Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BCpBI4JQxiy5lb0d_uYNJBKJoPA.roa
File: BCpBI4JQxiy5lb0d_uYNJBKJoPA.roa (raw, json)
Hash identifier: ldPXc+3IdI/LDs3rKCYBmZU3L9oIlZa7m60Naah8YRM=
Subject key identifier: 04:2A:41:23:82:50:C6:2C:B9:95:BD:1D:FE:E6:0D:24:12:89:A0:F0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01870DC8F5B91A7F37A11E4130A9BC2014F1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BCpBI4JQxiy5lb0d_uYNJBKJoPA.roa
Signing time: Thu 23 Mar 2023 09:24:46 +0000
ROA not before: Thu 23 Mar 2023 09:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:c8:f5:b9:1a:7f:37:a1:1e:41:30:a9:bc:20:14:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 23 09:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042a41238250c62cb995bd1dfee60d241289a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:8e:cb:c2:88:8f:90:76:7f:d6:d2:14:ab:
2e:14:8b:bb:a7:ca:8c:dc:18:11:87:6a:cb:8f:c7:
f1:60:36:1b:98:d7:ee:80:c1:82:4e:ce:15:ed:4b:
93:49:15:1b:4c:57:32:f4:fe:f6:20:69:db:86:4e:
4d:69:e3:01:a6:42:30:41:73:68:85:a2:f4:31:47:
b1:dc:d7:fd:d5:f3:e7:2f:10:77:ce:de:f0:0d:79:
1f:15:f2:2c:40:ae:27:04:ca:a3:ac:50:16:2a:d4:
d6:84:ec:51:69:3d:69:d6:d8:b7:b4:5b:58:1a:43:
e2:80:92:cb:28:29:7b:02:82:c4:73:f3:69:f1:cc:
c8:34:fa:7c:55:72:f9:71:b2:a5:9d:b3:c7:1e:d1:
11:bd:95:b1:d6:14:a3:50:f6:d2:b0:88:42:5a:3c:
e3:7b:8c:bd:ac:2c:d9:bf:23:d8:e0:a1:04:b5:44:
46:4b:ad:2a:af:13:12:e2:ac:c4:8f:ef:84:7e:c7:
e0:c5:8d:51:d7:0b:dd:fc:7b:66:4d:0a:80:9a:7f:
34:f1:b0:6b:9f:d3:ca:ba:b0:15:e0:a8:81:98:4e:
44:1a:28:5d:12:3c:85:87:8f:8c:6a:e7:22:ea:70:
50:3d:1e:a3:97:48:07:2f:dd:c6:28:12:d6:e0:ee:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2A:41:23:82:50:C6:2C:B9:95:BD:1D:FE:E6:0D:24:12:89:A0:F0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BCpBI4JQxiy5lb0d_uYNJBKJoPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/23
5.105.82.0/24
5.105.96.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.186.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.218.0/24
5.105.226.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e1:be:28:4c:95:9b:5d:eb:41:3d:c0:ac:a2:90:6f:87:bb:
b4:e4:7b:9e:f5:c4:4e:cc:dc:0f:6c:f6:68:83:3d:78:8d:32:
02:08:4a:37:80:e5:84:27:c9:d7:67:4a:1f:08:fc:6e:74:6d:
aa:64:68:71:b3:4c:cc:b3:e3:8c:5e:7b:c2:18:7b:de:92:96:
bd:74:22:fa:ac:b6:8f:fd:b8:16:dd:eb:67:ed:53:75:2a:5a:
bd:0e:b4:15:f1:46:4c:87:19:c3:a3:92:b7:95:72:28:e4:53:
fa:89:79:79:c7:c3:67:9e:40:20:94:e1:a1:05:54:34:22:4f:
b1:dd:fd:fe:c3:73:a4:e1:60:c4:14:00:b9:27:b2:32:72:3d:
72:2b:4d:3e:9a:ec:d2:93:b7:7f:45:ea:96:e6:e6:6a:8c:cc:
06:07:19:91:f0:b9:d8:12:58:97:7d:42:c3:a5:2c:a2:09:ce:
71:33:78:2e:87:ee:ef:e2:04:5d:36:21:a9:c7:5d:7b:ab:82:
ae:ff:2f:ba:dc:62:37:6e:00:66:0e:fa:5a:5b:86:c2:e6:ab:
18:38:2b:7d:ff:7f:8c:55:ed:54:0a:68:91:c5:ba:5c:c7:ca:
7b:a0:59:77:44:d2:8a:2f:5d:3a:95:3c:6a:04:56:ad:4d:4b:
90:88:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org