Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NBtIflEqlNali8YkImvXorWkexQ.roa
File: NBtIflEqlNali8YkImvXorWkexQ.roa (raw, json)
Hash identifier: t66e/xF3cktBu+jSYLJSQMDf246jQ1C9aG8umxEnVZk=
Subject key identifier: 34:1B:48:7E:51:2A:94:D6:A5:8B:C6:24:22:6B:D7:A2:B5:A4:7B:14
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018806148D03EA4FD33F1C4A91788A1D9CE9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NBtIflEqlNali8YkImvXorWkexQ.roa
Signing time: Wed 10 May 2023 14:33:10 +0000
ROA not before: Wed 10 May 2023 14:33:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:14:8d:03:ea:4f:d3:3f:1c:4a:91:78:8a:1d:9c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 10 14:33:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=341b487e512a94d6a58bc624226bd7a2b5a47b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:51:39:f5:4a:31:66:9b:26:e7:2d:55:a7:
66:45:15:ab:3a:9b:a5:ba:e6:65:1a:03:40:3d:52:
45:9f:97:c9:2a:9b:18:00:d9:81:08:eb:49:78:9f:
01:9d:4f:b5:66:db:e8:8e:8c:af:63:2e:3d:69:78:
d2:b1:ec:30:f2:16:9d:35:7f:e3:d0:e8:b6:f3:50:
99:0d:49:7b:06:76:8f:8d:d2:22:95:bf:e1:78:ad:
14:5e:cc:86:1b:5c:ae:6d:bf:f1:74:ac:4b:76:a1:
26:3a:63:a9:45:60:c4:b3:f0:be:2c:0e:bb:2e:00:
f3:4a:f3:db:a8:29:22:59:14:1a:63:79:6c:f5:be:
1d:e3:18:4e:39:71:63:f6:dc:bd:60:a0:44:80:cf:
34:e4:b9:01:8e:d4:38:e5:c6:9e:77:a2:45:3a:5f:
e7:d7:47:c5:96:59:00:3a:6c:d3:a8:1f:e6:9a:9c:
85:1e:75:22:52:7e:90:eb:d2:83:e9:8e:02:57:25:
9b:04:d6:0e:72:bc:f8:cc:32:dd:ec:22:b5:e2:79:
b6:6e:bd:c7:e5:37:dd:26:03:00:de:14:c6:e9:c4:
68:e3:36:05:40:b2:3b:b1:90:c5:69:d1:c9:c2:0d:
ba:25:94:c5:9a:8b:b2:51:5b:36:b2:d3:92:fd:a6:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:48:7E:51:2A:94:D6:A5:8B:C6:24:22:6B:D7:A2:B5:A4:7B:14
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NBtIflEqlNali8YkImvXorWkexQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.18.0/24
5.105.31.0/24
5.105.49.0/24
5.105.51.0/24
5.105.64.0/24
5.105.75.0/24
5.105.77.0/24
5.105.104.0/24
5.105.118.0/24
5.105.123.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b5:f7:68:1a:50:2c:68:7c:93:42:e5:b4:fa:dc:46:9d:3a:
d9:51:68:9d:b1:01:f1:28:62:66:cd:a2:ab:cc:0a:50:cf:28:
62:35:c4:ce:0e:64:92:dd:71:c0:05:56:58:90:ad:85:4a:5c:
7b:6f:b0:c6:fb:c9:82:ce:64:75:a3:49:c4:4f:ec:8d:51:e8:
6a:7d:9c:1d:c2:34:3d:7d:fc:ad:7d:c8:16:e3:1b:6d:60:ae:
96:b4:c9:f8:73:40:1e:f6:30:23:83:93:3c:7b:1f:c1:55:0f:
f6:e3:40:92:b9:d8:d6:aa:d6:18:52:2d:f7:ae:42:f4:03:8e:
7f:4a:b9:05:52:09:3f:68:3e:c3:ae:2e:a6:49:66:23:f2:64:
b0:ee:ea:eb:af:92:02:9e:23:30:86:c7:f6:98:df:31:cd:fc:
bc:1d:ff:ee:0b:ef:17:d5:1d:42:b6:73:39:da:af:5c:fa:b8:
73:03:5f:44:9e:66:1c:9b:14:5c:6a:75:a6:8f:90:51:74:7b:
2c:2a:16:11:e3:3b:30:ef:96:58:12:f2:61:11:42:cd:a9:0a:
f4:4d:4d:59:74:f8:c3:a2:92:ba:e0:e0:ae:11:53:4f:42:23:
83:47:78:11:0b:e8:56:5c:4f:92:4c:11:05:2e:99:7f:40:3a:
08:5f:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org