Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OV0FSsb6JQX9q6er-8xrzI1c0Y0.roa
File: OV0FSsb6JQX9q6er-8xrzI1c0Y0.roa (raw, json)
Hash identifier: 3FPg9qR8tuxScVH0kPyhEm0gK9LOZ5ix3zJhxXoZKUo=
Subject key identifier: 39:5D:05:4A:C6:FA:25:05:FD:AB:A7:AB:FB:CC:6B:CC:8D:5C:D1:8D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018774E8D47C1CDE802861AEC095152A2C42
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OV0FSsb6JQX9q6er-8xrzI1c0Y0.roa
Signing time: Wed 12 Apr 2023 10:00:28 +0000
ROA not before: Wed 12 Apr 2023 10:00:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:e8:d4:7c:1c:de:80:28:61:ae:c0:95:15:2a:2c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 12 10:00:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=395d054ac6fa2505fdaba7abfbcc6bcc8d5cd18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:86:e1:3b:70:99:7d:29:9f:4e:b9:d1:cb:
5f:7e:7d:5a:53:be:ed:96:07:ca:d5:21:44:9c:ae:
2e:10:0b:41:02:24:36:29:45:2e:6e:1b:c2:cc:d9:
58:22:61:d9:28:a7:74:32:d1:2b:6b:42:78:83:bc:
0b:ff:b3:5b:60:83:e9:29:5e:c3:6c:27:26:a5:c9:
7b:34:f1:f3:30:a2:5a:3c:49:26:02:01:37:5c:88:
d6:a3:72:f7:1b:c6:1e:40:1a:1f:24:3d:b4:a5:a8:
7e:d5:80:d9:54:59:48:a6:ed:76:42:34:ee:c4:a1:
a6:58:30:85:89:45:b7:f9:b3:9b:54:d4:42:15:3b:
d6:90:7c:dc:7c:59:8a:21:06:ad:68:9a:42:ac:63:
81:74:dc:c5:49:c5:8c:a5:4f:b0:ad:15:e0:ea:01:
50:a8:e7:66:cb:28:de:7a:a7:77:fc:f7:4b:e3:b8:
a4:2b:9f:3d:d7:8a:52:15:8e:81:d3:e7:13:1d:d8:
20:18:d2:a3:6c:59:16:98:12:90:db:e5:2c:49:d3:
67:70:b3:ae:49:3a:cf:9e:52:28:cb:6a:b9:b9:b9:
4f:d2:7d:60:eb:cc:88:ad:75:17:06:9e:1b:f2:b1:
db:8c:3b:55:f3:cd:1c:2d:41:26:0b:7f:bc:b0:b8:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5D:05:4A:C6:FA:25:05:FD:AB:A7:AB:FB:CC:6B:CC:8D:5C:D1:8D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OV0FSsb6JQX9q6er-8xrzI1c0Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.30.0/23
5.105.68.0/23
5.105.82.0/24
5.105.94.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5b:e5:48:87:8e:8d:27:bf:17:59:04:1f:d0:f0:7b:05:8f:
cd:72:7a:cd:3d:43:b4:a6:bd:df:91:e8:18:80:60:eb:85:65:
f4:be:eb:7d:75:4f:2d:c7:86:c9:db:83:88:55:b2:66:46:8b:
13:07:09:5b:7a:74:de:0b:f2:81:29:4b:c9:d0:e1:cf:ff:55:
17:c1:80:f4:e3:d6:2a:13:fd:4f:24:08:bd:bf:da:6d:02:e9:
9b:48:fd:1b:fe:fb:01:3a:08:ec:0e:7a:40:c6:1a:98:62:6d:
eb:12:f7:19:c3:17:51:c2:53:11:3f:96:a1:0a:3f:b1:9e:b5:
00:d4:b5:b7:cb:16:c5:cc:80:69:de:fb:b0:9a:a4:77:1d:cf:
cc:fa:e5:ae:e4:e2:e6:8e:a1:37:92:1d:35:89:60:05:57:e3:
bc:58:4c:d5:cd:77:eb:99:a7:73:5c:3f:a8:5c:7e:69:1a:6e:
3e:5f:4c:64:25:79:fc:b7:c0:dc:93:5f:6e:b0:54:44:1d:62:
ba:05:14:3d:55:8b:97:59:60:e5:46:b4:27:48:06:a4:b7:78:
9a:7b:2f:ce:26:10:90:d7:84:4d:ef:66:89:66:f0:12:ff:7d:
a6:47:bb:fb:69:90:c0:dd:68:5f:20:fe:3a:bd:8f:6a:3c:95:
1e:3f:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org