Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FplnmfYs7KGHW3hPIs-hVLK_iRk.roa
File: FplnmfYs7KGHW3hPIs-hVLK_iRk.roa (raw, json)
Hash identifier: sGAfj7bON7TzFMOe38fEmjCoIQhj5i+S4MSM8rVh47g=
Subject key identifier: 16:99:67:99:F6:2C:EC:A1:87:5B:78:4F:22:CF:A1:54:B2:BF:89:19
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863BE240711869E7C2CEBFE93D69EE6026
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FplnmfYs7KGHW3hPIs-hVLK_iRk.roa
Signing time: Fri 10 Feb 2023 15:12:08 +0000
ROA not before: Fri 10 Feb 2023 15:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/23 maxlen: 23
5.105.130.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:e2:40:71:18:69:e7:c2:ce:bf:e9:3d:69:ee:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 10 15:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16996799f62ceca1875b784f22cfa154b2bf8919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:eb:8f:ad:ff:e7:49:b7:c6:87:9e:5e:8f:
db:e0:f5:b7:d0:a1:86:90:67:6e:3e:f7:9a:79:39:
b3:be:c8:da:a4:53:0f:23:d0:e3:17:04:0e:aa:31:
87:4c:98:b3:2d:05:fe:eb:29:0c:d6:99:8c:69:d2:
c5:3f:f4:04:20:a2:09:1d:7f:aa:c4:06:7a:63:3b:
8b:5c:44:f0:43:f6:42:f4:e8:a1:e8:35:2b:02:08:
e6:f3:38:41:94:aa:c6:39:40:c1:2b:30:0c:03:fe:
0f:27:71:be:08:57:f6:f2:6d:0a:e9:db:a0:84:ff:
0d:0a:e1:d2:17:a7:35:cc:e5:19:27:82:47:66:8a:
7e:73:15:68:8d:7f:e2:ad:81:56:f2:ae:98:78:1a:
c4:dc:16:ad:1b:bd:cd:15:ab:f1:91:af:5d:a1:a3:
8f:7a:88:b2:9f:4b:90:01:17:a8:b2:79:a0:9f:49:
e5:dd:a2:89:56:f8:be:98:b5:38:12:10:18:77:b4:
73:b7:ae:86:d9:0c:25:c2:ca:47:c5:7c:0d:97:bd:
1a:92:5d:56:c4:f4:5b:72:2e:68:e8:5d:27:11:9c:
91:1a:24:18:0e:67:10:93:b5:9f:97:8c:ad:b2:48:
c7:5c:15:f0:83:28:1b:99:95:0e:d3:d9:97:be:09:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:99:67:99:F6:2C:EC:A1:87:5B:78:4F:22:CF:A1:54:B2:BF:89:19
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FplnmfYs7KGHW3hPIs-hVLK_iRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.38.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0/24
5.105.82.0/24
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.130.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.198.0/23
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.105.252.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:75:23:16:1a:71:30:7c:4a:21:64:0d:5a:c9:40:b9:3f:e8:
ff:69:a0:6d:87:fb:85:d0:a8:24:5a:a9:1d:0e:c6:79:27:15:
4c:db:39:0d:09:76:a9:4b:8b:31:a3:bb:d8:c4:e1:56:5f:b4:
2a:f3:fb:6e:f4:8b:5c:39:ef:68:b4:2a:82:60:a9:0c:cd:25:
4d:09:e2:e4:a1:c6:6f:24:1a:4f:7c:85:9a:0c:a5:aa:9f:8b:
27:c3:18:da:f2:3a:5d:db:5f:e4:e3:cc:31:7a:68:4c:96:03:
49:80:69:f7:7a:13:69:7e:35:82:72:fd:e7:85:26:cd:29:ee:
54:ff:1f:fb:61:1f:12:2d:70:50:6b:d1:11:a4:22:84:e1:55:
8a:9d:0f:4e:8e:6e:f5:9e:30:b7:8c:e4:6a:1c:32:91:36:60:
c1:83:24:05:ca:cb:79:0a:18:a3:06:a2:06:55:09:c5:d4:73:
8e:ba:19:b6:21:e5:e3:97:b5:a4:74:83:c4:56:4a:7a:2d:61:
e7:8f:03:64:9a:23:6d:4f:ef:23:da:29:3e:a2:b8:bc:23:ea:
8c:d5:88:75:a4:da:66:6e:6d:2a:3e:2f:82:05:32:7d:56:b7:
50:e8:a9:64:21:fb:e2:8b:1f:e2:8b:56:73:70:fb:e3:8d:e8:
8a:52:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org