Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lbZVFgXIvJiYkrFDvqmbhc1Tluc.roa
File: lbZVFgXIvJiYkrFDvqmbhc1Tluc.roa (raw, json)
Hash identifier: T7zlced/I5bk/Xlc6PM+B9CpLLRVqb+RZUOdBqLVD00=
Subject key identifier: 95:B6:55:16:05:C8:BC:98:98:92:B1:43:BE:A9:9B:85:CD:53:96:E7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187B400C2ECBD5C8F8166FC4802E0DE4F46
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lbZVFgXIvJiYkrFDvqmbhc1Tluc.roa
Signing time: Mon 24 Apr 2023 16:02:41 +0000
ROA not before: Mon 24 Apr 2023 16:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.35.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:00:c2:ec:bd:5c:8f:81:66:fc:48:02:e0:de:4f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 24 16:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95b6551605c8bc989892b143bea99b85cd5396e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:12:92:0a:d2:13:f4:32:14:c8:24:c2:3e:
1e:96:e1:e8:8a:86:d8:60:19:77:dd:74:9b:8c:53:
65:38:ce:f9:ad:8a:96:70:42:24:fd:30:e8:ea:60:
15:94:ee:a2:68:cf:be:a6:7d:1d:07:db:9b:af:d7:
0e:89:6e:e7:51:a5:21:2c:3b:a6:ee:56:0f:8c:97:
bd:eb:92:49:a0:2d:67:9c:3e:0e:87:dd:94:5f:a6:
91:37:1c:4b:98:51:61:56:05:c0:67:73:8f:7d:fd:
7b:04:74:64:01:23:40:80:22:6a:61:cc:2b:04:02:
4f:89:b8:d5:33:1e:3f:5f:a5:9c:d9:0b:7d:3c:c6:
b3:57:73:3e:2a:95:3b:5d:2f:2c:71:7c:53:0b:2f:
cb:7a:4f:96:7a:51:96:0c:02:05:d5:a7:36:b1:0a:
ef:f9:f2:87:83:3c:52:b8:c7:4e:93:ac:2a:80:6a:
da:14:30:62:a1:17:4b:fd:1a:59:7a:fe:e5:93:a7:
c7:ff:df:66:bf:ef:96:0a:1c:54:dc:28:c2:4e:8a:
1b:77:2b:85:3b:dc:9b:07:e7:b0:4a:85:f0:38:b2:
2a:3e:c1:18:75:a2:68:d7:ac:c7:87:be:10:36:66:
46:83:ab:b3:29:13:b9:9e:84:9e:ec:8e:d2:ac:7a:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:55:16:05:C8:BC:98:98:92:B1:43:BE:A9:9B:85:CD:53:96:E7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lbZVFgXIvJiYkrFDvqmbhc1Tluc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0-5.105.32.255
5.105.34.0-5.105.37.255
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:06:a3:01:6c:de:d2:8b:9b:7d:05:f2:28:87:3a:38:c2:92:
86:07:c5:2f:43:ff:48:c2:05:f9:db:7b:90:73:b4:54:46:8b:
60:f0:0a:84:4f:41:a3:7e:fd:aa:b5:c4:c6:f9:2e:00:ee:a8:
49:fd:f5:6d:16:f4:05:f4:7f:e3:c3:c5:e4:91:87:ed:67:f0:
c7:91:0f:b2:7e:e7:83:b9:f3:0d:17:ea:3c:81:50:f3:4b:01:
3a:40:66:9e:19:e2:30:3c:aa:33:8e:f6:6b:92:43:83:08:f4:
84:91:d1:2b:70:4d:69:4b:36:e5:f5:54:64:89:74:da:6f:90:
6f:2d:e9:89:ba:48:86:77:b6:67:35:f0:59:e4:39:6c:05:33:
c3:2c:f2:7d:07:2d:51:32:5e:e0:84:6f:20:4d:41:92:41:cf:
ee:b7:d9:02:66:26:25:ae:ae:5f:de:90:0e:9f:88:e5:aa:a2:
c6:27:ff:11:6b:49:92:b0:9f:d9:76:b3:c2:6d:a2:5a:c3:2a:
dc:5d:ce:bf:94:b4:e8:fb:03:75:1f:3d:c5:9d:73:9c:8d:98:
f2:54:7b:d4:14:2b:b9:18:46:60:d8:cc:5a:ba:6d:7a:ed:a0:
a7:c3:93:32:c8:ce:c1:a3:d5:16:54:76:fe:d6:22:94:ac:8b:
33:ec:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org