Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/u7JfSU0JwcB9huE64FReR2ByARY.roa
File: u7JfSU0JwcB9huE64FReR2ByARY.roa (raw, json)
Hash identifier: EY53psFvCwo0gWrHycAuz3GSqSRQP+t/RYNvNMEJe0M=
Subject key identifier: BB:B2:5F:49:4D:09:C1:C0:7D:86:E1:3A:E0:54:5E:47:60:72:01:16
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018804DB6EC6AC0DAAC847D47907705100F5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/u7JfSU0JwcB9huE64FReR2ByARY.roa
Signing time: Wed 10 May 2023 08:51:09 +0000
ROA not before: Wed 10 May 2023 08:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 14:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:db:6e:c6:ac:0d:aa:c8:47:d4:79:07:70:51:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 10 08:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbb25f494d09c1c07d86e13ae0545e4760720116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:06:25:3e:4d:a8:c7:81:10:37:f9:36:68:
57:13:15:c0:12:6b:7d:c7:32:b8:e2:c4:9a:90:5a:
a5:e2:51:2f:65:cc:94:7c:84:fc:c9:69:19:77:25:
af:8f:c9:55:1f:6b:0a:a6:2c:d6:d9:5b:d5:62:0a:
48:22:35:04:69:6d:ce:21:d4:55:07:7b:fe:6f:00:
dd:6f:33:2f:61:d8:a0:3c:be:3e:90:2e:b9:94:3b:
65:73:a4:84:9a:59:2a:30:aa:25:66:02:81:73:d6:
15:8e:b5:a9:67:f6:e7:e0:98:b7:24:0f:e7:6f:92:
bd:b3:5c:c9:ff:3c:0f:e5:5a:bb:bc:11:bd:8d:f9:
f0:f3:cf:9a:7d:32:c9:99:5c:17:03:98:48:00:ff:
05:b8:00:46:e8:24:ea:2e:db:9e:ac:3d:a4:d1:8a:
03:c4:62:9e:8d:f6:1d:ca:72:8e:49:03:5c:b9:cc:
47:05:5c:9f:0a:a5:0c:44:9e:ad:5b:f4:6f:d0:4f:
c3:59:64:f1:2e:0b:69:65:03:67:03:45:a5:a6:61:
10:f3:f4:4f:07:2e:dd:2c:c0:92:bd:80:1c:d7:0f:
05:89:d6:3d:03:cb:1f:eb:b5:6c:c2:d4:9c:10:8c:
04:ec:82:3f:12:49:46:5a:4b:87:db:69:67:79:bc:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B2:5F:49:4D:09:C1:C0:7D:86:E1:3A:E0:54:5E:47:60:72:01:16
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/u7JfSU0JwcB9huE64FReR2ByARY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.49.0/24
5.105.51.0/24
5.105.64.0/24
5.105.75.0/24
5.105.77.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d3:46:93:f0:25:f2:f3:28:b6:e7:25:d4:df:b5:6e:63:58:
6f:52:8d:16:1d:eb:e8:0d:0b:58:ed:5f:61:0e:1b:25:e6:65:
c3:ed:fe:35:e5:6e:54:5e:59:07:3f:ed:39:1b:90:09:80:86:
d2:7c:dc:64:73:a3:c9:ad:ae:ca:94:b4:51:e0:57:1f:52:f1:
a7:80:40:1c:51:68:5c:45:b2:df:a2:c2:61:34:e1:d6:69:f4:
67:32:29:8e:22:5f:0e:20:78:b7:c0:2d:03:3c:d5:36:ba:f0:
d2:70:4b:3a:10:ca:a5:a1:2c:8b:1f:b9:41:b1:7a:1a:01:62:
a2:0c:0b:14:98:bf:72:96:29:d3:cb:a4:80:1a:68:12:f2:fe:
f9:ea:46:73:9f:25:d6:7b:f2:6b:d7:77:d8:a6:db:ed:41:7b:
cf:c1:ae:7d:a2:e7:42:7d:73:3b:7f:5d:82:09:33:4d:43:96:
15:64:67:62:54:cc:49:f2:5a:99:c4:a1:81:1d:d7:f6:28:a1:
b4:22:72:bd:34:da:94:e0:66:69:54:77:d2:c0:21:42:e1:28:
6e:f3:73:1d:bb:8c:97:e9:38:e8:e7:5e:ad:23:5c:86:90:83:
3c:61:9c:1e:14:a1:0f:41:33:0a:5d:4e:e5:be:56:da:f3:37:
58:d5:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:29 2024 by rpki-client on console-fra.rpki-client.org