Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YJCngtINasL8dGC51CreMWLvwww.roa
File: YJCngtINasL8dGC51CreMWLvwww.roa (raw, json)
Hash identifier: K7frrgiFl+TncpFnmMtdZbZjwFD6bL65TQ13VDp1RVY=
Subject key identifier: 60:90:A7:82:D2:0D:6A:C2:FC:74:60:B9:D4:2A:DE:31:62:EF:C3:0C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01874C426E54C5D46FAF588D8447636E645F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YJCngtINasL8dGC51CreMWLvwww.roa
Signing time: Tue 04 Apr 2023 12:33:54 +0000
ROA not before: Tue 04 Apr 2023 12:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:42:6e:54:c5:d4:6f:af:58:8d:84:47:63:6e:64:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 4 12:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6090a782d20d6ac2fc7460b9d42ade3162efc30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:50:b6:a5:a7:80:84:f3:e5:1f:e2:10:56:
b6:f9:fd:ad:1d:ed:34:98:f9:02:a5:23:62:42:4b:
e8:b7:e6:0d:34:5c:0a:63:6e:2d:cf:8d:1f:20:3c:
54:9c:7f:53:00:4f:48:55:f1:b3:d6:64:7e:d7:a7:
fd:5e:97:58:af:3b:a5:9d:21:ad:77:29:11:6d:20:
97:50:49:a9:ae:e6:38:18:21:47:68:44:4b:70:d0:
a5:fd:e6:85:e4:65:87:bb:42:95:b2:42:53:8e:a8:
44:be:a4:33:b3:4a:91:7d:b8:69:c4:c2:b5:5b:7e:
a2:89:77:21:b4:b1:64:65:ba:cd:38:e9:f1:94:6e:
24:3f:22:9f:f3:3b:dc:cb:fe:84:c4:e2:c8:60:88:
fd:8d:c8:83:2c:76:c3:a8:2b:7f:59:46:e0:ce:f6:
52:6f:69:5e:a4:39:e5:b2:20:c5:10:fb:30:6f:e3:
e2:b8:60:a0:0b:33:b8:1f:55:4e:43:23:44:c9:b7:
75:f9:3c:0b:81:21:49:36:8e:dd:dc:e0:fa:68:8b:
30:f5:ce:ec:dc:a7:c1:3f:66:25:b0:d9:ff:31:5d:
b0:9e:e6:8f:59:70:5a:ed:b1:9c:44:e8:a2:7d:4c:
1a:e0:77:7c:db:e8:45:be:87:44:3f:33:f3:14:a3:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:A7:82:D2:0D:6A:C2:FC:74:60:B9:D4:2A:DE:31:62:EF:C3:0C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YJCngtINasL8dGC51CreMWLvwww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.30.0/23
5.105.66.0/24
5.105.68.0/23
5.105.82.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:72:e3:1d:b0:e0:81:61:bd:a0:36:f8:c7:20:cc:d6:b3:94:
49:6f:ff:00:63:27:1d:69:50:f0:bf:a6:d0:20:b9:b7:b0:a5:
67:8f:96:9d:48:24:0f:75:06:fd:54:fc:1b:ea:3e:ab:b4:4c:
43:cf:d1:22:cd:82:dd:64:9e:a0:43:41:64:d5:2e:8d:18:e5:
3a:72:16:1f:d9:cf:96:0d:4d:b0:a6:c2:61:2b:e9:04:77:45:
a1:13:48:38:ba:f2:b2:bf:14:98:05:ec:8f:7f:71:92:20:85:
cb:e0:e2:75:d1:11:e1:08:7b:ed:75:af:81:ce:9b:68:19:16:
97:13:1f:5a:f7:b6:50:85:25:a6:1c:c2:c9:1e:01:6b:ad:8e:
80:d7:40:d1:1a:19:1e:d1:2d:b6:e0:47:0b:41:cf:9f:c6:45:
da:0f:be:2d:09:47:90:dc:3f:ea:2c:35:9b:1c:62:2c:e4:f7:
24:4c:fe:d9:e7:7f:56:24:57:09:61:67:22:04:ce:09:fc:93:
0a:f9:50:4f:4a:5f:67:d2:da:15:9a:94:bf:06:5b:ad:06:b6:
62:d2:0c:c6:68:04:3d:5b:77:2a:28:c3:4b:28:03:08:54:3f:
d3:49:a8:5c:78:b4:c5:f3:64:10:3e:09:41:2c:f7:d6:f7:75:
19:09:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org