Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bb5_MqXrP_RLZZ6MQ7DYcUGp7iE.roa
File: bb5_MqXrP_RLZZ6MQ7DYcUGp7iE.roa (raw, json)
Hash identifier: 6Uxo6FrbaTn8HhhIPJdsT5+Dm7x9oFIKN+dkgeV6QFU=
Subject key identifier: 6D:BE:7F:32:A5:EB:3F:F4:4B:65:9E:8C:43:B0:D8:71:41:A9:EE:21
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01870E716CEA1A4DDA86DFB389D093AF54CC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bb5_MqXrP_RLZZ6MQ7DYcUGp7iE.roa
Signing time: Thu 23 Mar 2023 12:28:47 +0000
ROA not before: Thu 23 Mar 2023 12:28:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:71:6c:ea:1a:4d:da:86:df:b3:89:d0:93:af:54:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 23 12:28:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dbe7f32a5eb3ff44b659e8c43b0d87141a9ee21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:88:67:91:6d:6b:4b:e8:e3:f9:75:d7:44:
32:d5:0f:85:15:50:e8:39:6e:c7:58:4e:a3:42:15:
33:08:6d:8e:59:8c:ec:f9:38:4a:3f:03:79:73:38:
b8:53:ce:62:02:7d:28:bb:7a:da:03:15:ab:0d:7e:
27:30:95:08:e0:c5:af:f1:38:00:f5:a0:67:f8:6a:
b2:a8:74:13:c0:94:b7:e5:e2:57:6e:82:44:02:05:
bc:2e:a7:1a:95:98:7d:bc:9b:2a:af:29:fb:37:88:
0b:65:36:33:09:83:cd:3b:6d:14:f5:1c:40:3a:f8:
89:ad:36:ac:09:09:34:8f:f2:0c:81:d3:52:4f:49:
b1:cb:d4:75:91:44:e0:79:8a:b0:09:12:38:6b:4f:
b3:38:05:48:89:01:39:65:43:ef:76:f7:35:16:2a:
ba:37:0a:47:28:c9:d7:5d:32:a4:a4:0b:92:7f:98:
0a:b4:43:3d:8f:11:7c:08:5f:6b:79:d5:36:bb:22:
60:5d:d4:30:ff:73:e3:e0:2a:0d:89:95:91:48:89:
77:b4:2f:c3:7a:f3:f2:92:5e:90:78:a2:af:e0:3c:
39:ee:c4:ca:df:7a:a4:c5:82:0c:06:13:c7:8c:1e:
e4:28:92:58:e5:2c:ab:99:c5:95:1e:dd:2d:e5:3e:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BE:7F:32:A5:EB:3F:F4:4B:65:9E:8C:43:B0:D8:71:41:A9:EE:21
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bb5_MqXrP_RLZZ6MQ7DYcUGp7iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.68.0/23
5.105.82.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.186.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.218.0/24
5.105.226.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3b:ad:9c:39:f7:30:f2:1f:3b:12:af:21:07:d7:46:86:fa:
ef:31:69:1b:6a:f3:11:74:86:b2:9d:f7:b8:4e:e6:5f:83:da:
9e:9c:95:91:d0:89:ff:9d:17:fb:15:1c:41:ec:f4:3e:de:88:
5c:bb:9a:e5:c1:e3:2b:e0:5b:7c:de:e7:c9:f8:b7:d2:ed:f6:
b3:bc:a2:5f:5a:cf:3e:ce:96:07:65:58:8f:ac:81:24:5b:c2:
94:c6:3c:fa:ce:10:ec:39:88:f4:67:7a:be:b9:17:7b:c5:2a:
6b:a2:86:6a:64:3f:e6:4e:07:d7:3d:bb:dc:b2:1b:38:02:3e:
87:0f:d0:cb:4c:22:67:52:90:51:b6:4b:93:a7:2a:17:68:0a:
a5:6a:76:e5:e6:3f:60:67:c1:f4:3e:21:dd:64:7c:23:c3:4d:
cc:6c:60:88:3d:50:5d:78:c8:1e:a9:7b:2e:3b:2e:76:25:3f:
7f:01:a7:38:36:92:ba:9a:81:8e:27:1c:9d:15:b0:28:f8:21:
f9:3e:b2:56:09:42:5c:21:5e:37:07:ef:34:b8:3d:45:a7:88:
5f:53:e4:a7:38:d0:a6:e6:77:ad:51:c1:e7:eb:d4:c8:96:8e:
93:2f:3f:a5:55:c9:35:11:6b:4d:11:5d:25:d4:b8:c1:74:e0:
ee:12:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org