Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qupMLVvpsnquqsDZBPp-PaNmodM.roa
File: qupMLVvpsnquqsDZBPp-PaNmodM.roa (raw, json)
Hash identifier: L4HxfFeHlmLBR1uEKgEDeF8W+G1khpJoR82QCJAPQYQ=
Subject key identifier: AA:EA:4C:2D:5B:E9:B2:7A:AE:AA:C0:D9:04:FA:7E:3D:A3:66:A1:D3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B162E9E3E075765991B27077376DF89E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qupMLVvpsnquqsDZBPp-PaNmodM.roa
Signing time: Tue 01 Aug 2023 13:56:36 +0000
ROA not before: Tue 01 Aug 2023 13:56:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:62:e9:e3:e0:75:76:59:91:b2:70:77:37:6d:f8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 1 13:56:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaea4c2d5be9b27aaeaac0d904fa7e3da366a1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:92:e9:28:6a:87:71:ec:16:9b:6b:92:0b:
f2:17:10:56:b9:28:e0:28:3c:3b:5c:01:a9:16:f0:
8f:d4:60:80:67:a1:58:d1:ef:9f:3f:66:be:2b:9d:
bc:08:a4:7c:0d:f7:0d:10:c3:54:16:b1:20:ae:bb:
02:1d:f5:a3:ce:a7:58:42:9b:6b:d8:49:1d:eb:0f:
ed:a0:5a:83:e8:12:61:2c:92:79:d8:4e:41:7f:38:
21:98:92:0c:89:74:9d:b4:d6:e1:4b:c9:65:95:67:
99:32:e8:08:13:0c:68:35:af:38:bb:5b:34:79:e4:
45:95:99:10:bd:dc:f5:ab:28:3e:02:8d:94:03:f1:
b1:21:64:55:98:d4:f3:15:67:9b:8d:f8:f0:fb:7a:
92:2e:da:b5:b1:f1:2e:6b:dd:48:6b:a0:d0:a9:16:
54:72:74:6c:e5:6d:98:84:c4:7b:4b:1d:b6:c8:31:
12:71:a9:8b:8f:64:97:00:96:dc:ab:10:40:b7:62:
30:f4:d0:48:b4:b8:5c:bd:d9:b3:84:31:b6:f8:c3:
f4:85:9c:4b:85:d0:c5:33:0f:51:a4:60:a7:38:9e:
b6:d5:15:16:53:fe:27:e8:e1:47:9e:d2:ad:cf:64:
de:a1:1f:68:52:97:8c:f9:20:fc:74:35:dd:85:25:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EA:4C:2D:5B:E9:B2:7A:AE:AA:C0:D9:04:FA:7E:3D:A3:66:A1:D3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qupMLVvpsnquqsDZBPp-PaNmodM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.13.0-5.105.15.255
5.105.18.0/24
5.105.21.0/24
5.105.23.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.40.0/24
5.105.44.0/24
5.105.50.0/24
5.105.57.0/24
5.105.63.0/24
5.105.101.0/24
5.105.111.0/24
5.105.117.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/23
5.105.169.0/24
5.105.186.0/23
5.105.202.0/23
5.105.209.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.105.249.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ef:b6:9c:55:a4:e0:9c:5b:d8:6e:19:b4:d5:69:8e:27:ed:
6f:c9:dd:05:7b:f6:41:e1:f7:66:38:b9:fc:98:d5:98:47:10:
e0:16:3c:6d:44:e9:45:79:d2:d2:4f:06:d0:61:10:5f:73:f4:
55:e7:ed:db:fa:49:3d:04:ba:55:7a:67:db:c8:4d:2f:f9:94:
42:69:09:d3:9b:12:6a:ea:40:9d:58:e8:b6:af:19:6f:06:58:
7e:02:ab:bc:78:20:53:87:52:5f:1e:43:f9:58:21:8e:22:d4:
6b:27:af:b3:3d:77:1e:20:12:70:ca:e9:68:de:0b:74:6d:54:
a4:b1:6d:60:28:3a:67:8f:43:de:35:34:6c:1f:95:1f:65:b4:
9a:83:b5:f9:da:52:56:2f:ff:eb:60:d3:5d:99:f3:4c:bb:71:
25:71:9f:9b:47:8e:04:3f:fe:f9:76:ed:f6:5c:d3:df:dc:9a:
d4:71:41:28:b2:2a:36:fc:a8:6f:a5:74:84:1b:5a:4e:3a:d7:
3a:59:6a:96:ec:a3:3c:4b:6c:fb:77:19:38:5b:e1:29:0f:5c:
87:30:8e:03:10:b9:d2:09:9d:55:42:40:9e:f0:83:78:82:29:
da:93:93:53:9c:a3:92:6a:83:51:37:d4:9c:ff:82:d8:f4:14:
03:a9:cb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 08:44:15 2023 by rpki-client on console-ams.rpki-client.org