Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_H97bfRed3ofEJdjiyoFo2vpu78.roa
File: _H97bfRed3ofEJdjiyoFo2vpu78.roa (raw, json)
Hash identifier: 8BK8xIELJAMCknVpNgK6k1VMe+8W8DZ7InM6B/LKlx8=
Subject key identifier: FC:7F:7B:6D:F4:5E:77:7A:1F:10:97:63:8B:2A:05:A3:6B:E9:BB:BF
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B03E2847F4FD24B5E22966DE1EC5D971
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_H97bfRed3ofEJdjiyoFo2vpu78.roa
Signing time: Mon 12 Jun 2023 15:34:03 +0000
ROA not before: Mon 12 Jun 2023 15:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:3e:28:47:f4:fd:24:b5:e2:29:66:de:1e:c5:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 12 15:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc7f7b6df45e777a1f1097638b2a05a36be9bbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:d9:c3:72:7d:6b:5b:70:d7:a4:85:6f:97:
6d:57:92:ee:d6:86:25:24:37:99:12:50:dd:36:ab:
70:ca:1b:cb:70:11:f7:15:05:51:e1:69:3f:7a:bb:
d9:4b:a1:9a:64:96:52:db:8e:f3:9b:41:ff:c8:0f:
2f:2b:3d:d7:39:87:c4:b7:77:4e:a5:8f:09:d9:ff:
57:68:1e:cc:f2:01:e7:40:5e:90:e9:3c:b3:fa:6b:
7c:da:93:36:09:d6:41:5c:9a:d1:21:35:51:d2:f1:
3a:ca:7b:2d:81:bb:26:a3:ee:7e:1a:ac:2f:8b:27:
da:c1:3e:a1:c4:cc:75:b7:fe:9a:25:c8:87:72:a3:
61:33:d1:f5:08:3d:83:bb:6c:88:68:5c:9c:60:e6:
b8:06:79:35:4c:7f:48:0f:55:d0:4c:a8:14:45:51:
e3:2d:02:3e:40:29:bf:eb:9a:43:53:3a:7a:27:e3:
ee:6c:c3:41:cd:47:c5:4e:09:dd:43:e0:e7:ab:db:
fb:51:03:ee:ee:39:5d:13:7f:d4:80:50:41:ce:0f:
18:e0:d9:ea:70:12:2c:89:4a:13:6b:52:73:1d:a7:
7b:df:81:13:78:c1:e3:25:fa:f5:b6:84:53:18:f8:
68:7d:91:44:86:9a:02:8b:40:03:f2:c5:64:c0:b2:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:7B:6D:F4:5E:77:7A:1F:10:97:63:8B:2A:05:A3:6B:E9:BB:BF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_H97bfRed3ofEJdjiyoFo2vpu78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.5.0/24
5.105.7.0/24
5.105.15.0/24
5.105.18.0/23
5.105.26.0/24
5.105.36.0/24
5.105.113.0/24
5.105.118.0/24
5.105.123.0/24
5.105.143.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.253.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1b:5b:fd:60:ea:3c:38:53:f2:e1:1f:c0:f4:23:85:b1:86:
0d:98:14:2a:bd:93:0e:54:bb:0f:cb:85:5f:9f:5e:ee:94:95:
ca:90:15:78:81:4e:c1:07:e1:de:87:e3:fa:61:ff:3b:ad:56:
c3:d4:8a:e7:cc:b4:3c:64:74:78:73:9c:66:58:09:dc:cc:56:
c1:7e:dc:23:d2:48:30:e7:56:3f:89:f0:dd:45:54:55:ec:ee:
c9:5f:84:44:af:e1:70:67:ce:4b:44:59:d7:72:ce:a7:e1:d2:
94:b5:8e:4c:6e:2f:2a:05:cf:42:d3:7f:b4:f5:5b:73:63:fd:
05:a6:4d:7f:71:b5:bf:7b:47:6d:83:7a:03:7f:21:03:e4:61:
db:17:58:17:61:90:7a:0a:99:67:6c:04:56:e5:b9:bb:3b:83:
fc:65:c1:ce:1a:7c:17:7b:aa:e0:be:8b:82:0f:bf:78:83:d4:
bf:07:73:2e:94:9b:0a:f9:86:2f:43:c0:6b:a4:39:70:da:14:
35:86:cb:0f:6b:61:05:93:4a:13:ae:d8:37:ed:95:f0:76:02:
51:58:1c:53:c6:4f:e1:5b:51:2e:76:c6:46:13:98:be:ad:4b:
45:65:bb:a6:66:fe:22:72:9a:b6:2c:ce:aa:7c:b5:fa:2c:ad:
99:7f:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org