Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bVgzZvIjYjS9J9RC6J2iMkJB5W0.roa
File: bVgzZvIjYjS9J9RC6J2iMkJB5W0.roa (raw, json)
Hash identifier: pyEALzfZcy1xuOxGNlACMHAf+/NYTA9XMKW7KEFh2RE=
Subject key identifier: 6D:58:33:66:F2:23:62:34:BD:27:D4:42:E8:9D:A2:32:42:41:E5:6D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189345D34002091297919869A1A273B1B92
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bVgzZvIjYjS9J9RC6J2iMkJB5W0.roa
Signing time: Sat 08 Jul 2023 07:17:50 +0000
ROA not before: Sat 08 Jul 2023 07:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.22.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:5d:34:00:20:91:29:79:19:86:9a:1a:27:3b:1b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 8 07:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d583366f2236234bd27d442e89da2324241e56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:08:aa:5e:6a:e7:e4:55:b0:57:f5:3d:20:
81:1d:dd:3b:dc:d1:7c:2a:34:fc:18:97:c0:df:18:
7e:d4:5c:53:d8:8d:43:19:76:a1:ca:9c:85:bd:0c:
cd:39:cd:b7:0a:98:d2:55:ba:0b:56:9d:5e:80:ca:
d9:d5:81:90:73:c7:19:9c:b1:ae:23:f9:3c:f7:c9:
d2:da:5b:e2:7c:d8:0b:03:8b:8a:1a:74:27:a7:19:
b0:5d:89:2e:f1:66:8a:db:18:a5:66:59:56:1c:96:
fe:a2:5a:9e:ed:b6:cd:f6:9f:cc:37:60:32:e5:2c:
88:71:a8:51:bb:67:e2:e4:fb:ec:50:aa:56:60:fc:
fa:fa:ca:0b:84:49:f6:80:6b:f7:23:44:f6:a6:70:
62:d5:29:1d:0b:1e:99:7f:dd:94:f5:b5:f0:f7:a2:
05:95:e3:da:4d:d0:dc:b8:53:cc:d0:b2:c5:41:b6:
4e:75:5c:85:54:64:bb:b1:28:55:fb:be:67:4d:c4:
94:6e:07:70:06:f3:de:86:e6:d9:9e:70:ee:c8:79:
5d:df:98:79:eb:77:3a:60:38:99:4f:cd:af:1b:e8:
64:37:2c:9f:22:32:19:d6:04:9e:c6:cc:5e:b3:0d:
d7:85:5c:39:2d:cd:4a:e1:86:e4:77:27:d9:17:6a:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:33:66:F2:23:62:34:BD:27:D4:42:E8:9D:A2:32:42:41:E5:6D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bVgzZvIjYjS9J9RC6J2iMkJB5W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0-5.105.22.255
5.105.36.0/24
5.105.45.0/24
5.105.47.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0/24
5.105.157.0/24
5.105.162.0/24
5.105.166.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
af:3b:00:ba:78:28:3c:f3:89:f9:02:1f:8e:b2:e6:45:03:5e:
9a:d3:81:d0:12:2b:da:21:81:fb:5d:b1:30:a1:7e:02:8f:88:
03:dc:22:d9:62:ad:41:65:fe:9a:ef:e1:e8:f4:19:ac:a0:7c:
8f:a8:bf:08:47:b0:d1:8e:e3:c6:d4:c7:9b:87:c3:81:fd:08:
fa:52:0e:3b:65:f8:71:10:82:56:9c:fc:21:5b:bf:56:c8:cc:
76:7c:7a:c5:cd:cd:33:d3:20:40:3c:2f:a4:3f:4c:ee:03:f3:
43:5c:07:f9:40:38:9a:29:d8:10:98:0e:f0:c0:69:92:c8:0f:
a9:3d:6e:fd:f2:f8:eb:3b:f9:89:42:fc:78:fb:f5:63:76:34:
76:74:4a:2f:44:47:71:14:97:b2:2d:d6:39:93:ed:ec:72:62:
7a:d3:7e:95:60:f9:9d:b0:5f:9b:8b:70:67:e1:ae:a3:e6:1b:
e1:47:d4:85:85:11:7f:c5:68:8e:68:2a:5f:b5:5d:8a:76:0c:
e9:65:e1:2f:36:ce:84:02:c5:38:32:68:3b:57:67:5f:80:b2:
22:70:d7:fb:2c:be:b0:02:25:c5:6b:b8:c5:30:21:a1:68:f6:
85:cc:ab:be:ab:2b:1b:ac:5b:d1:ca:da:78:1a:8b:96:83:d4:
a1:d0:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org