Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/P4Ion96P4dJQGXSXg1N9kwRE0Gs.roa
File: P4Ion96P4dJQGXSXg1N9kwRE0Gs.roa (raw, json)
Hash identifier: nRx7gCWNEeekF0Bd6vPXQ2tf9Y8cN1rjjqt78e90XC8=
Subject key identifier: 3F:82:28:9F:DE:8F:E1:D2:50:19:74:97:83:53:7D:93:04:44:D0:6B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A333535B07AA4228ACE15AD3EE49154BC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/P4Ion96P4dJQGXSXg1N9kwRE0Gs.roa
Signing time: Sat 26 Aug 2023 18:57:19 +0000
ROA not before: Sat 26 Aug 2023 18:57:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:35:35:b0:7a:a4:22:8a:ce:15:ad:3e:e4:91:54:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 26 18:57:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f82289fde8fe1d25019749783537d930444d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:8f:cd:dd:2e:b7:b1:20:a5:e1:89:27:ad:
c0:cf:5c:4d:e0:4e:53:2b:ae:45:02:30:4d:9a:fa:
47:99:4b:ff:92:5b:5f:38:88:d4:c4:e0:96:67:f1:
85:44:a4:c9:50:27:87:43:bf:c9:51:8c:f5:52:47:
16:d4:05:4c:cd:9f:f6:7a:d3:f7:d1:06:ba:ec:dc:
26:0a:2b:41:4c:0b:3a:14:05:b8:b0:68:d5:4c:ca:
90:92:90:a1:e7:4c:be:4d:13:94:ef:26:b6:b4:75:
a7:e0:81:4a:c1:d5:61:31:8b:a2:2e:95:d8:fd:59:
6d:0c:cf:a0:97:81:a6:6e:e5:10:b3:63:a4:67:8f:
b3:44:0c:34:8c:72:c1:14:63:9e:1f:a0:a8:b0:70:
9a:cb:8a:87:72:73:a9:ec:ab:b7:76:d3:ec:f2:4d:
f3:cf:ee:05:50:43:b8:50:99:ab:6d:e9:21:45:6a:
85:af:b8:dc:a7:4f:b9:17:eb:70:12:72:19:2c:0d:
a0:4f:eb:b4:ba:86:3b:b1:7d:12:b8:9e:fe:fa:cf:
20:07:e5:4b:60:74:00:02:e8:d9:ef:07:68:6a:36:
29:d7:96:7d:85:88:fa:48:50:b5:c8:c9:d5:23:96:
2e:a5:bb:9d:6c:96:92:61:6a:45:28:48:26:04:23:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:82:28:9F:DE:8F:E1:D2:50:19:74:97:83:53:7D:93:04:44:D0:6B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/P4Ion96P4dJQGXSXg1N9kwRE0Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.84.0/24
5.105.110.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/24
5.105.157.0/24
5.105.162.0/24
5.105.203.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
16:04:c9:b8:79:63:2b:2f:bc:f1:e6:1a:eb:b8:5b:7c:e3:89:
1a:1e:13:a4:6f:2c:b1:91:22:9a:ef:bb:99:74:62:d8:83:7c:
c3:53:b2:5e:61:6f:b2:6c:5a:2e:ef:45:1f:06:97:b8:bf:de:
7e:1d:df:54:6e:5e:16:7d:29:5c:26:bd:4b:d6:13:35:da:56:
62:fe:91:76:5a:30:96:96:f1:43:48:d4:ba:c7:7e:53:e5:dc:
c9:f2:27:de:46:d5:6e:e2:2a:89:38:53:64:e4:1a:b9:4e:6d:
4c:46:1f:3d:1a:6f:84:69:a9:af:be:a2:a4:21:07:f1:e5:f2:
c0:6b:e6:30:ad:6f:87:3c:bd:44:4e:20:76:33:5a:8c:e1:db:
92:13:54:5a:68:c8:39:e4:5e:2b:66:5b:f3:99:af:6a:8a:73:
b8:2b:7c:4c:91:97:b8:0b:59:eb:b9:ea:5d:82:c6:33:63:da:
dd:af:3e:b6:c8:15:d3:7a:ed:c6:ad:b2:b0:5c:e4:0e:f1:72:
69:a8:94:95:d3:03:f3:c6:ba:0c:ba:b6:07:06:b0:43:d4:f6:
19:0f:52:6c:e9:8c:ee:4e:16:6d:c7:6a:34:45:14:bc:3f:c0:
81:7a:21:28:c1:00:da:99:47:43:f0:59:64:99:bf:8c:c3:cb:
2f:35:f7:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 28 13:16:14 2023 by rpki-client on console-fra.rpki-client.org