Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mffvoXfxPrSRQeXmdUCc2UxSdKk.roa
File: mffvoXfxPrSRQeXmdUCc2UxSdKk.roa (raw, json)
Hash identifier: MzC/y30ISjW/Pq/XbAbJ46s9ARHXJZNAKTgXjKnAzzQ=
Subject key identifier: 99:F7:EF:A1:77:F1:3E:B4:91:41:E5:E6:75:40:9C:D9:4C:52:74:A9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863BA6BBC75E64B3BD1538B1B7CFA4447F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mffvoXfxPrSRQeXmdUCc2UxSdKk.roa
Signing time: Fri 10 Feb 2023 14:07:08 +0000
ROA not before: Fri 10 Feb 2023 14:07:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:a6:bb:c7:5e:64:b3:bd:15:38:b1:b7:cf:a4:44:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 10 14:07:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f7efa177f13eb49141e5e675409cd94c5274a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:4c:3f:ad:59:79:a1:4d:a6:74:f7:a3:99:
d4:a6:49:15:e4:ba:4d:16:84:89:52:f8:78:4a:98:
ce:d3:63:8f:9b:30:ec:44:33:b2:52:1b:1d:50:0d:
9a:0d:47:c7:25:16:6f:c3:d7:28:53:67:19:d1:ed:
a5:91:29:af:9b:65:f3:8e:e1:ba:a0:e7:ab:13:2a:
31:94:67:9e:06:00:0c:e6:5e:0f:fc:06:ff:eb:b2:
a0:4a:53:71:db:7b:83:a9:12:a5:53:57:a9:85:37:
92:d0:0a:4b:98:29:26:d7:d2:a0:87:34:1b:7c:2e:
0a:2e:dd:30:bf:99:50:b3:b5:b4:cd:1e:0f:19:d0:
0a:53:19:6f:62:8b:1d:da:e0:b8:2c:bd:d4:55:b3:
a4:7b:46:8f:0a:a6:0e:19:dc:b1:55:ed:ed:7c:e4:
fd:a0:0b:16:ab:e3:83:55:87:a3:44:f1:64:60:4f:
24:94:1f:81:00:11:8f:22:71:73:72:dc:e5:7b:8a:
04:5f:e9:69:fc:ea:dc:4e:5d:17:4b:f8:50:d5:f8:
e6:19:b6:fe:58:34:49:60:03:e6:6b:dd:8b:88:41:
e1:eb:12:62:fc:57:b7:f8:50:9a:58:63:1f:a4:4c:
6d:d7:2e:3e:a2:1e:4d:36:98:38:54:91:3d:19:57:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:EF:A1:77:F1:3E:B4:91:41:E5:E6:75:40:9C:D9:4C:52:74:A9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mffvoXfxPrSRQeXmdUCc2UxSdKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.38.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0/24
5.105.82.0/24
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.130.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.198.0/23
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.105.252.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:2c:45:e6:b0:44:c8:c6:b6:35:d9:d6:32:83:65:9b:6a:1a:
a4:a8:c9:9f:46:fa:bf:c7:54:dd:1d:55:98:9e:43:65:0a:ae:
29:e0:7a:04:ba:96:54:ab:5c:bd:13:5e:0a:87:61:1c:f9:c7:
a8:4d:ea:a2:7a:33:de:3a:31:93:b3:2a:60:b5:4e:49:ad:94:
8b:2b:3e:3a:06:f1:ce:9f:e8:d5:29:00:b6:47:2e:46:6b:aa:
db:e3:f3:d6:f7:d7:4a:7c:a9:4b:23:0e:66:14:cd:4b:47:d6:
d4:4b:64:7e:5b:03:1c:0f:99:3c:70:94:59:97:31:48:7d:6f:
94:ad:05:36:e1:ee:f4:da:64:e8:2f:8f:9e:73:50:3d:e3:67:
0a:f5:01:e2:23:83:4a:aa:08:48:4d:84:2c:55:78:38:c1:ee:
c6:d4:4b:cd:a5:30:c0:97:45:61:fd:a7:13:b0:e6:5f:4b:46:
e1:2e:d1:8a:83:14:36:08:52:3f:26:da:26:d3:01:1b:33:1c:
02:ee:24:45:ef:ce:85:23:f9:7d:6d:d6:25:8a:46:f2:32:fb:
5f:18:f1:43:30:16:62:2e:04:22:df:7d:a0:b1:a7:71:21:a0:
c6:24:99:33:19:8f:ed:32:12:eb:05:b7:c2:0f:51:ed:68:4d:
02:6d:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org