Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f1dXH7zCTE8-yPffeJ-dF84vZP4.roa
File: f1dXH7zCTE8-yPffeJ-dF84vZP4.roa (raw, json)
Hash identifier: y0RXHa3eFITn/XBUrV4t1dEqSt9rBeev7zPyNl8lUCY=
Subject key identifier: 7F:57:57:1F:BC:C2:4C:4F:3E:C8:F7:DF:78:9F:9D:17:CE:2F:64:FE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187A59ADA6E71FE14B18A88D1F7D75776E9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f1dXH7zCTE8-yPffeJ-dF84vZP4.roa
Signing time: Fri 21 Apr 2023 20:56:41 +0000
ROA not before: Fri 21 Apr 2023 20:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.35.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a5:9a:da:6e:71:fe:14:b1:8a:88:d1:f7:d7:57:76:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 21 20:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f57571fbcc24c4f3ec8f7df789f9d17ce2f64fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:0d:9b:fb:8c:de:5a:25:92:cd:1d:73:97:
82:bb:c8:f7:0d:84:38:57:e6:dd:12:dd:7a:1d:ce:
d7:f8:15:fd:09:c2:91:90:e8:3c:cf:0a:dd:9a:4b:
2d:cd:be:01:b9:11:1a:2f:d2:a3:57:e3:7b:7b:73:
39:50:a3:e3:c7:fd:63:4c:b1:17:dd:08:23:79:67:
52:4f:bd:d8:6c:7c:9e:d9:8e:30:a6:62:40:7f:a3:
e4:75:d5:a1:7e:50:d1:9b:3c:a4:d1:54:05:71:50:
a4:df:05:b9:4a:c4:18:d6:94:b2:73:33:e7:51:4a:
3a:3d:a0:c4:c2:19:8a:ef:81:88:41:2a:74:1b:9a:
68:bb:9b:32:85:d8:e6:9a:bb:0c:6d:04:38:87:a3:
f0:dd:1e:1c:fb:f9:1c:1b:4e:15:c3:64:91:30:63:
59:f2:97:8e:22:22:61:88:7b:c6:2e:e4:5d:fe:aa:
56:03:cc:2a:fe:2d:14:f7:09:6f:0e:29:49:3d:65:
99:be:40:60:87:1e:61:e5:65:ee:27:78:98:47:0e:
73:3e:0d:e8:17:59:cc:a6:57:eb:a5:ce:6f:c6:39:
0f:ba:d1:9e:bc:7a:3a:2a:9f:71:30:71:eb:d6:98:
ad:8a:50:e9:71:86:d7:fd:8a:49:a6:7d:30:cc:1f:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:57:57:1F:BC:C2:4C:4F:3E:C8:F7:DF:78:9F:9D:17:CE:2F:64:FE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f1dXH7zCTE8-yPffeJ-dF84vZP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.34.0-5.105.37.255
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:97:94:74:4c:4b:68:26:0a:3d:08:68:2f:6f:ef:00:ae:f9:
33:f8:12:41:f4:f8:94:e8:3b:51:52:a5:b5:ab:92:ee:49:d9:
ae:43:a6:2c:42:2f:22:5e:b8:d6:0d:4a:7b:75:81:13:10:7a:
a7:cf:ec:26:79:84:bb:50:93:ee:01:b9:fc:ee:e0:9b:7b:d5:
4e:ec:ec:a5:6c:64:fb:58:23:8f:21:56:eb:48:00:81:55:8b:
b7:cd:0c:39:67:5c:09:af:b2:ea:20:38:73:97:b7:65:76:d0:
3a:f2:be:54:4b:8a:25:14:d9:c8:9f:ff:53:33:08:ea:1e:ef:
89:a8:47:c3:b7:95:ac:d1:2d:82:9c:12:f9:f6:ea:b3:95:6d:
6f:77:36:d6:93:a0:42:ca:ae:0d:d0:93:71:7b:b3:c3:26:d2:
e3:42:53:55:1c:64:10:0d:38:ea:08:b1:20:6c:15:8b:ac:2a:
df:47:b9:32:55:ab:35:d1:c5:d3:4f:ff:dd:53:34:08:6a:f4:
f8:ba:30:28:48:20:9b:fb:95:f9:8d:9e:1c:ed:5b:d6:83:45:
62:b0:7c:cd:37:d4:2b:ae:fc:e1:4d:7e:75:f7:b6:aa:56:fb:
52:d9:c4:04:0f:08:fd:56:0b:2c:81:11:a3:fc:a5:e6:1d:21:
f1:65:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org