Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/sRAR4LdvtoBy947Rjw_A9gGrO4I.roa
File: sRAR4LdvtoBy947Rjw_A9gGrO4I.roa (raw, json)
Hash identifier: 2wvisVrGuTrLksNUzSxfIk2fDgiQHWgjV/019BD3oeI=
Subject key identifier: B1:10:11:E0:B7:6F:B6:80:72:F7:8E:D1:8F:0F:C0:F6:01:AB:3B:82
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186B72C04E435A49336D595F607DC91157F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/sRAR4LdvtoBy947Rjw_A9gGrO4I.roa
Signing time: Mon 06 Mar 2023 13:46:00 +0000
ROA not before: Mon 06 Mar 2023 13:46:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:2c:04:e4:35:a4:93:36:d5:95:f6:07:dc:91:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 6 13:46:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b11011e0b76fb68072f78ed18f0fc0f601ab3b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:67:5d:bd:6c:ec:83:f3:1e:4f:71:4e:57:
a7:48:f1:18:b4:ed:3c:9e:e8:74:8f:9d:f5:dd:6d:
a4:58:9b:0d:1b:2a:34:89:8e:d8:f9:bb:3f:01:73:
9d:b8:60:6d:3b:30:24:c1:f9:28:04:83:57:e7:c3:
15:60:fd:d4:ba:4d:85:31:e2:21:f6:7c:d6:e9:12:
a1:39:82:6f:55:ae:45:17:e3:c2:ee:a4:16:40:7c:
10:b1:9e:ce:02:d6:2c:b3:0b:75:e7:a1:00:d7:8e:
bb:34:33:6d:df:32:a7:af:cc:ff:86:a1:2c:62:e6:
dc:ac:af:ed:f1:e4:f1:2d:7f:3f:07:8b:76:2b:f5:
6a:21:7b:1b:ce:56:63:2e:cc:a5:58:b2:38:18:e1:
74:98:bc:42:05:ff:9e:ca:2b:f2:c5:8f:c0:de:3b:
16:e7:75:de:d8:a1:0b:f5:07:f6:ee:bf:3f:46:a0:
93:99:a4:02:1c:ed:a6:d0:9c:6a:81:8d:fb:e9:cd:
32:9f:14:31:4e:28:bc:b9:3f:58:4b:0d:d0:01:ad:
b1:7b:4d:8d:db:20:83:93:80:bd:3c:98:6d:68:e3:
29:ac:69:8e:f1:12:3c:34:7c:e2:a7:b6:0c:9e:5e:
05:2e:7b:08:63:62:07:90:be:37:71:e5:b2:14:40:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:11:E0:B7:6F:B6:80:72:F7:8E:D1:8F:0F:C0:F6:01:AB:3B:82
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/sRAR4LdvtoBy947Rjw_A9gGrO4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.10.0/24
5.105.19.0/24
5.105.32.0/24
5.105.42.0/24
5.105.63.0/24
5.105.68.0/23
5.105.80.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.124.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.226.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:36:ef:15:09:88:7c:26:8a:72:6d:e1:ce:99:18:87:ec:01:
c8:a4:b0:ac:f2:61:83:b6:19:77:8e:ae:4f:cd:0c:65:26:da:
c5:66:31:8c:79:06:c0:ce:f6:58:5f:34:d5:fa:6d:a0:7d:ad:
b0:f3:5e:83:53:28:17:2b:a0:21:08:bf:0f:e2:9a:2b:25:b6:
a2:28:e9:04:c5:1c:fc:8a:9b:9c:99:77:88:b1:d7:9b:ad:52:
6e:22:72:dd:a7:0f:59:89:41:a6:3d:a2:bc:2c:75:07:0b:20:
2d:e5:a4:d4:01:e8:32:6e:24:74:41:57:8a:1e:df:ea:ac:db:
f4:81:fd:7f:17:7d:31:f1:6b:cb:d4:bb:80:b2:3b:d7:fc:72:
7f:99:c1:a9:77:1e:63:d6:3b:7f:db:8e:54:44:5c:91:db:a6:
1c:49:dc:41:e2:c3:26:7a:56:7e:9d:c6:b9:08:8b:8a:ab:a0:
e6:76:5f:ba:e3:08:6d:3b:8e:eb:56:e1:ca:48:80:ec:b5:f8:
54:a1:51:9d:6c:75:67:13:e2:8b:e6:f4:5d:39:33:aa:d4:d6:
03:b6:26:31:2e:a3:71:c3:42:a7:11:cc:01:c3:39:82:fb:e0:
e5:c7:69:fc:0a:41:33:42:c0:a3:e5:e3:1e:19:ec:44:fb:0f:
09:21:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org