Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Nm0xIi9uNtiqWqQVv_oXt7R8cHI.roa
File: Nm0xIi9uNtiqWqQVv_oXt7R8cHI.roa (raw, json)
Hash identifier: tcnvOoSP5zzULEEE6QorKEJ4KvJBKbBAI1/0thWGItw=
Subject key identifier: 36:6D:31:22:2F:6E:36:D8:AA:5A:A4:15:BF:FA:17:B7:B4:7C:70:72
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186A68E0246A5F2F72E4892299A20C728C0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Nm0xIi9uNtiqWqQVv_oXt7R8cHI.roa
Signing time: Fri 03 Mar 2023 08:19:29 +0000
ROA not before: Fri 03 Mar 2023 08:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:8e:02:46:a5:f2:f7:2e:48:92:29:9a:20:c7:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 3 08:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366d31222f6e36d8aa5aa415bffa17b7b47c7072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:0e:97:a8:39:57:d2:37:ae:e8:f0:b2:e6:
6a:58:c1:0a:1d:80:b1:bf:14:09:37:63:4f:5b:14:
dd:08:71:ab:79:7d:2a:ec:fb:1c:94:ea:ed:3d:8b:
5f:53:90:a3:84:65:a0:c3:25:df:72:de:e8:7c:3c:
fc:bd:37:cd:e7:69:00:61:92:60:18:76:ac:8b:cf:
ca:31:c9:98:16:be:30:b7:09:25:de:ca:fc:c9:f5:
00:08:52:3c:1f:f3:53:43:f5:10:17:3f:44:ec:de:
a7:7e:21:15:63:64:32:21:f9:86:e7:a5:16:11:ce:
18:85:8a:d3:08:88:b4:ae:f1:36:05:48:1b:75:82:
ad:5b:2d:51:b1:20:e5:09:49:36:f3:39:e8:df:52:
38:ce:40:a9:23:92:af:08:5a:a6:29:75:fe:4d:8f:
70:f6:dc:5b:d9:99:d8:6c:dd:ad:55:2d:09:8f:ca:
9b:4a:a5:70:65:b3:ba:c6:30:27:75:fd:61:57:bb:
6e:df:be:ee:bb:be:a8:30:a9:01:6a:e6:3d:e0:49:
86:32:5b:e0:31:19:18:66:36:da:bc:47:b8:1c:f9:
e6:06:06:24:4b:d0:29:9c:c3:15:d6:24:a3:2f:7a:
fa:0b:ef:e9:f9:f8:c5:4d:f0:10:de:c7:d9:c1:59:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6D:31:22:2F:6E:36:D8:AA:5A:A4:15:BF:FA:17:B7:B4:7C:70:72
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Nm0xIi9uNtiqWqQVv_oXt7R8cHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.19.0/24
5.105.32.0/24
5.105.42.0/24
5.105.63.0/24
5.105.68.0/23
5.105.80.0/24
5.105.112.0/22
5.105.124.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.226.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:11:8c:fa:f1:c3:6e:d8:56:7e:18:27:81:90:c4:d4:92:72:
75:be:76:7f:ef:5e:4f:b0:f8:5b:5e:a0:3d:28:ab:cc:42:d7:
df:da:1f:da:99:14:a2:ab:00:90:25:cd:82:14:4d:53:d2:22:
0c:99:47:de:10:64:c6:9a:87:a4:63:4d:66:33:04:fe:d5:bc:
ea:53:8a:95:ce:9b:d9:55:f0:dd:79:4c:68:18:54:20:75:20:
09:cb:e0:16:e7:0b:c6:44:c8:71:d6:19:f6:98:53:7e:66:19:
ab:05:c9:6e:8f:79:f1:22:47:ce:b6:a2:2c:20:99:ca:c5:e9:
fa:e7:ec:33:3a:3a:26:cf:36:a4:fc:1a:a1:3f:21:2e:bb:09:
a6:f5:a9:86:6d:67:14:e7:c3:0e:78:0c:d8:f5:29:96:9d:59:
af:a5:aa:90:c4:b6:4b:71:82:35:4e:5f:69:97:84:2c:b5:9d:
18:33:84:df:f7:02:33:23:fb:f4:cf:d0:fb:1b:fc:29:eb:74:
bf:e1:83:3b:00:70:f9:06:19:81:97:a5:b4:f1:e8:8e:2d:60:
4a:55:85:f2:d2:a3:4e:0d:76:60:b8:be:7c:c3:ab:d9:bf:1c:
89:7b:b7:59:d1:c2:75:9e:63:58:ed:b4:2f:5d:07:26:d8:33:
e4:5a:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org