Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dw56rP-ZG1DuCUlWTcVE4wapclM.roa
File: dw56rP-ZG1DuCUlWTcVE4wapclM.roa (raw, json)
Hash identifier: 4PsknJfOLdmX3z1DI9Nq1Yad2V6b59bTqyKd+r+Ci5g=
Subject key identifier: 77:0E:7A:AC:FF:99:1B:50:EE:09:49:56:4D:C5:44:E3:06:A9:72:53
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A1D49A6E2373AA0F2D83916FD46724659
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dw56rP-ZG1DuCUlWTcVE4wapclM.roa
Signing time: Tue 22 Aug 2023 12:48:00 +0000
ROA not before: Tue 22 Aug 2023 12:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.20.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:49:a6:e2:37:3a:a0:f2:d8:39:16:fd:46:72:46:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 22 12:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=770e7aacff991b50ee0949564dc544e306a97253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:b4:0b:ff:e2:a6:35:5b:d7:61:5d:c9:71:
26:de:85:90:1a:46:e9:43:36:25:ec:71:98:23:75:
f0:2a:ba:1e:8c:fe:95:7e:1f:28:5b:ae:c6:de:13:
bb:86:8e:d9:ba:a2:a1:ed:3d:da:43:eb:73:91:10:
33:6a:59:c1:03:f5:df:11:14:53:fd:5c:0c:f5:50:
00:f7:07:1e:79:5c:97:d3:ac:25:37:2d:1b:c0:f9:
7c:50:b5:40:75:f1:5a:c9:3a:ae:8c:bc:42:94:bc:
40:eb:16:f2:ba:9a:b7:ce:8f:a5:de:55:be:f8:c2:
9e:48:6d:03:99:4f:f1:a0:28:ff:36:48:19:f4:3b:
5d:72:e3:e7:7b:3c:40:9c:0e:0b:62:65:27:5c:c6:
6d:34:9e:26:89:6b:48:ac:46:8f:75:e8:82:88:9b:
6e:7d:b0:05:83:46:08:97:59:a5:0d:49:80:8d:8b:
29:94:37:88:61:47:06:2c:19:1c:88:76:e0:4f:33:
89:00:88:61:51:cb:b0:ac:5a:ab:4d:e5:12:41:ad:
60:12:9c:93:3e:c7:d5:87:41:16:5c:9b:94:80:93:
5e:fd:e1:99:a4:19:69:0a:f5:30:1e:fb:42:f0:76:
4a:57:09:e8:d5:2e:b5:9e:db:7a:30:47:73:1d:f2:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0E:7A:AC:FF:99:1B:50:EE:09:49:56:4D:C5:44:E3:06:A9:72:53
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dw56rP-ZG1DuCUlWTcVE4wapclM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.14.0/24
5.105.16.0/24
5.105.18.0/24
5.105.20.0/23
5.105.23.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/24
5.105.34.0/24
5.105.40.0/24
5.105.44.0/24
5.105.57.0/24
5.105.62.0/23
5.105.75.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/24
5.105.157.0/24
5.105.162.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a4:d7:3c:23:64:8a:43:35:96:ff:6c:ef:35:47:c4:be:62:
31:db:e5:0b:2b:d9:2a:87:37:3c:e2:49:9c:93:38:b7:0f:bb:
fc:a5:f5:6f:ad:4f:0a:f3:1a:c0:e1:4d:44:b9:99:f6:c5:1d:
0f:10:5f:54:e6:2c:01:af:67:be:b6:09:ce:99:6c:73:d9:7f:
a8:1a:35:1e:cf:87:fa:e2:59:0e:4f:15:d2:09:d6:59:a2:3c:
6b:1f:61:b2:3f:9f:e0:e1:15:25:73:e5:59:4b:4b:00:c3:b1:
54:e4:c2:e5:48:04:48:da:f4:11:c5:c2:d9:e0:c6:a3:b6:39:
e3:a0:b5:1d:b2:fc:cd:c3:09:85:2a:c8:8e:2f:2f:8c:64:82:
ca:91:22:ce:fa:58:2c:d2:1f:e8:89:0a:d4:a0:29:ea:d0:47:
05:23:d8:91:16:71:ff:bf:a8:96:01:dc:19:09:f9:60:2e:ce:
62:27:30:6f:fa:08:f1:ee:79:b1:bb:fd:b1:e4:a3:aa:33:ec:
8a:54:ff:5b:f5:71:85:f5:69:0e:92:c2:36:0d:58:86:ef:0f:
08:62:06:57:43:65:eb:d0:c3:69:0e:01:52:89:7d:d7:17:8e:
1e:a2:e4:09:41:83:52:30:e6:37:96:a1:fd:40:f2:7e:d6:39:
37:e2:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 10:01:26 2023 by rpki-client on console-ams.rpki-client.org