Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JB3-3EyFy49Akw0YcxqNJHwWUa0.roa
File: JB3-3EyFy49Akw0YcxqNJHwWUa0.roa (raw, json)
Hash identifier: yYJw3ZcbpmX9l9UAkDC/aVuYJGK7wSW4iGz12ZFIVqs=
Subject key identifier: 24:1D:FE:DC:4C:85:CB:8F:40:93:0D:18:73:1A:8D:24:7C:16:51:AD
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187EAF933DB73EDF92B160FD17BD81B93B5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JB3-3EyFy49Akw0YcxqNJHwWUa0.roa
Signing time: Fri 05 May 2023 08:13:32 +0000
ROA not before: Fri 05 May 2023 08:13:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:f9:33:db:73:ed:f9:2b:16:0f:d1:7b:d8:1b:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 5 08:13:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=241dfedc4c85cb8f40930d18731a8d247c1651ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:ae:55:f9:b9:b2:bd:c8:da:af:d9:44:cf:
ff:c0:0a:ec:5c:06:08:f4:e8:9d:a5:de:ca:a9:e0:
63:4b:61:23:dc:2f:2b:fa:59:c2:90:1b:52:4b:e2:
6e:3c:0a:4a:93:bb:b2:c4:7d:25:17:49:e5:26:d4:
cd:80:dd:c8:d7:ca:12:3f:c3:58:8b:96:0e:58:a6:
52:80:b1:0a:8a:e3:bf:97:87:1a:07:e4:48:5b:c5:
df:12:c3:52:81:83:6e:28:bc:1f:00:26:9e:b7:80:
0e:81:60:b0:52:d2:ca:9d:bc:ed:8e:0e:5d:c7:37:
9b:42:69:f6:5a:0a:d7:f7:6b:33:5d:c2:30:10:15:
47:ef:21:67:f8:90:49:38:06:4f:19:ae:0a:6f:8d:
87:de:c8:9c:5b:ed:35:05:bc:98:fa:78:0e:02:1b:
59:f4:30:62:42:6d:4f:8b:0c:ce:79:1b:c6:1b:63:
ed:8f:cc:4d:69:fa:fa:43:e1:03:d4:dd:c0:df:7a:
61:c0:f7:8f:71:16:8b:dd:92:95:d8:9a:36:bb:3c:
07:47:d8:ba:d2:0d:4b:00:d2:89:27:41:93:12:f7:
4d:bd:7a:ce:9f:6f:0f:d3:db:82:8f:04:9c:aa:98:
12:fb:ad:d3:d5:19:61:5f:8b:ea:7b:41:f9:4f:bd:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1D:FE:DC:4C:85:CB:8F:40:93:0D:18:73:1A:8D:24:7C:16:51:AD
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JB3-3EyFy49Akw0YcxqNJHwWUa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.49.0/24
5.105.51.0/24
5.105.64.0/24
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.142.0/23
5.105.158.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.248.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
07:88:05:05:b9:56:50:d1:1b:56:e9:43:48:8b:93:c7:7d:7b:
96:8e:39:74:55:66:0d:75:a1:a6:6b:3c:48:54:cf:db:9d:b9:
06:f1:b4:8c:6e:fa:00:c1:94:57:f6:b8:8b:c4:3f:cc:90:13:
7b:ff:05:a0:d2:f9:da:2e:c8:d9:f3:fa:3a:d2:8e:c5:84:d0:
8b:fe:4e:31:67:1e:c1:19:f5:c7:ba:c7:6d:a3:f8:33:a9:2d:
da:b7:d3:1a:9f:9c:7e:fc:7b:e0:5d:01:3d:70:fa:4c:15:df:
c3:d6:3e:82:f3:9c:fc:93:16:68:39:85:90:21:3f:a1:2f:7e:
aa:4d:3f:1f:f3:08:81:b7:27:1a:ba:c9:cb:7a:0e:73:ec:32:
26:3f:17:02:ad:e3:f1:46:9c:d6:6a:4d:0e:20:3e:cc:70:f2:
e3:93:8f:13:d6:1a:d6:4a:2d:b5:6a:84:a0:af:49:98:41:af:
25:ff:12:9a:29:e2:77:24:07:cd:3f:09:31:0e:0f:4b:9d:da:
36:f4:87:49:a4:4c:94:fa:f1:f5:83:0a:b8:cc:37:4e:5a:7b:
0a:12:b0:dd:82:fa:51:58:29:b9:48:8c:f7:a6:c8:1f:02:7d:
e5:07:b4:e3:f3:e7:2e:45:6f:1b:1f:6c:23:a4:0b:f3:fd:ab:
90:41:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org