Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fak1gjFbPU0cKJxuLtI3ZJ6TxJY.roa
File: fak1gjFbPU0cKJxuLtI3ZJ6TxJY.roa (raw, json)
Hash identifier: thQyj2U86ihORjCIIG5KTeqPB7KQAAcK3y5uwlnyLSQ=
Subject key identifier: 7D:A9:35:82:31:5B:3D:4D:1C:28:9C:6E:2E:D2:37:64:9E:93:C4:96
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188E36046B61BC3FFEC333122C20F8FB12D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fak1gjFbPU0cKJxuLtI3ZJ6TxJY.roa
Signing time: Thu 22 Jun 2023 13:51:57 +0000
ROA not before: Thu 22 Jun 2023 13:51:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.143.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:60:46:b6:1b:c3:ff:ec:33:31:22:c2:0f:8f:b1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 22 13:51:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da93582315b3d4d1c289c6e2ed237649e93c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:08:ad:59:90:43:56:7a:9b:de:09:10:14:
58:a4:d2:36:41:59:ec:6a:83:8c:8d:9d:0d:c1:a5:
1b:47:58:9f:eb:02:7a:ed:74:85:e7:0a:ad:e1:60:
47:09:28:05:7b:ee:74:9a:2e:50:e7:0b:e2:88:8c:
04:4f:5a:fb:9b:0c:85:9f:9d:28:ba:f2:40:0f:88:
1b:d5:a7:3e:18:94:47:ea:f3:c0:d8:2d:3a:0b:60:
cb:cb:2f:23:0f:4e:05:b4:a8:75:e3:dc:d7:5f:40:
ec:bf:6d:4d:8e:b8:d8:40:b4:c6:63:11:25:30:a6:
11:13:72:57:4f:9f:95:23:f0:a2:3f:ae:21:ef:18:
19:9d:f5:cb:8d:2f:68:ab:2d:36:08:04:94:85:24:
95:6f:00:6b:09:6e:2a:b9:ab:db:c1:80:94:dd:d0:
cd:a6:2f:d9:92:82:02:44:92:6b:90:ab:6a:50:c1:
cc:dd:c9:cb:15:9e:19:43:e2:60:1d:87:cb:8d:4f:
8b:2d:04:f3:7d:a2:88:5b:06:e1:f0:9d:f4:f6:60:
20:e4:c7:b4:25:ec:c6:37:db:fd:22:43:d7:62:ed:
2e:d8:31:90:e9:2f:47:79:d6:df:a5:33:37:47:1c:
8b:56:31:b9:97:71:c2:cd:7e:37:5e:66:dc:73:cb:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:35:82:31:5B:3D:4D:1C:28:9C:6E:2E:D2:37:64:9E:93:C4:96
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/fak1gjFbPU0cKJxuLtI3ZJ6TxJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/23
5.105.21.0/24
5.105.36.0/24
5.105.59.0/24
5.105.63.0/24
5.105.75.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.143.0/24
5.105.162.0/24
5.105.170.0/24
5.105.184.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:dc:59:04:10:16:60:ac:c6:bf:47:73:36:fa:8c:82:eb:73:
d8:fc:e4:99:dc:92:d4:06:66:ec:39:f1:73:62:30:85:96:cb:
08:0d:9b:7d:40:27:7b:6e:38:37:b9:b4:75:30:4d:f6:40:81:
70:ba:45:89:4f:26:86:ca:0d:67:a9:c4:26:2c:62:2e:a6:b0:
13:82:2d:7e:5a:51:5a:a9:a7:84:13:dc:2f:d2:16:2d:8b:27:
2d:3a:5d:97:25:87:bf:6b:8b:59:f6:96:9b:50:25:72:e3:2e:
b5:a8:fa:36:af:0d:29:d3:d8:ca:a9:ea:f0:a2:ac:1e:8a:7e:
7e:52:9c:36:02:0a:3d:3b:7a:b5:b4:13:c9:13:27:db:0a:d2:
1e:0a:42:9a:d2:52:ff:4b:e3:54:cf:f2:97:b8:21:ca:ad:ef:
78:dc:61:93:7c:1c:56:59:9f:24:e4:67:4b:76:89:fd:a7:de:
57:07:b8:a0:61:d8:30:ec:9f:e7:a9:c6:94:be:09:5a:45:5f:
4f:08:fc:31:70:a1:9c:10:5d:8c:08:0b:81:89:7a:5e:f5:1b:
18:41:6e:94:d5:5f:3e:f5:15:d8:a1:f9:44:b6:70:79:93:71:
c9:cc:54:79:5a:c6:19:0b:43:08:76:19:a3:b5:9d:d3:4f:2b:
af:bd:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org