Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kuwETQ4ZZtTkpLLEN4OoZGZifpo.roa
File: kuwETQ4ZZtTkpLLEN4OoZGZifpo.roa (raw, json)
Hash identifier: hkA25UZDxj6IOtKR1+Jhv1WZ5Qw3gGBJ7O1Ppm59704=
Subject key identifier: 92:EC:04:4D:0E:19:66:D4:E4:A4:B2:C4:37:83:A8:64:66:62:7E:9A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187EA9DA4341EC20DF7BF3BECE70CF39B5A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kuwETQ4ZZtTkpLLEN4OoZGZifpo.roa
Signing time: Fri 05 May 2023 06:33:32 +0000
ROA not before: Fri 05 May 2023 06:33:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:9d:a4:34:1e:c2:0d:f7:bf:3b:ec:e7:0c:f3:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 5 06:33:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92ec044d0e1966d4e4a4b2c43783a86466627e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:8e:24:8e:dd:0b:52:25:2b:e2:81:b5:40:
b0:57:3b:9c:47:f0:90:74:45:ac:50:86:76:38:de:
a8:00:a7:54:2f:a9:f2:2b:9e:e6:fd:d2:83:25:33:
17:68:b4:f6:76:99:84:6d:35:60:a1:8e:0a:93:43:
3f:73:1e:cd:44:7c:d4:6b:b2:15:70:cc:4e:f8:8a:
8f:61:e0:52:f1:73:8e:40:cc:cb:aa:14:d4:ca:ce:
bf:0d:a2:3d:69:0a:a4:69:1a:4f:5b:1b:45:95:d4:
24:82:81:6c:a1:2e:de:22:3f:15:e5:9f:95:9b:a8:
94:41:1f:2a:9f:2e:5e:d0:f0:69:8a:44:a1:ae:af:
92:8b:12:34:60:3e:97:17:07:bf:4d:2d:a5:8f:dd:
e5:60:b5:92:ae:24:69:f8:1b:46:79:89:68:ef:af:
b1:38:a3:86:43:a3:ed:b9:39:88:38:69:2b:ed:57:
c6:b7:d5:7b:78:e1:25:a9:6d:ea:59:59:ac:4c:36:
f8:b2:4f:81:43:65:71:61:eb:81:d9:2d:b4:53:9e:
10:f0:df:6b:22:e1:60:f9:32:22:38:63:2f:3b:ca:
c7:87:0d:91:0c:6b:d9:da:d2:bd:cd:71:60:0c:37:
e8:76:fd:9c:dc:88:b5:c6:28:6b:64:d8:7b:42:10:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EC:04:4D:0E:19:66:D4:E4:A4:B2:C4:37:83:A8:64:66:62:7E:9A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kuwETQ4ZZtTkpLLEN4OoZGZifpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.49.0/24
5.105.51.0/24
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.142.0/23
5.105.158.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.248.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ff:8e:ea:22:65:0e:ff:e8:34:c5:20:c4:a4:e3:ed:e5:e8:
11:30:ee:e4:5c:e6:71:ea:ce:96:ae:1b:24:c5:73:0a:9b:f2:
0b:4d:62:c4:66:97:a3:b8:96:a8:87:be:e8:6a:c0:57:93:64:
32:5d:6c:88:69:c8:90:64:7f:05:37:9e:2b:8e:ef:54:e3:18:
c8:2f:6e:22:59:fd:d0:ca:5a:6e:f9:1b:34:ac:da:53:cd:ec:
40:12:bc:7e:6c:bb:e2:49:5c:43:fc:2b:de:52:2c:b6:86:74:
54:a3:6f:35:cc:ec:9c:96:cd:b2:0b:3c:e9:e2:3f:71:89:b9:
fd:2d:e4:fa:f4:ed:da:94:fc:df:aa:90:b1:ad:bb:44:70:b7:
86:78:40:36:d5:62:04:b8:56:1b:36:75:46:a5:90:19:a0:1e:
53:b8:b7:55:70:47:8b:f3:e0:5f:5f:9c:a4:22:67:ee:6a:a4:
8a:57:da:46:92:54:ad:80:c1:d2:a8:ff:c8:fd:d5:17:91:3d:
06:62:e2:30:05:d7:fc:72:d5:f3:ac:95:18:7b:25:44:45:47:
67:c4:9a:1b:49:46:47:81:4b:5c:9a:b5:09:fa:c7:7d:cc:f4:
7c:95:f1:78:0e:e0:6b:55:a4:07:19:13:60:0d:c6:d0:ea:c9:
70:bb:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org