Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ERuqILbRe7ROJAX3O2dlcC80gz8.roa
File: ERuqILbRe7ROJAX3O2dlcC80gz8.roa (raw, json)
Hash identifier: BS6/cbq17gLg/N2U/ey1BTkuWxBEGnYs/IxKuoedy/w=
Subject key identifier: 11:1B:AA:20:B6:D1:7B:B4:4E:24:05:F7:3B:67:65:70:2F:34:83:3F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AAD00E0711DDF67993C0B87C0BC192996
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ERuqILbRe7ROJAX3O2dlcC80gz8.roa
Signing time: Tue 19 Sep 2023 10:33:50 +0000
ROA not before: Tue 19 Sep 2023 10:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.227.0/24 maxlen: 24
217.67.76.0/23 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:00:e0:71:1d:df:67:99:3c:0b:87:c0:bc:19:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 19 10:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=111baa20b6d17bb44e2405f73b6765702f34833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:a2:9a:a4:a9:d0:12:b6:c3:b1:39:c8:97:
66:3f:72:b1:1a:72:ee:83:f7:39:08:ba:cb:39:2e:
50:24:21:3d:fb:ef:9f:0a:52:65:ab:f0:42:d2:3b:
e4:65:70:aa:b5:d8:fd:da:3a:8f:cd:bc:6c:1b:ff:
e1:1d:77:f0:00:1b:11:a8:1c:ee:48:68:12:26:51:
46:f6:74:07:cb:34:55:e4:af:86:74:6d:c7:07:df:
ef:f5:2b:be:79:13:10:9e:39:6f:2e:64:04:76:9e:
7c:0c:79:88:83:47:84:72:4d:a7:9c:82:51:ed:a8:
ce:2a:58:fa:9a:9e:dd:a8:db:05:c5:23:33:bf:4b:
35:96:23:2c:46:13:e0:5b:a5:e5:00:4e:85:84:a6:
6b:48:6e:cd:30:7c:e5:17:61:b8:af:54:4b:3b:43:
91:1f:72:ae:c9:9b:21:b9:ba:7d:5d:83:bc:b0:fb:
33:c7:7e:5a:c7:46:6a:51:44:17:e7:ca:bf:d9:47:
87:e9:49:06:ba:26:50:a6:6e:16:66:e5:c1:83:0d:
b7:5b:73:09:37:89:bb:e4:4a:35:6e:48:19:10:df:
64:ac:37:16:d6:f8:97:55:6a:17:fc:e4:ed:1c:de:
a3:fe:c4:38:82:47:12:4b:02:d7:1a:a3:2b:d3:c0:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:AA:20:B6:D1:7B:B4:4E:24:05:F7:3B:67:65:70:2F:34:83:3F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ERuqILbRe7ROJAX3O2dlcC80gz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.13.0/24
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0/24
5.105.51.0-5.105.55.255
5.105.66.0/24
5.105.69.0/24
5.105.72.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.118.0/24
5.105.124.0/24
5.105.126.0/24
5.105.143.0/24
5.105.166.0/24
5.105.168.0/24
5.105.174.0/23
5.105.177.0/24
5.105.198.0-5.105.200.255
5.105.216.0/24
5.105.218.0/23
5.105.221.0/24
5.105.226.0/23
5.105.229.0/24
217.67.76.0/23
Signature Algorithm: sha256WithRSAEncryption
57:68:51:e2:2d:6d:b9:e3:79:d9:1a:07:90:79:7b:be:76:cf:
5c:5a:8d:91:09:dd:d2:31:65:b8:2c:c2:31:c8:31:ab:0b:3a:
79:c6:d9:a1:74:e8:02:cf:cc:a4:f6:50:63:dd:18:d5:73:b2:
03:1c:55:57:6b:9e:6b:b1:5d:e7:ff:13:e9:7d:7d:f2:c8:3c:
bf:d7:4f:80:44:15:c2:62:56:35:cd:f8:4c:b7:37:02:4f:15:
e9:32:90:70:d9:64:ce:d7:8d:83:ec:61:c7:fb:77:ef:bd:74:
b1:87:c0:40:7e:1c:a7:9d:e4:b7:39:35:59:5f:25:7b:09:5d:
d7:ac:03:c3:b9:6d:9c:16:e2:6b:c2:96:3e:37:d3:b5:70:1a:
dc:ea:ab:31:a3:04:7b:b4:6a:f3:9c:65:2e:59:88:a5:b5:f0:
84:04:60:80:da:24:1a:bc:49:43:d4:31:ca:f1:ad:41:53:55:
5a:3f:5c:c0:a0:24:fd:8b:57:8b:3f:84:8a:b9:48:d4:7b:63:
8e:7b:81:43:58:80:ba:f5:49:c5:6b:42:56:d9:9e:1b:8a:48:
ab:d9:fd:f0:41:23:8d:5a:78:19:1d:9d:cf:34:69:eb:79:5c:
41:7a:ac:c2:b3:b2:5b:2d:5b:4b:9d:d1:b8:2e:5e:39:9b:2b:
6c:be:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 18:24:17 2023 by rpki-client on console-ams.rpki-client.org