Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KGMEv-IRynO45BFNetrMNZ7WhZU.roa
File: KGMEv-IRynO45BFNetrMNZ7WhZU.roa (raw, json)
Hash identifier: EMcnFw0p62Y/Kj6cisL9qzkrIRBmn3g9P6q15LmNKho=
Subject key identifier: 28:63:04:BF:E2:11:CA:73:B8:E4:11:4D:7A:DA:CC:35:9E:D6:85:95
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189EE50E15939ED196FFC2FCBD993A3932C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KGMEv-IRynO45BFNetrMNZ7WhZU.roa
Signing time: Sun 13 Aug 2023 09:53:45 +0000
ROA not before: Sun 13 Aug 2023 09:53:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ee:50:e1:59:39:ed:19:6f:fc:2f:cb:d9:93:a3:93:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 13 09:53:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=286304bfe211ca73b8e4114d7adacc359ed68595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:8c:9f:e5:9e:3a:2b:18:6d:0d:0e:06:1d:
7d:a6:a5:3b:58:49:97:89:20:1e:ac:6c:16:e3:a1:
af:05:e6:31:a5:18:5b:85:5d:ca:de:e8:35:c5:72:
11:22:f3:1d:23:82:47:d1:ab:f9:f3:66:da:0a:06:
a3:b0:f1:d7:e0:4d:c1:92:38:f3:ae:cf:2f:49:1b:
ac:fc:95:53:b6:49:e7:35:46:a8:27:41:fa:4a:6f:
bf:35:b8:ec:b9:dc:1a:c4:38:f0:61:e3:0f:6f:3b:
3d:5e:dc:53:0a:e7:a6:9e:8e:b6:83:85:4a:75:2b:
b9:af:52:bc:21:b6:46:f0:e0:e6:47:69:3a:3e:2f:
41:48:b0:55:ed:43:2b:8b:16:78:1a:ea:31:c9:36:
ce:9e:9a:aa:c8:08:06:80:cf:e3:13:51:d6:ec:d1:
4a:75:a4:c4:37:ae:26:be:d4:1f:a9:a3:22:62:df:
9d:77:9f:55:c5:17:56:d6:b9:86:c1:cb:89:72:17:
ab:d4:96:46:a6:d4:a5:de:8c:1b:43:5f:07:51:99:
09:97:2a:e1:e4:30:2a:1f:d9:13:24:be:97:0e:38:
e7:4f:21:d1:c1:4f:93:9b:30:c6:90:5d:b4:e3:1a:
01:7c:cc:23:78:01:ad:21:ed:98:f7:30:f4:b7:0e:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:04:BF:E2:11:CA:73:B8:E4:11:4D:7A:DA:CC:35:9E:D6:85:95
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KGMEv-IRynO45BFNetrMNZ7WhZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.14.0/23
5.105.18.0/24
5.105.21.0/24
5.105.23.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.40.0/24
5.105.44.0/24
5.105.57.0/24
5.105.62.0/23
5.105.75.0/24
5.105.101.0/24
5.105.111.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/24
5.105.157.0/24
5.105.162.0/24
5.105.169.0/24
5.105.209.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:e4:d7:6e:75:23:3b:95:2d:5f:d6:87:9e:4c:44:22:50:31:
67:da:f2:dd:f2:c2:87:71:82:38:b8:4c:ef:aa:65:0b:a3:fa:
96:04:5f:0d:1e:09:8d:3e:32:d1:63:db:8c:9e:eb:54:a5:f4:
75:43:52:9c:56:da:11:33:98:ee:69:f8:14:45:bc:1b:0a:5e:
5a:ae:1a:d1:db:10:ab:fe:a8:9a:07:51:d1:27:08:d9:45:b4:
ab:c5:fa:f9:05:ac:54:8d:78:1c:54:d1:60:86:1b:fe:27:4a:
f5:48:e2:39:80:a7:bd:d0:a8:67:cd:cf:65:c5:8a:97:c2:53:
94:4a:f6:1c:43:ce:29:35:af:77:f9:63:2f:2e:6d:51:b8:4b:
08:5e:2f:5d:8a:0e:84:49:4c:e1:4e:85:86:f8:e5:0a:1a:0a:
54:fe:f1:df:7b:bd:7e:3b:ae:85:92:b0:72:8f:d1:62:56:21:
2f:4f:52:a0:a5:16:d3:b3:1a:24:f3:06:d4:f5:69:5d:32:6c:
3b:18:b0:fa:69:89:6b:ad:77:07:0e:1b:66:93:c1:b9:ab:e7:
a8:dc:be:c6:64:49:5f:be:6f:84:54:6d:0a:14:3c:bf:b0:9a:
80:a3:b4:81:6b:c0:1b:bf:3f:80:17:33:64:d7:66:20:2a:f5:
37:13:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 20:28:19 2023 by rpki-client on console-fra.rpki-client.org