Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/INzjv0B5cppNqjJFFfESKqJvDUs.roa
File: INzjv0B5cppNqjJFFfESKqJvDUs.roa (raw, json)
Hash identifier: Fr+Wtm1VsC8iy17Pi+0gYa/68euTWns1YOSDRyp9lFU=
Subject key identifier: 20:DC:E3:BF:40:79:72:9A:4D:AA:32:45:15:F1:12:2A:A2:6F:0D:4B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E69EFE8BE8930F351BB6735A6C2406EA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/INzjv0B5cppNqjJFFfESKqJvDUs.roa
Signing time: Thu 04 May 2023 11:56:32 +0000
ROA not before: Thu 04 May 2023 11:56:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:9e:fe:8b:e8:93:0f:35:1b:b6:73:5a:6c:24:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 4 11:56:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20dce3bf4079729a4daa324515f1122aa26f0d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:66:ac:e9:4b:a5:fa:ab:2a:35:d9:16:86:
3a:b3:9f:97:02:60:a5:5b:ff:aa:5b:83:6a:93:f3:
85:c4:3b:f6:88:32:88:80:13:be:ec:4f:3c:85:7c:
8d:2e:e5:65:e2:e1:3b:7e:0d:35:f9:32:25:d2:fb:
a6:2d:a3:81:fe:8d:3a:ae:1d:36:98:6e:41:d6:0e:
ea:27:6a:4a:00:0f:d3:bc:b2:01:ee:06:be:2d:37:
7c:c2:39:6c:45:53:bd:d9:d2:8d:fd:db:47:9d:22:
6a:28:2a:51:f6:e9:b0:4d:fb:b6:9d:06:7e:2b:bd:
36:3e:00:21:e4:87:88:eb:45:e2:8c:79:95:37:a6:
25:23:26:91:da:53:3c:ca:86:11:62:91:2c:b8:4d:
3e:b7:cc:74:dc:1d:d0:fb:38:11:1c:c4:62:44:9b:
00:9a:29:33:58:40:ac:fd:db:a3:d6:09:fb:fe:5a:
6d:76:d2:e7:0c:e1:64:41:27:52:e0:18:8a:76:e0:
96:5c:e6:ab:d8:06:45:1a:9b:8e:b7:ac:c0:c8:4d:
32:c9:25:7a:34:dc:6f:47:bf:53:50:fb:1a:7c:c5:
c1:03:2f:c7:ff:d6:b1:82:db:74:b3:d3:08:47:b8:
6a:87:76:01:89:70:7b:df:8b:fd:17:99:63:fe:d8:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:E3:BF:40:79:72:9A:4D:AA:32:45:15:F1:12:2A:A2:6F:0D:4B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/INzjv0B5cppNqjJFFfESKqJvDUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.49.0/24
5.105.51.0/24
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.139.0/24
5.105.142.0/23
5.105.158.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.248.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d1:dd:5c:92:1c:0c:c5:88:1c:9c:bf:d4:d4:0f:bb:b9:c3:
e5:1c:de:44:99:f0:a3:88:46:53:35:9b:48:0f:d5:84:f4:dc:
26:ed:67:22:e1:cf:dd:10:a0:e2:44:34:0e:67:82:6b:79:7e:
35:b5:47:25:6c:c7:54:cd:92:38:39:34:c7:e8:5a:20:55:2b:
67:99:9a:dd:23:e5:1a:72:7a:bc:b0:5f:c9:16:7c:30:9d:cd:
9f:96:e1:f6:5d:26:77:9e:b9:8d:50:50:cf:a4:1e:fb:b8:fa:
05:78:0b:2c:62:09:1e:ac:c1:36:47:00:38:6f:6c:6a:ad:63:
60:6c:30:6f:9a:ac:bf:f9:89:45:d4:e0:15:e5:a7:07:85:ca:
d8:35:e6:0d:4f:41:f1:16:99:15:56:0d:73:2b:b3:6c:90:0e:
11:8a:1d:34:eb:7f:e3:78:94:4d:ed:23:f5:bb:ae:1d:9e:21:
b6:48:cc:0f:19:d0:ae:0d:33:ff:95:3a:f8:a7:8c:f9:41:e3:
f8:23:17:49:5a:8a:d4:9d:ed:ca:54:70:08:33:67:4e:12:33:
2a:95:d8:4b:70:4a:be:40:66:f4:6f:7d:c0:0b:f7:70:29:6a:
84:17:da:1e:73:20:65:e6:66:8a:e5:78:f7:b1:ff:02:54:5e:
c8:5e:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org