Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ig0rp1etZDSnoLIBWTsrP-R613M.roa
File: Ig0rp1etZDSnoLIBWTsrP-R613M.roa (raw, json)
Hash identifier: Z/5BJH4UzrHn0VdSLc/xAOr8Zo02iMuuV2QywK1Mx60=
Subject key identifier: 22:0D:2B:A7:57:AD:64:34:A7:A0:B2:01:59:3B:2B:3F:E4:7A:D7:73
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01892A7EDC8C1921575C37211481D68BD536
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ig0rp1etZDSnoLIBWTsrP-R613M.roa
Signing time: Thu 06 Jul 2023 09:18:24 +0000
ROA not before: Thu 06 Jul 2023 09:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.22.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 07:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:7e:dc:8c:19:21:57:5c:37:21:14:81:d6:8b:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 6 09:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=220d2ba757ad6434a7a0b201593b2b3fe47ad773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e1:e8:d2:5d:ff:ec:0d:37:05:71:df:f7:82:
74:95:fc:95:c9:13:78:c4:76:cb:06:ec:38:4e:d0:
c8:f7:51:17:4c:64:d2:f1:6d:1b:b6:fb:ce:2d:53:
4c:50:68:36:ed:d9:ff:52:3d:18:ec:4b:f4:cb:f9:
78:37:cc:9c:04:46:0e:da:6d:3b:46:aa:df:58:c4:
15:07:c6:48:90:3c:98:75:03:20:f7:63:1b:4c:12:
a7:69:6d:a9:46:78:07:d4:3b:a8:4e:3b:77:fa:82:
1a:f9:22:14:d6:8e:17:3f:62:c5:c7:c2:83:da:60:
40:6d:f6:e6:af:63:ee:ec:93:e8:f0:8d:04:0b:4b:
4f:54:ee:5c:eb:71:77:ec:32:0c:a9:71:42:53:02:
c3:74:6d:6d:97:d7:13:8e:31:b2:31:e7:08:a8:6d:
c9:a5:d1:de:5d:85:a5:a8:9f:11:1d:72:6f:7f:a8:
cd:24:e6:20:d3:35:87:82:f5:94:6a:cd:33:8d:5f:
66:fd:df:b5:ec:2d:24:e5:77:84:7b:92:f9:93:98:
1b:c1:e7:47:f9:2a:c6:8b:da:04:c2:79:35:fb:58:
45:fa:4a:0d:7e:14:18:a4:9c:0a:79:5d:ce:8f:6b:
c2:bc:2a:77:f5:13:fe:05:5a:65:13:a2:27:6f:74:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:2B:A7:57:AD:64:34:A7:A0:B2:01:59:3B:2B:3F:E4:7A:D7:73
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ig0rp1etZDSnoLIBWTsrP-R613M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0-5.105.22.255
5.105.36.0/24
5.105.45.0/24
5.105.47.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0-5.105.128.255
5.105.157.0/24
5.105.162.0/24
5.105.166.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2c:8a:19:a6:3a:e6:75:17:18:3c:4d:b4:91:b8:50:fc:30:
c1:37:b8:9e:65:ef:8e:25:c9:1a:fa:83:a7:3a:b2:c3:a1:5a:
3d:d9:76:39:b0:c1:3e:5b:57:34:ab:99:2b:7b:e1:40:6f:a1:
d7:31:51:ad:be:ad:1e:e2:c5:88:34:a1:f6:61:1c:ee:18:eb:
bd:31:ee:73:59:24:3a:54:6e:f0:89:15:50:f9:8f:d6:1b:9c:
fb:9c:79:d5:ed:72:58:8c:e6:f2:48:83:6f:f5:2a:02:69:27:
cb:15:3d:22:a1:9a:65:92:56:e1:b6:cd:1f:d3:30:a8:46:46:
d9:9d:46:2d:96:3b:77:73:db:1d:ce:0b:44:ee:6e:52:d5:9c:
55:a8:fc:4c:5d:c5:c1:3d:3a:df:7d:2c:77:00:56:43:1a:18:
d0:df:5f:d9:db:9d:80:0b:e4:44:3f:04:63:8a:1c:84:e0:47:
e5:3e:b1:c6:6c:a8:4d:25:89:24:6a:5e:ec:12:00:82:67:7e:
f1:39:0f:ed:50:81:a1:c7:e2:ef:59:4f:26:dd:84:bd:ab:0a:
da:93:05:52:84:8b:b4:11:ff:71:a5:63:a3:4d:73:1d:5f:8a:
b0:6b:3b:e3:29:35:37:95:89:86:c7:0a:3b:6e:fe:94:ac:84:
50:34:f7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:56 2024 by rpki-client on console-ams.rpki-client.org