Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W_szW0L6HYX5TuoXVI3RWIabH1A.roa
File: W_szW0L6HYX5TuoXVI3RWIabH1A.roa (raw, json)
Hash identifier: LpH1S2oTMhDvuz7sL/1xqOogglavzotWACadlI/1nBQ=
Subject key identifier: 5B:FB:33:5B:42:FA:1D:85:F9:4E:EA:17:54:8D:D1:58:86:9B:1F:50
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E29539515B7F029E2A1404E601C8E77E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W_szW0L6HYX5TuoXVI3RWIabH1A.roa
Signing time: Wed 03 May 2023 17:07:23 +0000
ROA not before: Wed 03 May 2023 17:07:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:95:39:51:5b:7f:02:9e:2a:14:04:e6:01:c8:e7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 3 17:07:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bfb335b42fa1d85f94eea17548dd158869b1f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:52:24:d7:1f:e7:48:73:aa:5e:72:6a:7e:
83:5a:b2:56:43:ec:eb:d8:2d:67:b3:60:12:bd:82:
54:13:7f:01:e6:3c:80:ac:e6:c9:63:7d:b3:4f:c4:
bd:ec:8b:71:bf:23:b3:49:c5:0c:2b:f0:2b:4d:a4:
23:45:cf:80:6c:75:36:d8:2b:af:b6:56:90:f8:51:
26:2a:48:e5:b3:4d:c9:e1:ce:61:67:7b:cb:99:01:
af:83:f0:c0:5c:8e:00:d4:52:fe:0b:6c:77:f9:76:
96:75:f5:ab:0a:d4:4e:d4:ea:bf:ae:00:ac:e0:35:
6f:49:ed:dd:0b:fa:63:18:a1:49:69:71:96:65:d4:
88:9f:96:97:a4:61:ac:2c:e1:00:62:19:87:d2:ce:
0c:14:55:99:2a:e1:f5:17:cb:5b:2c:0d:4d:04:69:
02:32:cf:11:fc:e5:0e:c9:7c:66:b7:fd:17:41:ad:
ed:8f:3f:92:37:fc:62:98:63:26:93:97:b6:fd:d2:
bd:b4:96:a7:3a:49:38:b0:9e:f6:a6:90:aa:a0:10:
a7:36:5d:5e:63:12:fb:1c:b5:3d:e6:71:44:90:f6:
36:b0:c3:ef:b0:ea:22:2b:d2:8c:01:bc:61:81:7d:
8b:e5:30:88:0f:01:ce:88:57:d9:a5:58:f6:b0:80:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:33:5B:42:FA:1D:85:F9:4E:EA:17:54:8D:D1:58:86:9B:1F:50
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W_szW0L6HYX5TuoXVI3RWIabH1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.49.0/24
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.139.0/24
5.105.142.0/23
5.105.158.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:48:9d:a6:97:eb:2d:c9:21:42:a3:63:14:b5:34:7c:b0:58:
e5:26:c7:59:8e:b3:af:98:61:47:f1:45:41:53:73:c4:9d:da:
4b:b5:4c:c6:9e:72:d7:40:5c:6b:aa:73:8e:af:71:7f:88:1e:
78:74:3b:5e:26:d6:68:ac:86:d6:d3:6e:a1:a5:d1:2b:49:b6:
56:bc:de:8b:3c:7b:43:39:b8:3f:3c:24:58:34:31:8b:c3:b5:
78:e1:e6:33:e6:d2:76:2d:3a:10:bc:06:33:21:a9:3c:10:2e:
b9:49:26:1b:be:03:cc:c7:d9:79:e5:4a:22:4e:95:d9:f6:ac:
56:ea:0f:64:5f:4d:02:a4:0c:d7:b1:ab:25:ef:c9:b7:b2:c9:
63:9c:6f:08:a7:fc:6b:d3:aa:05:6c:06:a2:ec:4d:92:ed:59:
da:32:27:54:98:4a:7e:84:b9:ee:00:63:db:86:1a:a1:1a:e9:
81:af:6f:e0:29:0a:f4:e2:80:ba:51:0f:3b:90:26:7f:50:c8:
dd:ab:8d:fd:63:73:1d:a6:61:e7:71:e2:ce:52:af:8b:1e:94:
38:62:22:7f:51:a7:d1:a2:6a:a1:61:fb:76:a7:4e:18:d7:ff:
3b:0c:d4:d4:64:2f:0d:3e:7c:cc:8c:10:28:bc:37:a4:bc:10:
e9:c3:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org