Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/icRYzdOjz_Ppd6SrJT6-DxFzYVs.roa
File: icRYzdOjz_Ppd6SrJT6-DxFzYVs.roa (raw, json)
Hash identifier: yD09rSqIe/CNSFMLidkmeYZIDQEzjIgHAwIHJF3jitg=
Subject key identifier: 89:C4:58:CD:D3:A3:CF:F3:E9:77:A4:AB:25:3E:BE:0F:11:73:61:5B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189541E30563AE85E8D877DE798FB63F35B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/icRYzdOjz_Ppd6SrJT6-DxFzYVs.roa
Signing time: Fri 14 Jul 2023 11:16:51 +0000
ROA not before: Fri 14 Jul 2023 11:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:1e:30:56:3a:e8:5e:8d:87:7d:e7:98:fb:63:f3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 14 11:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89c458cdd3a3cff3e977a4ab253ebe0f1173615b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:44:78:2f:87:1f:cc:fb:15:37:22:36:dc:
41:e7:8d:80:1c:2c:a8:27:1c:ce:8e:3f:4f:3c:64:
93:78:5e:5d:da:72:da:ec:f0:ef:d8:60:b3:63:e5:
30:07:fe:bd:a3:7f:35:b4:e3:6c:93:dd:66:ba:f8:
b3:27:7f:90:4f:03:8a:c2:b8:12:e8:f9:9e:24:04:
da:d3:d2:31:7e:34:f8:17:7e:d4:20:4f:de:7e:2d:
4f:95:47:31:6f:0a:91:83:ea:8d:1d:5b:96:ef:d6:
42:29:df:52:cf:b7:a5:b4:e9:59:0a:6a:f4:93:c0:
dd:46:8b:94:c1:62:8c:98:d2:4f:9e:e1:4e:68:48:
f6:26:3c:c0:fe:5f:cb:ab:47:f2:c3:d7:06:5d:36:
2a:0d:29:8a:99:5e:c8:f9:09:3d:3e:d5:7b:02:4c:
cf:fa:ab:66:a9:57:53:41:70:bf:d7:75:d3:6c:ba:
12:0f:fd:91:14:4b:8c:1d:8a:10:2f:c7:50:df:36:
de:0f:20:52:8f:11:e7:5a:ea:78:df:d7:d6:7c:ce:
3d:d7:60:6f:05:30:fa:19:4d:dd:39:1c:6e:dd:5d:
58:5a:6b:d2:b2:63:10:61:7f:82:ce:4b:6d:10:e4:
1d:6e:f8:04:b4:e6:a1:d0:ec:cd:14:0e:ba:c7:01:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:58:CD:D3:A3:CF:F3:E9:77:A4:AB:25:3E:BE:0F:11:73:61:5B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/icRYzdOjz_Ppd6SrJT6-DxFzYVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0/24
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.157.0/24
5.105.162.0/24
5.105.166.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
60:09:1d:3c:d3:54:f0:38:93:38:9d:0c:7c:66:5d:84:ba:86:
df:5c:0e:df:21:d0:1e:00:ba:ba:ad:58:c2:14:61:31:9a:52:
86:70:63:e8:85:ae:12:ca:7c:02:09:98:5c:5f:b2:15:36:06:
6b:45:dd:f3:89:9c:32:f2:8f:b1:d2:8e:f0:95:51:d4:80:93:
71:06:2a:20:e0:52:47:90:e7:8e:40:ef:7a:07:03:82:26:f9:
a0:9b:2e:9e:1c:2e:9e:1b:50:10:f0:14:7b:b7:dc:f3:0d:27:
42:26:7d:92:28:57:79:14:22:20:f4:a3:ee:5c:81:89:d8:b2:
77:2a:e1:4b:a8:01:d5:54:8c:54:1c:47:04:32:5c:b3:ec:2b:
e4:54:59:ba:11:f4:3c:ef:8a:7f:d2:24:06:73:54:ad:95:bf:
77:2d:bb:fc:55:58:22:07:2e:7a:7e:55:d0:79:4c:0b:10:a6:
cd:25:46:6a:f1:b9:c7:8b:46:5e:2f:ac:0e:d5:43:7a:81:39:
43:44:45:4b:94:1f:96:35:06:09:d6:30:af:07:47:14:43:cc:
ca:8d:64:ce:65:f1:25:1f:8c:69:2f:32:27:0b:6a:4e:c1:22:
b8:04:8d:f0:ce:5d:be:11:12:dd:48:c8:d3:07:57:f6:45:45:
d4:6e:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org