Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LAOdpeiEKBgex6P5qzP2q48M8Qk.roa
File: LAOdpeiEKBgex6P5qzP2q48M8Qk.roa (raw, json)
Hash identifier: f+6zdJVFyf7/20IzjMCN1RA/4H6i928mSMA+WC/Llk4=
Subject key identifier: 2C:03:9D:A5:E8:84:28:18:1E:C7:A3:F9:AB:33:F6:AB:8F:0C:F1:09
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A9081F44DE7F68BE85D6B3E9768814915
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LAOdpeiEKBgex6P5qzP2q48M8Qk.roa
Signing time: Wed 13 Sep 2023 21:45:50 +0000
ROA not before: Wed 13 Sep 2023 21:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.227.0/24 maxlen: 24
217.67.76.0/23 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:81:f4:4d:e7:f6:8b:e8:5d:6b:3e:97:68:81:49:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 13 21:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c039da5e88428181ec7a3f9ab33f6ab8f0cf109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:e3:3c:fa:ee:b6:81:de:8a:7f:dd:d6:4b:
2b:0b:f2:05:af:4a:ed:f6:49:1e:1b:47:99:86:48:
08:de:15:2a:5a:ab:a3:b3:29:29:9d:e3:1c:99:0a:
dc:08:98:65:40:b7:1f:76:71:27:e5:11:ee:64:b9:
f7:25:36:ee:93:4e:6a:58:6c:ba:c1:df:8e:37:51:
b5:e5:f8:d4:38:7c:d4:c3:16:0e:fa:c2:4e:6d:84:
10:58:c1:6e:17:56:b8:9f:77:59:ec:c5:ee:15:d7:
4e:69:af:57:b9:d6:36:dc:e3:3e:26:35:b9:43:d7:
58:96:a1:db:51:32:8a:03:bb:33:e5:0f:1b:7b:ea:
1c:95:75:1f:51:c7:be:d1:73:7a:e1:42:ea:6b:6a:
f7:16:e1:0f:ab:41:67:9c:1a:b4:7b:aa:9f:82:5a:
d0:f6:05:7b:ef:f9:f4:fd:ad:c6:8f:a3:bf:90:87:
dc:13:a7:ad:fb:a4:a8:13:7f:59:5b:b2:71:96:5d:
9f:2e:46:ec:5f:70:76:b1:be:02:f6:ef:53:93:91:
b2:b2:33:8d:62:4f:6e:f1:52:1c:b7:1c:6b:fd:a1:
fc:2f:76:ab:d6:2a:9e:b4:a8:39:3f:d7:0f:4b:0b:
b6:07:05:95:26:07:27:81:d9:b5:ea:8e:98:21:08:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:9D:A5:E8:84:28:18:1E:C7:A3:F9:AB:33:F6:AB:8F:0C:F1:09
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LAOdpeiEKBgex6P5qzP2q48M8Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.13.0/24
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0/24
5.105.51.0-5.105.55.255
5.105.66.0/24
5.105.69.0/24
5.105.72.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.118.0/24
5.105.124.0/24
5.105.126.0/24
5.105.137.0/24
5.105.143.0/24
5.105.166.0/24
5.105.168.0/24
5.105.174.0/23
5.105.177.0/24
5.105.198.0-5.105.200.255
5.105.216.0/24
5.105.218.0/23
5.105.221.0/24
5.105.226.0/23
5.105.229.0/24
217.67.76.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:3d:15:4d:71:8d:53:f9:ea:63:f9:bd:52:aa:61:dd:a7:f2:
ae:1a:79:17:9c:f9:b4:ef:8d:ec:e0:30:68:ca:3b:c2:06:72:
a0:d4:3b:8c:6c:3f:7c:26:44:9e:7d:6b:88:99:51:8a:ac:37:
fb:02:d6:a6:25:33:31:51:ac:3b:23:c8:02:b4:53:59:3d:2e:
9d:4d:55:2c:c8:02:90:99:5f:d5:f0:9d:26:3e:2c:87:b8:69:
dc:e4:02:63:02:e7:83:e9:e7:a5:23:91:19:50:21:03:2e:c9:
95:9b:c8:7c:93:d0:df:b8:e7:b3:e4:72:5b:7d:0b:90:c1:ad:
53:5e:04:56:6b:fa:d5:0f:5f:31:53:98:b7:37:c9:63:89:c9:
0f:89:f7:2c:48:14:b5:80:20:45:69:9f:35:76:d0:6c:82:28:
97:08:85:59:a1:da:4a:01:33:6e:c2:2e:fd:08:b1:14:43:72:
71:0f:0c:08:5a:21:6d:d1:04:9f:cd:a6:10:bd:5d:11:39:1f:
b9:1c:42:ef:f4:93:1f:48:1f:20:af:3b:87:07:03:4a:e0:0c:
ce:37:cc:eb:bb:49:28:6f:f1:40:3a:8f:5e:4e:fa:6c:16:87:
ba:ba:4d:97:c5:4f:e0:31:45:5b:05:6b:25:4e:ed:86:3f:e5:
3d:79:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 11:05:47 2023 by rpki-client on console-ams.rpki-client.org