Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/UWzRxdpW98hwA_DvwZ79UhxztOA.roa
File: UWzRxdpW98hwA_DvwZ79UhxztOA.roa (raw, json)
Hash identifier: zY7+1vSRevBViQz3cBFHGAsqH8MFRFZYnq40w+Q+d2k=
Subject key identifier: 51:6C:D1:C5:DA:56:F7:C8:70:03:F0:EF:C1:9E:FD:52:1C:73:B4:E0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018848659F29ADF43F3989B757CFFFA69E23
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/UWzRxdpW98hwA_DvwZ79UhxztOA.roa
Signing time: Tue 23 May 2023 11:36:39 +0000
ROA not before: Tue 23 May 2023 11:36:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:65:9f:29:ad:f4:3f:39:89:b7:57:cf:ff:a6:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 23 11:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=516cd1c5da56f7c87003f0efc19efd521c73b4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:66:24:24:79:62:14:33:1e:71:68:a5:76:
d7:8c:f1:77:8d:74:00:bc:db:51:be:52:97:1d:77:
f2:c7:cc:94:20:a9:80:d8:2b:4a:b9:12:93:d7:c7:
bd:55:dd:25:9b:b0:ff:97:3f:07:b7:fb:be:b4:50:
ac:b4:c3:92:6a:4f:ac:27:6f:d2:c7:41:4c:31:fd:
23:b8:56:96:a0:0a:89:cf:97:99:b8:f7:06:1c:9a:
cb:30:9d:5c:23:4b:74:b6:b6:96:05:fb:e5:5f:65:
6c:cf:b7:07:e5:39:d8:35:66:b7:86:ea:4a:d4:b2:
45:85:7e:f2:43:7a:76:c3:23:1b:3d:24:fa:39:01:
64:3d:2f:b1:23:c8:ec:d5:eb:80:32:9e:a2:51:28:
d0:0c:b8:ea:3f:d9:8c:8d:7e:17:67:e7:b4:af:ef:
3b:6a:ff:d9:d7:42:b4:2f:a8:ed:a1:e3:32:0c:c0:
76:b5:77:6d:2a:19:df:c2:0d:c4:c8:83:c0:6d:62:
32:05:9f:e7:9a:0b:ab:87:8a:a2:4c:01:14:e7:c1:
ee:a6:a5:e1:8b:ea:1c:10:ef:32:a6:a8:b9:12:b2:
2b:ee:e8:fa:3a:18:96:00:a0:ff:e6:e8:74:db:27:
5b:13:92:0b:4c:56:9b:53:b8:7d:6a:3a:f8:8c:6f:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:D1:C5:DA:56:F7:C8:70:03:F0:EF:C1:9E:FD:52:1C:73:B4:E0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/UWzRxdpW98hwA_DvwZ79UhxztOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.41.0/24
5.105.51.0/24
5.105.64.0/24
5.105.71.0/24
5.105.77.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.215.0/24
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3f:a2:6b:4e:f7:31:33:32:d0:3c:47:e5:21:c5:50:cf:dd:
28:f2:b1:4d:15:0d:76:5c:00:e9:31:0f:77:e4:5a:6f:5c:ba:
5c:b2:98:69:81:85:14:c1:f3:b8:c7:83:74:29:21:ce:64:2b:
b2:ff:a4:cd:ea:8a:c6:78:a5:b8:e2:36:52:0a:5f:1b:f2:7c:
72:9e:fc:05:77:1b:f5:40:73:c9:eb:d0:9f:69:ec:56:cc:fa:
a5:7e:08:21:48:ad:b9:f2:9a:80:83:2e:c5:f2:28:c0:02:f1:
a5:73:7b:9a:07:37:7d:fc:09:91:d6:1d:c5:a0:2a:5f:c6:0b:
11:b4:98:8e:58:d7:60:aa:9f:9b:1c:f1:2b:68:e4:ca:62:9a:
2e:af:bb:1f:8c:8d:ae:df:22:1b:eb:09:bd:b9:ca:81:3c:66:
6f:7d:25:a8:73:11:3f:40:e5:44:8d:d7:b0:88:1a:56:61:c0:
37:e0:45:83:e9:8a:e0:bd:6f:39:26:5e:96:90:d7:e8:e6:e8:
40:0e:9b:15:60:54:c9:e2:23:f2:b5:01:83:90:7b:01:be:83:
64:39:3c:66:78:26:08:2b:da:cc:d4:72:05:97:ec:6d:52:b0:
51:e2:0d:20:7d:9f:66:0c:19:c1:07:58:30:94:6f:47:6f:32:
13:7b:c2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org