Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KRDXEvmLq-kSzfg2zh92kun_mS0.roa
File: KRDXEvmLq-kSzfg2zh92kun_mS0.roa (raw, json)
Hash identifier: mlLHvUpsvGOpoeFmWwzzmCQ7S+Ls0+fOdNP46oTI9i0=
Subject key identifier: 29:10:D7:12:F9:8B:AB:E9:12:CD:F8:36:CE:1F:76:92:E9:FF:99:2D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E0BF8F649A8BEBCF0C7B85CD30F527FF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KRDXEvmLq-kSzfg2zh92kun_mS0.roa
Signing time: Wed 03 May 2023 08:34:22 +0000
ROA not before: Wed 03 May 2023 08:34:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:bf:8f:64:9a:8b:eb:cf:0c:7b:85:cd:30:f5:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 3 08:34:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2910d712f98babe912cdf836ce1f7692e9ff992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:61:bd:ea:6d:1a:36:54:fd:c2:a0:4c:95:
3b:57:5c:77:ac:92:97:f6:c6:a5:a1:d8:99:af:da:
5f:b0:7a:87:c8:b1:50:7d:f0:4c:97:f0:8a:d7:92:
08:be:f3:08:66:94:fe:3c:33:67:08:b6:e1:05:9d:
3e:26:61:0c:0d:af:8e:b5:23:22:7b:72:5a:ed:0b:
41:ca:72:79:52:df:b5:43:9b:e2:06:d5:10:c1:51:
39:fc:56:ac:f5:03:a6:79:b3:c4:01:13:85:7b:f1:
75:7b:80:7f:a6:b3:92:f8:27:a7:07:4e:bf:fe:6d:
65:c4:d4:56:4c:33:78:e4:b2:2e:2f:ba:86:ad:9f:
26:15:1b:bc:b5:58:d8:35:92:a8:bb:73:99:54:ba:
c7:ce:c9:a6:46:4f:ac:93:af:e6:3d:d0:01:65:86:
31:49:2a:ee:fc:20:43:c6:50:b0:46:b6:b7:aa:db:
e5:5c:ce:26:cc:da:72:36:75:dd:09:99:a8:18:a5:
a7:97:83:44:e1:1e:fa:07:8b:db:8d:43:fa:94:ef:
f8:f9:e0:9c:15:93:f3:b4:4a:25:d2:dd:85:0b:63:
7d:f5:af:c7:57:42:f6:38:9b:d9:18:b7:d1:e2:57:
25:a9:a7:37:93:a6:1b:35:c8:b4:4e:96:89:6d:3b:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:10:D7:12:F9:8B:AB:E9:12:CD:F8:36:CE:1F:76:92:E9:FF:99:2D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KRDXEvmLq-kSzfg2zh92kun_mS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.49.0/24
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.158.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:be:bd:0c:49:8c:53:d2:29:2a:83:68:a3:f9:fc:35:ac:9d:
45:4b:b7:1f:e9:c1:e4:13:d9:a6:55:28:e3:14:aa:52:9d:55:
70:30:e8:26:61:3b:6c:53:63:e4:bd:8c:a3:12:03:a7:12:87:
22:bc:0a:da:94:e6:cd:ab:5f:05:c8:bf:8a:3a:6a:19:8b:34:
91:c8:54:9d:6c:6b:16:96:6e:33:1b:9c:59:e0:41:b6:26:b7:
85:2e:ff:88:d9:60:08:53:50:ad:45:70:12:d7:ae:e2:aa:c6:
96:2b:a5:78:44:0f:44:70:6a:81:9f:5b:ea:de:4f:c5:13:59:
4e:a0:5f:8f:64:5d:ec:95:e2:24:96:96:ca:52:92:9c:fd:bd:
90:64:57:7b:d5:00:00:55:36:d2:21:4d:09:3c:59:5a:64:80:
47:9b:26:2f:5a:58:54:5a:75:46:a1:b8:49:70:a2:f5:54:59:
f2:9c:f8:b1:d2:54:7a:af:6b:1e:04:62:16:de:13:c1:ca:70:
60:ad:f3:83:e6:4a:e3:ef:42:97:4f:c8:27:5a:0a:84:f0:68:
b6:c1:d1:29:41:d6:a5:97:3f:d0:9d:6d:23:a8:4c:45:2e:95:
39:de:8c:d8:c3:32:da:92:cd:a0:62:ea:e7:ea:12:7c:0b:c1:
0e:d8:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org