Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/F0c3D2EhoFcHZBqO3-DqNOCKwnw.roa
File: F0c3D2EhoFcHZBqO3-DqNOCKwnw.roa (raw, json)
Hash identifier: RbsT382iGNJ0h6GaJLu3QoNanzBrqJNYoNTIJasPN78=
Subject key identifier: 17:47:37:0F:61:21:A0:57:07:64:1A:8E:DF:E0:EA:34:E0:8A:C2:7C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889AE1D9EA25233BC3079D2FC94D5DAE61
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/F0c3D2EhoFcHZBqO3-DqNOCKwnw.roa
Signing time: Thu 08 Jun 2023 12:01:12 +0000
ROA not before: Thu 08 Jun 2023 12:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:e1:d9:ea:25:23:3b:c3:07:9d:2f:c9:4d:5d:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 8 12:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1747370f6121a05707641a8edfe0ea34e08ac27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:00:83:37:cc:c1:a5:6b:f7:76:1e:6c:2a:
e0:41:bb:87:fa:e0:c1:67:ef:1f:47:c6:dc:af:c9:
0d:f8:60:25:ef:2a:01:c2:14:77:5c:12:ce:55:26:
ee:73:0d:e1:be:4b:82:67:c0:c1:7a:9e:84:92:25:
89:c9:c7:e7:48:e7:0c:15:28:82:57:80:d5:6b:46:
37:ae:7c:77:ca:97:e4:0c:81:6b:81:13:30:cc:4c:
6b:fe:f8:cb:0d:1a:2c:48:e4:d2:69:68:15:6d:51:
a9:89:72:ef:00:82:22:6d:a4:6f:49:2e:84:ac:87:
12:f5:a7:ee:3e:54:bc:4c:d0:ac:30:89:e1:e3:12:
af:0c:b6:ca:b5:ae:1f:ca:97:55:61:4b:aa:7f:84:
ab:fa:21:69:dc:b5:9a:50:8c:c2:4d:97:ae:04:87:
6e:ac:4a:a7:04:52:e3:f3:fd:e0:f4:74:8d:3e:3e:
fc:bd:2c:46:2c:ba:4b:1a:da:1b:0f:4d:fc:43:14:
d0:3e:8a:c3:70:29:94:37:a0:2c:3d:28:df:30:73:
30:df:c8:fd:b8:e2:8b:72:fe:38:49:ed:60:d9:9a:
65:71:2d:19:00:8b:49:49:88:4c:16:c8:d2:c4:b1:
b1:e6:79:d4:d6:f0:6e:5a:8e:85:29:5e:9f:84:9b:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:47:37:0F:61:21:A0:57:07:64:1A:8E:DF:E0:EA:34:E0:8A:C2:7C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/F0c3D2EhoFcHZBqO3-DqNOCKwnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.15.0/24
5.105.118.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c3:41:5d:0a:cc:d4:17:ff:a1:97:87:13:42:bf:60:2f:4d:
e4:53:35:5a:83:96:9b:d6:23:6d:77:12:56:05:6e:f3:f3:9f:
ac:3b:4a:80:64:7d:9b:ed:c7:4a:a0:54:bf:94:71:b4:16:de:
d2:3b:d4:3f:9e:b0:78:ee:82:12:1d:88:87:22:ea:4a:f5:1e:
e3:96:30:19:fa:c0:6d:15:f3:bc:14:cb:3c:90:24:2b:ab:fe:
02:f5:ec:8e:ba:c4:96:ee:2f:d4:94:44:a5:21:ea:d3:39:cc:
f0:34:5d:af:82:5b:ba:cd:9b:3b:ee:b6:ce:6a:78:6a:10:9a:
4c:fb:45:9a:a7:a5:f6:c2:62:1d:24:c8:87:82:f8:93:79:3f:
a9:d7:9d:6a:79:a2:83:ca:62:1c:26:79:09:11:1f:c1:78:31:
b9:83:bd:cd:65:1c:b5:b9:ea:7c:49:b5:e6:81:21:86:2b:b8:
5f:90:1c:57:2a:d9:18:1e:cf:d1:75:5c:a8:1a:bf:e8:ba:3c:
0b:2a:c0:30:d0:09:69:1e:ac:01:90:c6:89:ba:05:b7:c2:86:
ab:5a:b9:ff:4f:3e:34:0d:1d:a2:fb:c5:a6:c5:31:33:c8:84:
20:8a:bd:89:f1:69:61:f1:f6:cb:a6:a4:58:ae:89:35:69:02:
5d:92:8c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org