Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W2psPzxv7vU4F17vrrnkkXaiR60.roa
File: W2psPzxv7vU4F17vrrnkkXaiR60.roa (raw, json)
Hash identifier: UZYQaL7bNFEdbHElWmt9s3aCI0NlbCQJkHA8VtIb8f4=
Subject key identifier: 5B:6A:6C:3F:3C:6F:EE:F5:38:17:5E:EF:AE:B9:E4:91:76:A2:47:AD
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01884E936E65FD70A13BAD88CE9745B5AFBD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W2psPzxv7vU4F17vrrnkkXaiR60.roa
Signing time: Wed 24 May 2023 16:24:24 +0000
ROA not before: Wed 24 May 2023 16:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:93:6e:65:fd:70:a1:3b:ad:88:ce:97:45:b5:af:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 24 16:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b6a6c3f3c6feef538175eefaeb9e49176a247ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:57:8f:5d:15:23:c1:10:2b:da:7b:14:d1:
a2:cb:84:55:ea:2c:ea:0e:81:74:ba:69:e9:4a:af:
0f:87:de:f6:62:9e:af:2e:ce:3b:2f:2c:f7:b8:8b:
62:1b:a7:69:88:65:1a:a1:dd:72:31:40:04:8f:88:
43:f0:a2:de:f4:5d:d5:de:fd:9b:f1:8d:e4:4f:52:
b5:6c:e6:7f:40:c5:1d:a2:d7:d4:f3:8c:a3:25:ac:
e9:27:44:0a:bf:64:0e:fc:b4:0c:c8:1b:5d:cc:34:
80:72:39:09:45:b9:6c:21:ef:74:75:f5:01:7b:2c:
38:c6:ae:da:8c:ed:8c:f8:d1:be:8d:ab:03:30:68:
2c:5c:18:bd:37:88:c7:eb:b6:ff:84:63:08:66:98:
de:76:62:dc:cf:f0:c2:5d:c3:3e:f2:05:8b:39:4d:
a8:8d:a7:c4:52:58:d7:53:27:2f:c7:6f:34:42:a9:
8f:ea:13:46:1d:8d:1b:73:21:74:c8:9b:bd:88:69:
6c:12:ca:9e:c2:21:83:85:68:ea:0a:3b:92:5b:8b:
7c:d0:27:95:c2:6d:18:db:60:4a:31:19:4a:5b:90:
fc:b3:3b:29:af:8c:6b:2e:24:da:c0:1d:8b:6d:d9:
ff:98:a1:18:b1:4b:1b:9a:20:02:f6:b6:63:14:3f:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6A:6C:3F:3C:6F:EE:F5:38:17:5E:EF:AE:B9:E4:91:76:A2:47:AD
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W2psPzxv7vU4F17vrrnkkXaiR60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.41.0/24
5.105.51.0/24
5.105.64.0/24
5.105.71.0/24
5.105.77.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.215.0/24
5.105.218.0/24
5.105.221.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
76:80:01:6b:18:63:a5:89:f7:43:55:0a:28:91:ec:1c:94:6a:
ad:6b:31:41:68:0a:63:4a:62:22:72:34:50:ff:1e:f0:8f:64:
e3:c3:5d:9d:61:b9:ce:f9:3b:3e:36:17:b6:06:c1:a3:57:f5:
8c:cb:15:0a:a2:0e:3d:d2:c4:23:88:52:85:9e:4a:7d:5a:84:
15:ed:c0:7e:cc:a7:5d:1f:55:df:44:c7:6b:3d:4c:f5:c5:96:
03:64:76:a8:19:15:97:1f:c9:38:15:9a:72:d2:ea:94:79:5a:
a7:30:d2:a5:a9:b0:dd:ec:f4:64:fb:44:15:99:28:dd:13:fc:
3b:87:a7:95:25:1e:94:0b:ba:61:ac:b2:2c:c1:9a:2f:dd:45:
24:c9:3d:4c:95:f8:87:55:7d:e4:74:f7:3f:c6:ce:ff:d9:60:
30:b1:41:56:73:78:70:c8:bd:1c:b9:51:d2:a7:71:c2:1e:1b:
2c:0a:fa:b3:0a:1a:da:95:43:05:7a:8d:ea:96:51:12:e0:11:
c8:fc:35:da:b0:8b:48:54:a7:1f:e7:95:84:60:b3:47:68:21:
c0:59:d9:29:a2:97:88:90:0c:4f:8f:d8:08:7a:2b:5b:70:80:
57:34:46:b9:db:b8:4c:a1:95:3f:5c:64:99:a0:50:c2:b2:9c:
b3:a0:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org