Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/of8QyXHmjQBnuy8-434j7e2weuE.roa
File: of8QyXHmjQBnuy8-434j7e2weuE.roa (raw, json)
Hash identifier: CA4sMYxv7rnlNtM0Z4g4bpyjBwpx9WkB8vRpm1t4vys=
Subject key identifier: A1:FF:10:C9:71:E6:8D:00:67:BB:2F:3E:E3:7E:23:ED:ED:B0:7A:E1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01893F9624B12AFAD9C6450F920B5FF84047
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/of8QyXHmjQBnuy8-434j7e2weuE.roa
Signing time: Mon 10 Jul 2023 11:35:51 +0000
ROA not before: Mon 10 Jul 2023 11:35:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.22.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:96:24:b1:2a:fa:d9:c6:45:0f:92:0b:5f:f8:40:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 10 11:35:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1ff10c971e68d0067bb2f3ee37e23ededb07ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:39:b7:97:3d:4f:a0:f4:61:cb:d5:dc:33:
7d:8d:cb:df:d0:73:96:e7:ae:bb:a4:b2:19:4d:f3:
0f:2c:7e:fe:40:1b:e5:3e:da:f4:d5:c3:c0:3a:69:
8f:07:1f:d5:94:fd:93:3e:eb:27:f9:bf:ef:e4:9f:
2f:88:67:4a:12:2b:cc:86:ff:b4:9d:35:97:54:d8:
ab:6e:0e:2f:ce:af:69:45:3e:2d:3d:9b:36:99:6d:
06:3b:a4:42:52:34:6b:0d:22:ba:e8:e1:51:7c:fc:
c3:42:f0:ed:e1:6a:c4:31:8e:0b:28:b1:58:90:6d:
bf:af:1c:f2:41:e9:49:45:75:62:4a:2b:f4:06:14:
9c:ce:f6:95:41:18:6f:19:7e:24:4f:bf:f0:c6:86:
6d:55:69:37:1b:ae:a6:6b:42:ed:20:1e:24:ae:0f:
94:2b:cb:76:0c:47:64:7d:3e:0e:c1:df:54:a6:31:
a0:e6:71:85:b1:ac:18:c6:f5:ba:90:3b:ce:18:80:
7b:f1:6b:1b:89:30:6e:9c:2a:38:84:fc:aa:80:60:
a9:5e:84:6d:a8:b8:12:00:26:90:30:29:14:db:50:
8e:d5:d1:56:87:29:e0:2f:e3:bf:e7:4f:2e:5e:ea:
5a:8b:d9:d0:2b:69:08:eb:f3:7f:88:88:5c:29:b3:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FF:10:C9:71:E6:8D:00:67:BB:2F:3E:E3:7E:23:ED:ED:B0:7A:E1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/of8QyXHmjQBnuy8-434j7e2weuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0-5.105.22.255
5.105.36.0/24
5.105.45.0/24
5.105.47.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.157.0/24
5.105.162.0/24
5.105.166.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
40:06:fe:25:10:7d:76:f5:66:1c:fd:97:69:17:30:75:c8:20:
f7:1e:80:07:fa:d7:77:9a:62:8a:c5:24:71:07:6f:ef:8e:51:
e0:5b:73:ac:5c:f1:1f:9a:22:9b:a9:f7:1b:34:5c:d1:dc:23:
26:54:0c:55:cc:51:66:26:ae:ae:64:6f:6f:96:32:18:ca:bb:
ac:c9:15:2a:a5:2b:d0:95:1e:e5:36:a8:04:b4:1a:f7:e4:08:
c2:07:2a:32:07:e3:c4:31:f4:d6:bc:c5:89:8f:15:cc:d2:e5:
b3:00:42:fc:1d:cf:df:7d:63:f4:e3:cb:64:de:07:8e:a6:94:
fa:e4:f0:f0:48:7d:2e:27:33:3f:22:d8:ea:97:5f:04:ae:e2:
e6:ac:7e:ef:3e:2c:33:69:70:13:4c:65:55:01:16:9b:2e:af:
73:06:c5:32:44:a9:72:77:3b:85:32:ce:d1:67:76:ce:12:45:
a3:1b:d9:ed:bf:cf:63:a9:fa:00:02:f8:17:27:3b:77:58:9e:
d5:7f:df:ee:8a:9e:9f:b7:78:0c:d1:e9:aa:ed:07:07:4c:5c:
aa:c8:a7:7a:81:0a:21:27:17:e8:55:b7:43:74:c8:62:4d:0f:
d2:da:70:4c:1b:f2:49:40:76:1d:17:1f:97:b0:99:41:16:5e:
dc:36:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org