Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XDPhkgtQMwnJ3AHPgTYqyuCzLjw.roa
File: XDPhkgtQMwnJ3AHPgTYqyuCzLjw.roa (raw, json)
Hash identifier: Z74COQ9FSzF3dXQws/UBbYSQuCQ9axfsBe095MhIOFg=
Subject key identifier: 5C:33:E1:92:0B:50:33:09:C9:DC:01:CF:81:36:2A:CA:E0:B3:2E:3C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01882949ACE40459DB60A6F37CEA03003EB0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XDPhkgtQMwnJ3AHPgTYqyuCzLjw.roa
Signing time: Wed 17 May 2023 10:37:54 +0000
ROA not before: Wed 17 May 2023 10:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:49:ac:e4:04:59:db:60:a6:f3:7c:ea:03:00:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 17 10:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c33e1920b503309c9dc01cf81362acae0b32e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:b7:93:0f:a6:96:a4:75:4c:19:3d:ca:a2:
76:ff:9f:88:0f:1e:4b:19:11:5d:09:d5:39:64:72:
39:34:e0:5f:cd:ff:e5:25:9a:31:f3:63:a0:4a:4f:
ec:9e:1a:87:4a:86:62:e6:ec:8b:b1:a1:61:cb:87:
06:eb:54:14:ab:00:c5:b5:fd:c1:45:9b:cc:fc:b2:
17:0f:a9:6c:89:75:29:af:18:9d:9a:7a:c9:27:c5:
84:82:6b:ec:02:19:e8:69:63:99:21:6c:4d:75:9b:
23:dd:86:0b:88:b3:f2:d9:4b:37:ba:d7:6a:e9:04:
5a:95:9b:42:49:f9:fe:5b:5d:c7:6d:9a:05:54:ee:
e0:61:3e:52:2d:cf:9c:1c:c8:70:ff:4c:8e:df:73:
67:d7:27:ec:9b:69:44:ac:0f:66:ae:3f:6b:3f:e3:
8c:02:5c:1c:cd:0b:20:9d:a7:16:04:c9:0e:ab:83:
f8:80:f8:c7:1f:ff:01:ea:68:2f:f9:eb:27:26:ee:
9b:ee:aa:da:89:59:b0:14:fd:32:39:03:90:c4:28:
ce:84:54:04:69:a4:00:a0:b4:f1:4d:8c:0d:bd:fa:
ca:30:63:e4:2a:60:cf:fa:e4:f1:32:0d:16:1e:5b:
ad:92:ee:4f:e0:4c:c7:2d:10:88:cc:9f:f2:72:b1:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:33:E1:92:0B:50:33:09:C9:DC:01:CF:81:36:2A:CA:E0:B3:2E:3C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XDPhkgtQMwnJ3AHPgTYqyuCzLjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.26.0/24
5.105.31.0/24
5.105.51.0/24
5.105.64.0/24
5.105.75.0/24
5.105.77.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
be:44:54:1d:d1:64:d2:b0:1e:d0:55:93:fe:bb:99:54:7e:59:
9e:d2:b0:29:77:f2:ac:3f:e5:3c:cc:14:57:a7:53:9e:f0:02:
aa:88:83:3c:84:0c:6d:63:ec:0e:fb:0e:53:c0:b5:02:fc:a8:
62:22:b8:9c:3c:a0:c6:d3:9d:c0:00:e6:fd:42:eb:fe:ab:de:
1a:44:e8:93:c2:01:1d:24:3a:c3:85:f3:b4:f6:4f:c7:68:44:
44:02:b4:d4:82:97:30:86:e9:d3:6f:a4:35:35:a5:ca:46:a1:
0d:6f:5e:58:bc:2b:cf:b2:a1:83:d5:8a:8a:2e:9d:84:62:a1:
73:13:98:8c:20:59:27:75:bd:14:1c:b6:80:cb:91:d8:2a:6d:
fb:af:ac:c4:59:60:0b:bb:65:b5:2b:c8:03:18:c2:8b:d3:dc:
61:3a:0d:b4:62:dc:62:6c:26:55:ba:ca:0b:cc:71:55:ba:2f:
11:2e:c3:3e:8b:18:14:b8:84:4e:20:08:5b:69:6c:99:68:f1:
69:0c:e8:22:95:a3:fb:8c:e8:27:07:4f:2d:09:9b:59:60:06:
20:5c:d4:10:9d:67:30:3f:f3:8d:45:7d:8f:3d:e6:fd:ed:3f:
d6:99:14:32:98:71:55:f9:72:5a:d6:32:9e:78:af:20:4c:29:
29:5b:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org