Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YgmLeaW5uzS1j2CzVgJVghfpEw4.roa
File: YgmLeaW5uzS1j2CzVgJVghfpEw4.roa (raw, json)
Hash identifier: f35m5z8PjE6dlH1EDu9HsQjDcdFjb4Py8W2wQzEs4tk=
Subject key identifier: 62:09:8B:79:A5:B9:BB:34:B5:8F:60:B3:56:02:55:82:17:E9:13:0E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018940A9B7DB88E02FC7A592E0A084022846
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YgmLeaW5uzS1j2CzVgJVghfpEw4.roa
Signing time: Mon 10 Jul 2023 16:36:51 +0000
ROA not before: Mon 10 Jul 2023 16:36:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:a9:b7:db:88:e0:2f:c7:a5:92:e0:a0:84:02:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 10 16:36:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62098b79a5b9bb34b58f60b35602558217e9130e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:14:43:29:2f:39:97:21:8e:94:bf:1b:cc:6c:
3d:37:10:0c:eb:dd:d1:db:0c:28:40:25:07:cd:be:
d4:b8:07:c4:76:23:d5:46:f1:cc:0c:f5:35:ad:ea:
ab:6f:21:36:a5:ca:c3:98:5b:82:82:e1:0b:36:93:
90:fc:e1:69:4c:f4:0c:34:ea:d1:bc:36:d6:0b:15:
81:a0:2d:97:26:c9:74:cb:15:4b:55:8a:5d:9d:7e:
46:da:26:c4:de:ef:39:38:51:8b:c4:9b:16:3d:eb:
cf:e8:01:d0:75:81:a5:e8:08:fb:89:08:65:3e:d5:
f0:73:7e:fe:81:8f:55:ed:50:bd:98:d3:b1:8a:64:
2e:cb:1a:d5:dd:c9:a4:c5:6b:ca:d6:26:e4:98:b0:
67:02:45:b5:16:7c:56:17:5b:16:b1:ab:16:9a:73:
3e:1c:24:28:78:ad:ac:19:ce:01:16:7c:ac:ea:e2:
89:a9:6a:00:05:ae:4d:a9:06:6b:57:76:c1:ba:7a:
4a:da:bb:d3:29:f4:76:c5:6b:0d:60:f8:79:5e:d2:
48:67:68:28:ee:5d:89:07:21:8b:bc:40:cb:c2:1d:
42:c9:33:94:72:8a:b7:c4:53:d9:44:00:2f:a3:bb:
90:66:a0:7a:71:6a:62:64:3a:8d:84:c0:e5:23:94:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:09:8B:79:A5:B9:BB:34:B5:8F:60:B3:56:02:55:82:17:E9:13:0E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YgmLeaW5uzS1j2CzVgJVghfpEw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0/24
5.105.36.0/24
5.105.45.0/24
5.105.47.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.157.0/24
5.105.162.0/24
5.105.166.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e3:a7:b0:dd:b2:2d:57:a7:25:08:91:17:6f:5f:60:db:fb:
f2:18:7e:87:6e:bc:00:22:c5:be:8e:f5:c8:1c:e9:9d:ea:af:
1c:a0:1f:f8:81:0c:c9:21:3a:7f:ec:5e:70:c1:b1:85:de:69:
12:29:56:26:d6:99:6a:aa:ab:4f:4f:5a:b3:32:ef:ec:b0:05:
0c:96:80:50:89:0c:70:af:8d:02:b2:2b:6c:22:8c:82:17:16:
69:a3:ea:3d:c2:3f:f9:62:7b:c4:71:b9:1e:c0:44:60:23:a6:
6b:68:ed:50:41:c2:f0:ca:d7:cd:63:89:48:96:27:7f:59:c2:
2d:9d:4d:c8:93:82:b4:11:63:42:6a:3d:b0:2f:ab:3a:55:64:
ed:fd:74:e2:a5:08:ff:98:11:b1:da:b4:aa:9b:d3:7d:c9:84:
57:a3:6d:f5:dd:99:34:cd:84:c7:73:48:cd:6a:91:30:be:80:
4a:99:20:63:ae:27:91:ad:a3:14:40:92:45:c6:91:a5:ae:cc:
04:0f:fd:d3:38:07:bf:81:ed:a8:e9:5e:c8:c8:8d:ca:d7:61:
d5:5b:0a:74:fc:4a:3f:02:d4:89:ee:84:13:bf:1f:f2:d8:6d:
3c:4c:b7:6c:a7:70:7c:9f:99:28:d1:ff:91:9c:d8:ef:2a:8a:
22:eb:e9:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org