Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dnU2WUgsGRxgpuoliPOLNLwxtRQ.roa
File: dnU2WUgsGRxgpuoliPOLNLwxtRQ.roa (raw, json)
Hash identifier: LxoaGAi0YM4MDEJ8ubBg4RbFpyXjq7gF0gPOYu8PtMI=
Subject key identifier: 76:75:36:59:48:2C:19:1C:60:A6:EA:25:88:F3:8B:34:BC:31:B5:14
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186E51B74F4763583B58ED6D787EED289AF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dnU2WUgsGRxgpuoliPOLNLwxtRQ.roa
Signing time: Wed 15 Mar 2023 11:50:27 +0000
ROA not before: Wed 15 Mar 2023 11:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:1b:74:f4:76:35:83:b5:8e:d6:d7:87:ee:d2:89:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 15 11:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76753659482c191c60a6ea2588f38b34bc31b514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:e8:d9:a0:71:1a:9f:ad:fd:bb:7c:1f:38:
7a:05:bd:36:84:82:91:40:48:82:d3:1b:a5:c3:5f:
7d:f6:e8:13:87:eb:43:3a:3c:ca:58:f9:bd:48:8c:
50:b5:b0:38:01:c2:1a:c3:dc:a1:e1:58:c0:69:f1:
4d:64:5c:02:9d:9c:65:42:2f:e4:4b:f5:c1:e4:f7:
b6:a5:0a:61:0e:ee:61:06:e2:44:84:4e:8e:9e:41:
0f:11:7a:3c:dd:36:19:06:2e:ef:81:7b:3b:0f:8f:
32:e3:9d:d9:9f:5c:b2:21:ba:9a:93:29:24:d4:1b:
64:d1:49:4a:eb:9d:ff:bc:e3:08:79:c0:8d:57:88:
2f:6e:1b:77:ed:09:ba:f1:3e:5e:2b:2a:97:aa:b8:
a3:04:a0:16:07:7e:0e:75:9c:ed:19:5d:a4:59:71:
1f:ff:07:b5:97:01:34:57:44:26:f7:67:a7:13:45:
3f:61:05:2a:f1:e3:f0:76:fe:57:1b:2e:e2:dd:f8:
ae:71:b5:15:aa:9a:ea:b9:8f:65:6d:22:19:3b:fd:
c1:b4:1e:42:ed:85:87:c3:ba:7d:af:78:f7:2f:43:
69:57:54:7a:91:a7:86:4b:ef:eb:18:c0:fa:79:b5:
dd:5f:e4:d9:93:37:6b:75:46:c0:4e:8e:70:6e:73:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:36:59:48:2C:19:1C:60:A6:EA:25:88:F3:8B:34:BC:31:B5:14
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dnU2WUgsGRxgpuoliPOLNLwxtRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.59.0/24
5.105.63.0/24
5.105.68.0/23
5.105.80.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.186.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.226.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ae:39:51:b4:53:2b:c6:02:d9:d9:d5:1f:0b:41:57:93:2e:
79:1d:fa:35:31:47:c5:44:81:69:2b:82:a0:4e:37:22:9e:37:
54:39:00:b2:64:bf:31:a5:84:85:8d:0b:54:5c:ba:d5:56:f0:
2d:15:21:3a:96:7a:4e:87:a7:76:f2:e2:44:01:b6:54:45:ef:
66:30:a9:be:e7:fd:ff:bb:c1:a9:06:1d:07:28:9a:9e:d1:92:
b0:3f:61:09:bc:0d:8f:48:5e:32:9f:d6:69:14:aa:ff:57:76:
24:e2:ab:c4:1d:55:a7:28:47:ce:be:fa:dd:76:77:06:9d:36:
7f:d9:4b:94:69:a8:55:0d:f7:15:e3:e8:1c:b9:1e:11:2f:c8:
4d:2c:aa:49:a9:25:a1:ca:82:b6:29:56:6d:53:4d:6e:5a:20:
2d:c7:63:1b:55:db:3c:1a:06:f1:fa:d9:17:71:6a:03:9a:f3:
8e:e9:ee:76:8e:29:2c:f4:77:21:10:09:b2:d4:36:e7:23:3b:
75:07:30:72:22:78:b4:e6:b1:06:f2:19:9f:2d:79:a3:8a:29:
90:30:53:f5:e0:03:bd:df:79:d4:f7:d0:e2:09:a1:36:c2:82:
09:77:37:c9:8b:be:e3:7b:33:9b:5d:4a:e3:f8:ee:ac:00:5f:
35:0b:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org