Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mYiqWASCCPVhEVCuEKD9_RwVaqU.roa
File: mYiqWASCCPVhEVCuEKD9_RwVaqU.roa (raw, json)
Hash identifier: I7JfIdqKHQUZzbFEKnEsoblQwZWnNP/bLWExHmSlncw=
Subject key identifier: 99:88:AA:58:04:82:08:F5:61:11:50:AE:10:A0:FD:FD:1C:15:6A:A5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018794018B3EDA4DAE3C33DDF6F91E76E073
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mYiqWASCCPVhEVCuEKD9_RwVaqU.roa
Signing time: Tue 18 Apr 2023 10:55:41 +0000
ROA not before: Tue 18 Apr 2023 10:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:01:8b:3e:da:4d:ae:3c:33:dd:f6:f9:1e:76:e0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 18 10:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9988aa58048208f5611150ae10a0fdfd1c156aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:8c:35:d2:fa:0f:ce:a8:39:7d:b0:59:dd:
dc:37:67:06:d5:95:dd:45:44:d0:5e:2b:0d:b4:21:
5d:5d:79:4d:81:78:31:ba:6e:fb:71:23:10:3e:01:
c3:20:f8:b9:70:e6:a5:24:c8:d7:44:0a:db:31:f6:
da:b3:10:a6:7b:6e:89:b2:bc:c0:67:e5:b8:05:85:
3d:c4:e1:4e:95:3d:91:08:61:bc:6b:58:71:b3:50:
15:b0:92:f8:89:31:83:fa:83:92:ad:30:dd:65:ad:
73:79:a1:9c:1b:38:87:32:1d:40:e9:ea:a5:cc:44:
5f:ab:97:09:8e:ab:24:d8:d5:69:ab:81:79:f4:91:
ca:33:08:28:8c:e7:b8:d6:24:fc:fd:6d:b9:c8:41:
98:6e:5b:5e:94:b7:bb:24:7a:bb:a4:05:b8:84:4b:
7d:86:74:0a:8e:a9:09:69:f0:c0:f5:cd:f6:c5:e9:
c4:9d:4c:3a:4a:e3:76:25:c6:a0:d3:73:7b:42:f0:
ff:75:3d:03:1c:27:c8:48:e6:bf:24:37:18:5b:06:
6c:03:c0:2f:21:3b:04:29:72:7b:98:27:73:72:65:
3f:5a:87:d1:d7:bf:fb:3f:e4:08:c4:2f:c4:0e:29:
5a:c3:00:7d:1e:18:ba:e0:55:7b:bb:54:b0:a8:9f:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:AA:58:04:82:08:F5:61:11:50:AE:10:A0:FD:FD:1C:15:6A:A5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mYiqWASCCPVhEVCuEKD9_RwVaqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.82.0/24
5.105.94.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.218.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b1:ff:0d:fa:f9:7c:d1:1c:73:02:e1:2d:55:e7:9e:5e:5b:
ca:07:2c:cb:51:33:50:bf:b4:8b:d6:dc:93:0a:6a:ea:e3:9b:
eb:e4:89:ad:b2:a8:83:f2:6e:8c:6b:a2:a0:ac:5c:14:06:56:
75:fa:c4:7b:e5:2e:b6:db:e8:c9:6e:79:f0:52:e5:b4:c3:1a:
f4:7b:28:0e:51:3e:51:4d:22:12:41:fb:2a:29:6d:ba:e3:31:
85:22:b2:68:3f:9d:c1:3a:f3:f1:25:98:47:42:14:0e:fd:9c:
3d:ee:5a:94:02:41:21:43:b8:b0:b5:07:3e:0b:34:3e:8e:18:
6c:96:46:90:4e:7a:25:34:b8:26:07:72:50:92:0b:51:96:4a:
56:47:a6:de:13:b6:2b:27:62:e4:db:df:8f:83:bf:b3:f2:ce:
cb:da:74:dc:0b:98:c0:55:4c:c3:e1:91:3a:03:62:fd:61:2a:
0d:a2:fa:e7:e8:0a:02:90:e6:cc:75:cd:41:2e:e8:11:9d:5d:
7d:0d:27:42:69:4a:77:93:6b:a1:a8:50:7e:5c:9c:8d:70:28:
70:09:74:98:f1:c5:76:96:09:d2:b2:30:c3:2f:eb:4e:66:af:
d3:94:a8:47:25:14:3d:d5:f4:eb:79:65:59:5f:e0:0b:be:03:
30:d5:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org