84:e9:6a:de:7c:e7:1b:94:5d:
c9:9d:2c:ea:59:ff:ec:59:0b:4b:8a:61:25:62:38:a3:e3:b2:
fd:ac:7a:ed:c3:29:e4:e4:06:01:72:ce:02:1e:47:dc:58:32:
10:47:b3:33:59:57:05:22:db:06:e8:0d:34:04:9b:d0:99:4d:
b4:dd:30:50:4d:fb:d9:43:d0:ee:80:2a:a2:03:10:c5:9c:53:
99:ac:2c:28:b6:16:1c:4e:75:88:4d:4e:79:10:98:8d:a6:a0:
23:6f:8d:d1:3b:df:a7:23:57:8c:db:4c:1c:49:3f:91:23:91:
73:a5:6f:25:ed:48:93:ae:ec:e2:d2:a7:2e:ee:e8:4b:99:15:
f5:55:20:c3:fb:cb:50:62:a0:6b:85:10:5c:cf:9d:d9:2e:95:
7c:33:97:b2:95:3b:ba:fd:a8:90:c6:76:8b:59:f3:ca:2e:d5:
21:f1:6b:8b:6b:b5:99:c7:bd:11:46:e6:3c:7b:9c:72:66:18:
1d:f9:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org