Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Hq4jz6dbLoR4v-l7dz9Y7pJ_nDs.roa
File: Hq4jz6dbLoR4v-l7dz9Y7pJ_nDs.roa (raw, json)
Hash identifier: rZMV4Ix9GqaU+Uuv2G0HziBSHHY3SzZWNbz8RP36tVg=
Subject key identifier: 1E:AE:23:CF:A7:5B:2E:84:78:BF:E9:7B:77:3F:58:EE:92:7F:9C:3B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A85B4D5B583B52DFB3448A95A11FF8B15
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Hq4jz6dbLoR4v-l7dz9Y7pJ_nDs.roa
Signing time: Mon 11 Sep 2023 19:25:35 +0000
ROA not before: Mon 11 Sep 2023 19:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.227.0/24 maxlen: 24
217.67.76.0/23 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:b4:d5:b5:83:b5:2d:fb:34:48:a9:5a:11:ff:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 11 19:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eae23cfa75b2e8478bfe97b773f58ee927f9c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:7a:03:8e:cd:d0:eb:a6:ca:36:b4:70:ea:
20:6c:fb:1f:db:f1:5d:7b:5d:cf:f3:1a:dd:66:5a:
e1:ee:c9:c0:fa:8e:10:b5:01:84:33:dd:09:a2:f2:
11:0e:04:fa:c6:33:d3:66:a5:a7:84:04:40:00:ab:
37:46:35:1c:64:bf:5a:c9:58:27:62:0c:3e:a8:c3:
7e:36:af:0d:f6:88:c5:ce:7d:55:64:08:35:2d:40:
a9:1b:73:48:7e:1b:0f:83:9f:70:17:25:24:25:5a:
96:3c:03:a6:a1:69:b0:9c:39:a1:87:81:71:43:3b:
a4:2f:9a:9d:0a:6f:60:ad:48:6e:19:9a:10:90:0a:
b3:f4:3b:f2:f7:86:08:80:75:6a:25:71:62:cf:03:
cc:cd:ec:f5:39:e6:3d:79:7e:58:26:87:94:78:ab:
df:34:4c:72:f7:3c:48:95:9a:57:bb:12:53:7e:54:
37:c9:c0:31:66:4d:28:1a:8c:23:7a:cd:4b:70:43:
77:07:6a:ee:1e:12:7d:ea:cc:11:69:d9:20:3c:e2:
63:47:1c:d1:0c:4d:71:78:32:d8:9c:4f:6d:4f:5a:
4a:7c:51:8b:80:68:d8:fb:f4:65:d2:c1:3b:3d:6a:
fb:31:9b:33:ea:98:61:98:44:d2:6b:72:96:51:b2:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:23:CF:A7:5B:2E:84:78:BF:E9:7B:77:3F:58:EE:92:7F:9C:3B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Hq4jz6dbLoR4v-l7dz9Y7pJ_nDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.13.0/24
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0/24
5.105.51.0-5.105.55.255
5.105.66.0/24
5.105.69.0/24
5.105.72.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.118.0/24
5.105.124.0/24
5.105.126.0/24
5.105.137.0/24
5.105.143.0/24
5.105.166.0/24
5.105.168.0/24
5.105.174.0/23
5.105.177.0/24
5.105.183.0/24
5.105.198.0-5.105.200.255
5.105.216.0/24
5.105.218.0/23
5.105.221.0/24
5.105.226.0/23
5.105.229.0/24
217.67.76.0/23
Signature Algorithm: sha256WithRSAEncryption
49:89:b9:5a:d4:a3:be:db:a8:9c:fc:19:e8:5d:bc:68:89:b7:
5f:15:ad:3e:cf:8e:0e:47:dd:0f:ca:b7:1d:3a:e6:a2:4b:d0:
ae:ac:f4:ad:f5:5e:9a:79:f0:5a:62:0d:95:bd:a0:18:68:c4:
eb:d4:b3:a2:5f:e7:c1:c4:0d:87:04:5e:1d:e5:f7:db:03:0d:
76:46:0f:d5:31:29:16:3d:3b:db:8e:ff:25:a5:c0:9e:ec:04:
c5:a0:ff:91:16:82:00:f1:b8:66:86:f2:25:16:45:7b:ce:bd:
3d:e7:37:67:cd:e7:77:03:17:1f:6e:bc:69:ac:b4:9f:d6:a1:
11:6e:01:ea:ae:3a:be:4b:2a:96:80:4e:01:93:3d:cf:d3:93:
7c:12:2f:42:0f:fd:a5:f2:2a:57:fa:25:b5:66:43:d2:66:d5:
06:df:9d:d2:d0:19:56:6e:9a:28:03:3c:7f:61:bc:c5:7f:6c:
fe:c4:07:50:df:95:76:4e:e8:71:fb:b6:35:71:69:29:65:29:
a7:60:fb:fc:c2:1a:c1:c7:61:06:89:61:4d:f6:52:8b:e3:3c:
c2:97:9e:20:78:f6:e7:e7:d5:cf:54:a0:4a:89:9e:88:69:d3:
fe:2e:a1:1b:a4:a1:ff:18:02:76:6b:c1:1d:71:b6:bb:c6:73:
97:2b:1d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 22:36:20 2023 by rpki-client on console-ams.rpki-client.org