Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/letFRTVWPhyH-Ega8waFQb9JLBg.roa
File: letFRTVWPhyH-Ega8waFQb9JLBg.roa (raw, json)
Hash identifier: h8Wh6/cm1ZkzEeSNTs306hwK66Dq8/sVT8DaWyiHTKY=
Subject key identifier: 95:EB:45:45:35:56:3E:1C:87:F8:48:1A:F3:06:85:41:BF:49:2C:18
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A65CF6F95BBFFB50E8434CCFA96CA280E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/letFRTVWPhyH-Ega8waFQb9JLBg.roa
Signing time: Tue 05 Sep 2023 14:46:47 +0000
ROA not before: Tue 05 Sep 2023 14:46:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.227.0/24 maxlen: 24
217.67.76.0/23 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:cf:6f:95:bb:ff:b5:0e:84:34:cc:fa:96:ca:28:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 5 14:46:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95eb454535563e1c87f8481af3068541bf492c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:38:f9:42:3e:72:22:f5:5a:9e:f9:48:f0:
d1:b8:95:e3:58:a6:3a:c5:6d:8c:ff:86:35:1d:c9:
88:f6:2e:cd:49:00:b5:30:10:7d:d7:4c:61:94:96:
c5:cf:24:24:a6:0e:89:17:54:00:30:d3:a4:cd:fc:
d8:32:0f:7a:af:18:a2:df:1a:99:b9:d7:c7:5d:ae:
07:95:cf:c8:de:55:80:34:f3:3d:ce:59:49:9e:ea:
c6:61:7f:8f:79:07:65:ea:dd:2d:0e:5a:a6:8d:0a:
90:06:b1:df:37:43:83:42:97:3a:74:9d:a0:91:5a:
45:03:ec:ec:d7:63:26:e3:22:14:3a:6f:e3:c4:32:
e9:eb:33:35:79:97:37:d5:7f:08:80:bf:c7:8d:0e:
42:1c:96:22:ce:18:fe:aa:8c:4f:13:e7:91:f6:0c:
d3:a2:7e:77:28:70:0e:33:94:2f:76:92:ed:d4:b8:
56:8f:ba:93:ff:b2:50:46:11:c3:0a:ef:49:dd:8f:
0d:22:52:fe:d5:79:a3:38:08:1d:e3:49:78:56:1a:
1e:37:36:b7:a4:b9:aa:a9:01:a4:4d:8a:20:78:e6:
89:19:d9:fc:6d:d8:9a:b6:5a:93:fd:a6:67:b1:b7:
34:39:6e:82:27:09:7c:6d:93:30:e3:ca:60:0c:3e:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EB:45:45:35:56:3E:1C:87:F8:48:1A:F3:06:85:41:BF:49:2C:18
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/letFRTVWPhyH-Ega8waFQb9JLBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.13.0/24
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0/24
5.105.51.0-5.105.55.255
5.105.66.0/24
5.105.69.0/24
5.105.72.0/24
5.105.94.0/24
5.105.100.0/24
5.105.102.0/23
5.105.106.0/24
5.105.113.0/24
5.105.118.0/24
5.105.124.0/24
5.105.126.0/24
5.105.137.0/24
5.105.143.0/24
5.105.166.0/24
5.105.168.0/24
5.105.174.0/23
5.105.177.0/24
5.105.183.0/24
5.105.198.0-5.105.200.255
5.105.216.0/24
5.105.218.0/23
5.105.221.0/24
5.105.226.0/23
5.105.229.0/24
217.67.76.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:16:0d:36:40:c6:7d:8c:3e:b8:a3:da:38:2d:37:16:f1:49:
51:03:43:8a:d7:fe:01:3d:a5:b3:ed:98:f4:2e:d1:f2:28:be:
00:9e:90:91:b1:af:b3:1b:40:cd:ce:f7:ea:56:f7:28:dd:13:
49:7e:ec:c9:dd:4f:bf:a0:71:6d:c5:2e:5a:c1:ee:67:96:61:
8f:fe:ed:e5:93:9d:de:49:22:82:2b:ad:10:91:21:72:81:db:
d9:4e:cf:d5:da:2b:d1:b6:37:ef:81:3f:9e:c1:23:0c:38:f0:
14:d9:4d:86:e4:26:e1:e8:60:7d:6f:cb:4b:43:03:f9:9d:3a:
e2:c9:66:5f:72:4c:36:d1:6a:f0:2c:6b:68:69:85:ce:26:74:
66:30:bd:ac:05:8e:82:24:23:ba:ed:e6:db:85:e0:53:e7:7f:
6c:5f:6e:4d:1b:e5:8d:59:e0:ab:ef:62:a6:33:b3:71:8d:1c:
7c:09:38:7b:c1:4a:46:de:8d:b2:d8:09:eb:9b:e9:f7:eb:4f:
c6:88:9e:e8:5c:2f:28:f1:89:90:da:03:13:85:f9:ae:65:49:
21:40:c3:12:92:6f:17:84:f4:d5:39:48:22:e1:f5:3a:fe:24:
7a:9e:ba:3c:b7:5d:ec:5a:c0:14:7e:60:0b:67:93:6d:3a:32:
e2:0c:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 20:10:06 2023 by rpki-client on console-ams.rpki-client.org