Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qYW6SAzCtrfsBMIBXq6SKWHRLws.roa
File: qYW6SAzCtrfsBMIBXq6SKWHRLws.roa (raw, json)
Hash identifier: Ik2tptR63VMrkF9myIvayEqNPSPulBlvsl3i0lsOhnM=
Subject key identifier: A9:85:BA:48:0C:C2:B6:B7:EC:04:C2:01:5E:AE:92:29:61:D1:2F:0B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A4FBEE4325DC0B2CE17E9FF8C238A862C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qYW6SAzCtrfsBMIBXq6SKWHRLws.roa
Signing time: Fri 01 Sep 2023 07:57:04 +0000
ROA not before: Fri 01 Sep 2023 07:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.205.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:be:e4:32:5d:c0:b2:ce:17:e9:ff:8c:23:8a:86:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 1 07:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a985ba480cc2b6b7ec04c2015eae922961d12f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:4e:b3:02:44:d4:41:5c:ed:46:c0:48:a1:
06:ec:38:37:31:4a:2e:b3:97:c1:ed:86:6c:1e:68:
ac:44:ce:37:c6:65:72:42:ec:51:a5:ac:66:c1:22:
4a:6f:c4:17:1d:e8:71:27:b0:ec:15:dd:c4:12:bb:
3d:fc:b6:33:80:78:89:62:90:38:19:d0:54:7b:2e:
cd:3b:a2:79:67:84:4c:5a:83:36:54:dc:22:f7:2e:
4d:c1:04:25:a7:4c:81:22:d2:fa:59:95:97:b6:d1:
73:3e:e2:f8:44:f9:39:58:46:27:c6:9e:d9:3f:8f:
85:5d:da:1f:d5:a8:73:c3:7f:14:22:03:09:01:2c:
eb:67:1e:a3:15:1f:a2:7e:e7:95:a2:32:72:30:6b:
72:e2:6b:63:42:a0:b4:43:ca:66:7e:e0:55:71:bb:
a7:1a:b4:1f:ed:29:0e:d0:4c:d7:5e:2a:99:a3:49:
3c:a1:eb:ee:bc:8e:a3:67:2b:23:47:a3:86:00:c9:
2e:9d:4b:91:f0:78:af:bd:68:0d:98:0e:17:d6:ee:
21:2b:79:f8:9f:ed:ef:a4:7e:d4:cb:e0:a6:d9:81:
2d:e4:93:cc:05:0b:78:77:00:e6:85:37:c7:a9:fa:
bf:b4:17:46:8f:c2:73:c2:6f:e6:ea:aa:76:71:09:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:BA:48:0C:C2:B6:B7:EC:04:C2:01:5E:AE:92:29:61:D1:2F:0B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qYW6SAzCtrfsBMIBXq6SKWHRLws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.82.0/24
5.105.84.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.157.0/24
5.105.162.0/24
5.105.203.0/24
5.105.205.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
93:fd:43:c0:f6:b9:47:d4:fd:46:d0:40:f3:d4:ae:72:2a:68:
ee:2c:86:f3:b3:a1:53:7f:94:6c:3a:80:51:f6:b2:7c:b4:28:
be:c3:4f:7e:8f:94:1e:2e:3a:63:93:87:0e:3b:94:80:dd:7d:
0a:6c:3e:ae:ea:50:57:77:82:04:1b:7a:3d:ff:e5:48:8c:7f:
9e:cc:4b:1f:f0:b3:3d:fb:1a:13:c9:d3:17:7b:00:0b:4e:e3:
61:08:67:22:a3:e9:86:28:b2:be:ea:2e:c3:3f:4b:7a:2f:a7:
f2:e6:b1:91:c2:84:1e:43:66:f5:9d:12:d4:44:91:d8:23:ab:
53:f7:e5:05:e5:14:e3:e5:ab:99:84:77:28:e4:f3:70:cc:01:
ea:93:f7:6e:e6:a5:d8:1d:42:8f:50:16:c3:05:56:70:c9:43:
db:56:d6:95:bb:58:46:1c:49:4f:88:5a:8b:51:de:ff:ec:5f:
b6:22:26:1b:d7:0c:fc:2f:2a:7d:c9:66:01:16:20:8d:84:7a:
c9:6c:7d:65:37:30:7f:cb:d5:97:0c:a3:70:75:01:8c:57:5b:
0f:93:42:ba:57:3d:e6:54:08:a1:d3:58:9c:64:03:6e:a5:d2:
25:8d:77:2e:2b:77:26:e8:6f:03:d5:a0:52:de:dd:02:10:e0:
a5:40:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 20:48:38 2023 by rpki-client on console-ams.rpki-client.org