Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GTysbE4f_GROpyRMKFSX5dEpfU8.roa
File: GTysbE4f_GROpyRMKFSX5dEpfU8.roa (raw, json)
Hash identifier: JQlJ8I8PhTsf7Ciw+oSILMbExQnG/0O2Ve6rTWfQdPI=
Subject key identifier: 19:3C:AC:6C:4E:1F:FC:64:4E:A7:24:4C:28:54:97:E5:D1:29:7D:4F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186C5909FCE03731CAB6134588F6D5A92B5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GTysbE4f_GROpyRMKFSX5dEpfU8.roa
Signing time: Thu 09 Mar 2023 08:50:35 +0000
ROA not before: Thu 09 Mar 2023 08:50:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:90:9f:ce:03:73:1c:ab:61:34:58:8f:6d:5a:92:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 9 08:50:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193cac6c4e1ffc644ea7244c285497e5d1297d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:47:c9:a0:64:84:c6:be:22:75:f3:59:b7:
0d:85:c8:93:5a:75:f8:17:bf:ec:59:de:39:38:bb:
5e:da:4e:a9:d0:aa:7f:e1:e3:5e:85:ff:a7:1e:83:
b9:32:b8:be:d7:f4:e8:0b:10:0f:b8:7a:d2:84:36:
cd:67:5e:84:67:06:9c:c0:1b:01:34:29:72:09:ce:
c6:80:a1:3f:a6:d7:7e:e1:99:22:28:b9:d4:b5:f3:
7d:9b:27:eb:db:13:47:51:54:0a:df:93:36:0f:be:
88:3d:94:3f:a4:41:f2:75:e0:85:2d:9e:19:ad:2a:
53:70:7a:78:5f:f5:30:7f:af:1d:17:fb:28:55:ef:
03:5c:69:f6:b4:32:b9:5a:37:0a:71:53:51:0b:88:
3d:e1:b9:e9:06:66:02:04:5b:cf:60:83:2e:e8:97:
e7:cd:17:9f:44:c6:ba:8d:19:36:0c:21:9c:3e:bf:
8b:be:1b:e6:da:ab:c1:26:9f:da:13:3c:d4:31:1d:
47:e3:72:6b:72:89:8d:12:bf:49:33:e0:3c:df:d2:
af:4e:55:e4:8c:08:33:0d:8a:70:d4:2d:d9:5a:55:
0a:18:2c:8a:18:92:96:14:37:1d:cb:04:1c:65:4a:
e1:35:55:b8:a3:d6:c9:f1:71:e1:09:f7:a3:c0:2d:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3C:AC:6C:4E:1F:FC:64:4E:A7:24:4C:28:54:97:E5:D1:29:7D:4F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GTysbE4f_GROpyRMKFSX5dEpfU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
5.105.42.0/24
5.105.59.0/24
5.105.63.0/24
5.105.68.0/23
5.105.80.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.124.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.226.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1b:09:a2:40:18:52:bd:f8:8d:d3:59:76:70:14:c4:b1:ad:
c7:fb:8a:59:36:d6:9c:ee:28:1a:0a:a1:93:05:ed:1d:3b:08:
c8:2c:4a:10:8f:9e:09:78:c2:d9:d6:b4:b4:e0:a6:dc:86:4d:
a7:db:80:3c:63:0f:27:7d:1e:b3:0c:7b:40:28:ab:74:ad:ed:
de:94:1c:1e:b5:bd:18:6f:6c:ef:a4:06:8d:6b:85:6a:31:b3:
f2:05:bb:00:5e:0e:1f:08:c8:03:0c:c2:1b:84:f1:65:8e:d3:
ab:df:fb:8b:ef:43:32:f3:d0:8a:bd:56:e4:ed:3d:2c:34:73:
04:d4:66:0b:d8:31:45:38:13:be:d3:22:38:09:b2:2b:64:99:
ae:25:47:40:a7:cc:54:e0:18:64:ae:10:f3:d4:fb:d3:0c:9d:
3b:45:d0:7c:1c:d0:76:db:b8:78:67:6d:62:bf:fa:1c:67:63:
55:07:31:84:46:8b:74:e4:07:75:ac:51:e1:5d:61:36:22:ee:
1b:dd:48:1f:d2:95:90:16:eb:98:4e:be:f5:e0:5e:35:73:e0:
6e:0f:39:3b:be:f1:1a:8d:c2:6b:5d:32:52:8b:ec:92:5e:45:
24:4d:3b:b2:51:3a:6c:9c:f8:05:c3:65:f4:42:84:ca:81:4e:
f9:91:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org