Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eGoCCM3vQnZh-WfzCMvW7oAwh6A.roa
File: eGoCCM3vQnZh-WfzCMvW7oAwh6A.roa (raw, json)
Hash identifier: 9Fg3ysizOPYXmdW7/C5r6fDgqcRzuHhqahz4Ed97lyo=
Subject key identifier: 78:6A:02:08:CD:EF:42:76:61:F9:67:F3:08:CB:D6:EE:80:30:87:A0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186F3992F70E2C651B9A4B022CB9CEEA8AF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eGoCCM3vQnZh-WfzCMvW7oAwh6A.roa
Signing time: Sat 18 Mar 2023 07:22:27 +0000
ROA not before: Sat 18 Mar 2023 07:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:99:2f:70:e2:c6:51:b9:a4:b0:22:cb:9c:ee:a8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 18 07:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=786a0208cdef427661f967f308cbd6ee803087a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:9c:2e:87:17:c4:47:0c:77:a3:a3:90:b0:
e3:09:df:0a:7e:72:d0:f1:bf:a6:96:94:f7:76:9f:
bd:56:80:93:b4:4e:89:3b:fa:af:b9:76:43:1b:ba:
e0:1f:f2:9a:a4:19:b6:46:02:7b:f7:5d:84:c3:4c:
ff:fd:a1:59:bc:f1:94:f8:16:60:8a:01:df:65:d2:
e7:92:15:f6:10:94:1d:39:4a:33:4d:ae:aa:2b:6f:
f2:cd:3a:11:68:37:69:7e:fb:99:e5:b4:4f:6f:0b:
54:0f:a4:b8:5b:8e:25:e3:df:ac:24:56:2c:1b:ce:
43:fe:ad:8d:1d:40:43:9b:fd:cc:12:54:51:9c:e6:
2d:d7:0a:5a:7e:d3:ab:72:b7:45:67:d8:25:1f:30:
7c:b8:f6:e2:71:1c:79:78:db:77:44:ef:e2:f8:85:
b9:ca:7e:44:21:1a:5a:52:be:4d:58:a0:2f:7a:2a:
00:b4:96:7d:d5:20:a1:5b:5c:06:2b:ea:29:07:b4:
9a:f9:af:68:bb:9d:8d:f0:52:c6:33:71:4c:b5:0a:
20:d5:96:c7:a7:ce:e8:98:51:1c:82:c8:80:f1:e5:
99:ef:e1:51:b7:91:e6:db:4a:e8:98:49:9b:09:be:
2f:43:72:fc:17:de:79:69:e6:3f:d4:d6:b6:73:ad:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6A:02:08:CD:EF:42:76:61:F9:67:F3:08:CB:D6:EE:80:30:87:A0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eGoCCM3vQnZh-WfzCMvW7oAwh6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.63.0/24
5.105.68.0/23
5.105.80.0/24
5.105.82.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.186.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.218.0/24
5.105.226.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:36:84:73:9c:8b:cd:4b:01:4f:03:8b:f8:22:7f:ad:58:ca:
be:3e:4b:3b:67:36:08:b8:42:4f:30:df:93:9f:ba:5b:cd:27:
31:c2:7e:97:af:e5:6b:19:9f:14:34:6b:f6:8e:78:0e:fe:4d:
af:d8:56:08:3a:9a:8f:1b:a6:6d:67:77:8d:c1:de:14:5c:a2:
c9:a5:96:62:3d:93:7b:90:59:c4:fe:91:60:ed:58:14:2f:ef:
98:40:f7:68:52:b2:00:45:b2:d3:ba:9c:da:c7:3a:d4:dd:0d:
43:a7:ef:e2:e6:cd:d3:86:77:2e:da:fd:97:4a:61:84:4f:ea:
7d:19:b9:c2:c9:dd:fc:bb:f9:52:81:35:da:e9:bd:fa:85:d1:
c9:e3:71:66:be:ca:07:ef:09:25:20:49:5a:6d:9f:fc:af:5d:
9f:ac:e6:c2:00:a9:5a:bf:ab:61:09:1b:fb:9a:b2:41:35:f9:
01:18:2e:e3:17:21:d7:0d:3a:a7:95:ea:a3:ce:05:02:a7:bf:
80:69:a9:3a:43:8a:07:52:2e:69:da:cc:d4:9a:7d:b9:5a:fc:
4c:81:94:94:79:9e:bf:62:62:77:bc:43:63:09:29:f8:1a:5a:
9a:d6:c7:c7:07:a1:9c:2c:fa:d2:4f:fe:38:a2:d2:7b:2b:dd:
ba:d9:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org