Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JEL5ASLhgx9LZf5EafUKh4E9NJE.roa
File: JEL5ASLhgx9LZf5EafUKh4E9NJE.roa (raw, json)
Hash identifier: iaBXNRHymN08zyW3Yh9V9Mv36WweNzyomIsVeMKdIP4=
Subject key identifier: 24:42:F9:01:22:E1:83:1F:4B:65:FE:44:69:F5:0A:87:81:3D:34:91
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186FEF5CED785817AEA3B104D43CDED0E1A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JEL5ASLhgx9LZf5EafUKh4E9NJE.roa
Signing time: Mon 20 Mar 2023 12:19:27 +0000
ROA not before: Mon 20 Mar 2023 12:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:f5:ce:d7:85:81:7a:ea:3b:10:4d:43:cd:ed:0e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 20 12:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2442f90122e1831f4b65fe4469f50a87813d3491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:36:29:a9:ff:19:24:58:fb:24:0b:b4:5a:
3e:85:a9:20:12:0e:b6:34:f7:50:8e:64:2e:a2:81:
4f:42:0b:39:fa:8a:0e:20:2b:fb:7f:10:7a:61:f5:
17:19:a2:12:e6:fc:e0:48:62:66:d4:c2:6c:f8:6b:
c0:bb:9d:ae:10:b2:03:0f:ca:92:c7:88:45:b6:5d:
8a:93:6a:ae:a6:ef:27:7d:38:2b:33:19:7e:84:e3:
54:dc:69:4a:be:ad:0c:cc:07:f9:79:75:aa:5f:d0:
97:91:3a:59:9d:4f:ba:b3:94:8a:7f:d9:97:56:af:
44:fd:64:29:45:bb:09:94:3b:c3:a8:4e:1f:28:b6:
1d:b0:b9:26:cd:87:e5:b7:98:e9:a1:45:9a:2c:31:
d1:81:2a:32:15:84:62:b8:be:55:2f:42:29:16:c3:
1e:2e:a0:fc:16:01:b0:2e:1b:63:3b:20:4c:fc:e7:
52:e5:d3:d6:57:be:98:f2:45:a1:92:4e:4e:88:6f:
f6:22:04:1c:da:1a:88:f6:b6:cd:42:40:1c:d0:84:
9b:63:75:ef:0c:ca:d5:f7:b6:55:e7:40:1e:b6:81:
67:93:15:a8:dc:fa:f2:d1:7c:5a:68:3a:b4:5f:de:
92:05:63:6b:16:b5:05:15:15:34:ef:38:80:03:17:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:42:F9:01:22:E1:83:1F:4B:65:FE:44:69:F5:0A:87:81:3D:34:91
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JEL5ASLhgx9LZf5EafUKh4E9NJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/23
5.105.80.0/24
5.105.82.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.186.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.218.0/24
5.105.226.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f9:24:04:c9:62:ad:c2:8e:93:e3:fb:b1:a5:73:31:08:df:
d5:cb:ec:3d:62:5a:fa:20:b6:83:48:d0:9d:34:6b:9f:05:ad:
40:a0:be:29:20:4d:88:bc:7c:e1:2f:9e:fd:56:f8:77:1f:7e:
cc:9c:c9:59:f6:2d:68:4e:df:51:80:37:60:a1:ce:fb:45:41:
89:0a:8e:9d:e1:ba:c8:6b:d1:22:86:4b:c6:36:6f:e2:f1:61:
c5:15:b4:60:e7:01:b9:fa:12:a9:5c:8a:b5:a0:ac:a2:a2:b1:
eb:36:5a:02:fc:b0:8e:2b:f6:80:b1:f1:39:e8:42:85:1d:58:
0a:1d:d4:63:33:32:ab:3e:87:ca:64:3c:4d:fb:e8:77:5a:71:
49:4a:01:f1:da:7f:1f:b3:fa:7b:53:ba:68:6b:97:ac:fd:3c:
c2:55:1e:ba:dc:44:18:ff:1f:6a:03:96:13:95:e8:31:bc:50:
23:fb:d8:35:af:22:30:3e:4d:97:79:80:95:72:ae:22:ea:a5:
3b:b2:f6:c6:53:c2:28:19:b5:07:36:26:88:74:09:60:e1:ba:
7f:a8:a6:a3:c7:1d:73:b6:68:89:d2:ae:53:6f:3d:0a:d6:e5:
f9:eb:de:be:c8:9a:4d:cd:ae:62:43:5b:c8:c6:64:3b:f1:38:
9d:f6:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org