Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mohcCHkQ9qCRQ7Wlx1l7ooK2iBA.roa
File: mohcCHkQ9qCRQ7Wlx1l7ooK2iBA.roa (raw, json)
Hash identifier: y/4JNBELGbxm4kwdlvpIyO8DHj522/ZykMGPXBudBO4=
Subject key identifier: 9A:88:5C:08:79:10:F6:A0:91:43:B5:A5:C7:59:7B:A2:82:B6:88:10
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01880AB0A7FB07E9D84DD0FFC9349579C953
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mohcCHkQ9qCRQ7Wlx1l7ooK2iBA.roa
Signing time: Thu 11 May 2023 12:02:09 +0000
ROA not before: Thu 11 May 2023 12:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:b0:a7:fb:07:e9:d8:4d:d0:ff:c9:34:95:79:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 11 12:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a885c087910f6a09143b5a5c7597ba282b68810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:8a:38:db:bb:f1:48:24:9a:c7:86:22:8b:
c4:b7:7f:64:73:ac:d8:aa:17:c6:6c:d2:73:a7:48:
79:f8:cc:a5:1a:cd:9c:54:dd:73:11:e3:61:d7:4e:
a9:d3:ea:b3:3e:3f:94:75:6f:68:b3:64:00:1f:5e:
3c:71:ec:d3:59:f2:73:98:60:3e:e1:4a:36:0b:9f:
ab:c7:5a:fb:77:55:0a:6b:3c:f7:ff:93:41:9a:2b:
50:1a:72:52:52:88:73:f6:ad:91:92:f4:ba:a6:17:
d9:f5:f9:80:ef:88:85:a7:13:4b:5f:8c:05:f6:bf:
08:fa:0b:fa:00:fd:c7:1d:70:46:ea:88:fd:2b:98:
1e:46:d6:10:16:11:ff:6f:f1:68:4a:f2:68:aa:92:
f6:91:7d:23:f8:77:49:ff:9c:55:c1:43:b1:58:c2:
dc:71:69:65:29:15:f5:fb:b1:5c:71:ec:b0:5a:ea:
61:1d:f1:f0:91:b2:98:53:df:d0:d1:9f:b4:7e:af:
8f:17:9a:9a:d9:ad:2f:39:39:ca:2a:23:b7:6f:98:
6e:f0:d3:36:0d:51:24:58:86:4c:bb:ab:19:54:95:
25:89:4c:68:d1:73:20:e9:61:6c:72:54:f3:2a:2d:
d1:f9:c3:3b:e5:d8:fc:4d:4d:56:65:32:0b:0c:c7:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:5C:08:79:10:F6:A0:91:43:B5:A5:C7:59:7B:A2:82:B6:88:10
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mohcCHkQ9qCRQ7Wlx1l7ooK2iBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.51.0/24
5.105.64.0/24
5.105.75.0/24
5.105.77.0/24
5.105.104.0/24
5.105.118.0/24
5.105.123.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:03:62:13:60:e4:55:49:c0:24:c1:0b:87:3e:af:fb:8e:64:
ca:74:d4:32:ab:87:1e:fc:1b:dd:e1:e1:b6:06:a1:2e:bb:9c:
3a:aa:c9:f3:da:6d:9f:3a:8b:8e:0e:b6:ea:91:fd:96:d2:87:
09:5d:c4:f1:30:d5:7f:1c:9e:b2:a5:96:d8:b4:0c:d5:7d:ef:
0c:46:d0:58:48:4d:b4:13:29:23:1c:09:da:f7:09:86:3a:77:
82:17:eb:ec:c4:56:c7:d1:9f:6d:8b:55:cd:04:ce:07:c0:bc:
0d:53:23:fa:82:54:10:01:38:86:24:10:07:2a:c0:34:67:23:
63:7d:df:f7:cb:30:68:c3:25:28:76:48:cd:aa:ed:43:88:43:
df:40:27:2d:42:29:28:16:61:8f:08:58:a8:e2:b8:63:ad:26:
c9:b9:3a:f5:e1:94:bd:47:a5:54:52:05:b4:52:bc:28:22:91:
f6:e4:4c:28:8f:51:ed:7a:de:ba:f7:e2:9d:6d:22:df:fa:0e:
23:1b:de:48:66:54:fd:8b:54:00:60:5a:a2:b3:58:51:ef:e8:
3c:62:95:5b:29:50:86:14:9e:67:bc:2e:62:e4:5e:b9:aa:93:
ed:fa:32:22:26:b7:fb:11:1e:45:a6:27:bd:bb:62:35:13:15:
e3:9d:e0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org