Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eAHLsSzfPheiAWMH9eKNwt8dKUg.roa
File: eAHLsSzfPheiAWMH9eKNwt8dKUg.roa (raw, json)
Hash identifier: oletILD8bjWs8kJr9fdRs6dDvIbuO2BbPEZlD5hFKfA=
Subject key identifier: 78:01:CB:B1:2C:DF:3E:17:A2:01:63:07:F5:E2:8D:C2:DF:1D:29:48
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B57D59F5809336D71D3D11BC115D8F99
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eAHLsSzfPheiAWMH9eKNwt8dKUg.roa
Signing time: Wed 02 Aug 2023 09:03:58 +0000
ROA not before: Wed 02 Aug 2023 09:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:7d:59:f5:80:93:36:d7:1d:3d:11:bc:11:5d:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 2 09:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7801cbb12cdf3e17a2016307f5e28dc2df1d2948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:c0:40:32:57:37:eb:3b:8f:e0:aa:85:40:
18:0c:77:d7:85:47:ce:60:84:d1:91:84:f7:09:6d:
27:65:c4:fe:58:cf:8f:87:ef:5b:4f:d6:ea:c6:9a:
f6:71:d0:5e:d4:d5:9e:7c:ba:6f:28:0a:66:e9:13:
50:69:39:a9:87:57:cf:e8:0a:20:f2:bd:ad:0d:1c:
fa:aa:10:30:93:7b:d9:e6:32:c1:ac:dc:f7:92:67:
09:4f:18:2a:22:a1:e8:4d:a5:a0:d1:fb:21:7a:d7:
96:20:dc:18:5e:db:c1:dc:79:92:8f:01:66:a6:7e:
74:25:6e:d2:f9:15:21:db:45:79:46:ca:2f:ce:4b:
9f:29:f1:cc:2f:90:c1:66:94:43:d5:35:f1:6e:1d:
9e:f8:13:be:3d:ad:77:a4:57:20:8e:77:01:9e:be:
8f:b0:fd:ec:97:44:aa:7e:0e:b9:81:0e:41:0a:37:
20:ef:30:e4:f1:cb:70:fc:e1:75:10:cb:d5:57:ec:
77:93:35:e0:f6:5f:cb:fc:6a:a1:58:e8:b5:bf:79:
c3:2f:12:36:2b:80:ea:68:4a:cd:da:00:46:44:6e:
03:c9:cc:3e:3a:86:6b:dc:3a:b8:f9:8e:f2:78:bc:
58:ad:f8:4d:d5:d5:c5:89:68:ec:e5:61:bb:37:1c:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:CB:B1:2C:DF:3E:17:A2:01:63:07:F5:E2:8D:C2:DF:1D:29:48
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eAHLsSzfPheiAWMH9eKNwt8dKUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.13.0-5.105.15.255
5.105.18.0/24
5.105.21.0/24
5.105.23.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.40.0/24
5.105.44.0/24
5.105.57.0/24
5.105.63.0/24
5.105.101.0/24
5.105.111.0/24
5.105.117.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/23
5.105.169.0/24
5.105.209.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.105.249.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
08:33:ee:c0:cf:e9:c0:8b:10:e6:1f:3a:b2:f8:a7:aa:fd:35:
6f:d3:46:62:b8:e7:7d:53:e9:09:90:6a:86:c0:e3:9b:b0:ed:
49:8f:ce:98:a1:a6:0c:9e:55:e7:22:6c:e9:a0:c7:fe:4f:26:
15:fb:55:b7:83:c0:89:70:bc:04:19:1a:69:9d:3c:c6:34:1d:
d7:6d:e9:c1:61:e1:1a:b6:ae:ed:98:42:a2:27:3e:82:0c:c9:
85:01:f7:b7:8e:07:9b:59:92:66:a7:48:35:a8:71:3c:40:79:
35:1a:4b:21:b2:d3:80:a2:50:d1:0b:f5:8d:6c:b4:d0:8e:ac:
6e:d7:2d:f4:13:a1:10:a0:1b:4f:47:c6:e4:10:2c:b7:0b:23:
01:41:e2:0e:20:18:ef:f9:6c:e9:48:e2:1f:32:47:55:85:39:
fb:1b:5a:f5:d7:9f:73:95:0c:57:a2:1b:de:f5:29:d0:3d:de:
48:42:60:37:8f:0d:58:29:85:df:6c:93:81:3f:95:a1:7c:e2:
e8:8d:0a:cf:32:d0:cf:f8:e6:0f:fc:47:d0:41:99:e7:03:57:
97:81:d2:2e:ed:8f:f3:e0:a6:05:6e:95:ca:fe:b1:b9:31:49:
73:5c:28:42:11:b4:7a:c7:c1:a0:a8:c9:4d:a7:18:bc:27:79:
f4:fe:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 11:34:03 2023 by rpki-client on console-fra.rpki-client.org