Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dXPlxLT2O3RovyCUL-HraCaYMAM.roa
File: dXPlxLT2O3RovyCUL-HraCaYMAM.roa (raw, json)
Hash identifier: uI3amSFKOPAtLE4Ikpjh6MurVGi8O/cbnRkXG3A2vY4=
Subject key identifier: 75:73:E5:C4:B4:F6:3B:74:68:BF:20:94:2F:E1:EB:68:26:98:30:03
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188DDDE5B06BD8F2961B80DFCF65FF82742
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dXPlxLT2O3RovyCUL-HraCaYMAM.roa
Signing time: Wed 21 Jun 2023 12:11:56 +0000
ROA not before: Wed 21 Jun 2023 12:11:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.143.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:de:5b:06:bd:8f:29:61:b8:0d:fc:f6:5f:f8:27:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 21 12:11:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7573e5c4b4f63b7468bf20942fe1eb6826983003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:88:d1:43:ea:5f:a3:f7:f2:f1:5c:96:cc:
5d:33:6b:af:c9:d9:09:b4:9a:b6:4e:90:db:b7:a0:
13:f6:09:c4:e9:97:e8:c9:e0:2b:2e:2d:58:17:64:
e2:12:62:fa:a1:5b:ea:ef:ed:c7:6a:8d:d0:08:40:
d0:ca:9e:5d:81:5e:3c:43:5e:56:82:6f:19:ee:90:
98:60:68:85:37:12:d6:d2:83:75:8c:47:c6:f6:93:
10:93:2c:2d:25:22:93:b6:a4:39:ca:92:ea:7c:fc:
d8:f6:76:e2:a4:ba:d9:a1:7e:27:63:fb:03:18:56:
73:d3:5c:5a:c0:e4:72:86:93:9c:1b:27:7f:f3:74:
33:b5:1d:37:f1:7b:60:c6:c3:4d:68:62:8e:2b:72:
03:e1:c8:26:a9:80:ea:f5:f8:5e:17:4b:4a:21:14:
28:e7:50:55:41:73:4e:42:ad:d9:23:92:da:e1:44:
b0:c7:be:7f:b8:c4:0c:43:2b:a9:3f:01:db:f3:aa:
85:50:c8:f6:cc:dd:aa:8f:45:3e:55:66:21:1e:20:
36:99:5e:0a:c9:61:7c:5b:73:f7:50:88:40:48:a5:
ba:51:ec:40:7a:68:33:00:30:f3:0f:fd:15:17:c6:
f8:7b:60:e8:06:6a:a6:3e:16:91:d8:0f:c2:2f:f5:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:73:E5:C4:B4:F6:3B:74:68:BF:20:94:2F:E1:EB:68:26:98:30:03
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dXPlxLT2O3RovyCUL-HraCaYMAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/23
5.105.21.0/24
5.105.36.0/24
5.105.59.0/24
5.105.63.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.143.0/24
5.105.162.0/24
5.105.170.0/24
5.105.184.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:61:00:50:a4:f1:e1:3f:71:a1:d8:f6:6a:b6:ca:17:da:ba:
c1:01:5f:9e:c5:2d:86:a2:93:02:6b:ac:db:8a:62:a8:55:62:
74:1a:ed:cc:17:f5:ee:87:e6:55:d1:13:b6:79:4f:f8:db:db:
d1:db:ba:df:68:83:db:96:13:20:1a:e9:78:1b:cc:87:b5:cd:
72:2e:ce:00:73:cb:4e:45:8d:51:96:07:75:99:13:d4:7e:d4:
e4:43:29:88:f5:b1:cf:ab:ce:e8:bf:41:49:b3:40:fa:91:02:
8d:89:6c:a8:79:67:f3:74:06:e0:37:d2:a2:91:90:1a:74:74:
89:b3:9c:83:eb:1f:49:80:5f:af:25:f4:08:e6:f1:78:10:00:
9c:2a:8b:15:cd:71:dd:28:b2:ea:ed:e5:d4:bc:53:da:72:24:
cd:af:7e:5b:e3:9b:e8:2f:cc:42:3d:29:a1:94:3b:7f:60:02:
ea:59:54:04:97:ee:d1:86:23:f4:60:ed:7b:63:b9:f9:73:72:
b1:1a:fa:47:d8:a8:fd:1b:8b:c9:d5:a9:c5:76:08:77:47:56:
d9:55:16:bb:ce:aa:65:3b:6a:90:d8:b0:2e:0f:bb:44:f8:3b:
21:fe:21:25:b4:fb:f3:e4:1b:79:ae:b9:1b:83:50:25:83:02:
72:98:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org