Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xEOvkpwrQgEIu9crSTOb5qUfoqg.roa
File: xEOvkpwrQgEIu9crSTOb5qUfoqg.roa (raw, json)
Hash identifier: 2KCViTWCkLAF31X46Ko/ZZXgOLzJsO5mXZ6mCMJoO8I=
Subject key identifier: C4:43:AF:92:9C:2B:42:01:08:BB:D7:2B:49:33:9B:E6:A5:1F:A2:A8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C41A780FB1EEA9DEA2E6D653431C1959
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xEOvkpwrQgEIu9crSTOb5qUfoqg.roa
Signing time: Thu 27 Apr 2023 19:04:41 +0000
ROA not before: Thu 27 Apr 2023 19:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.35.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.44.0/22 maxlen: 22
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 07:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:1a:78:0f:b1:ee:a9:de:a2:e6:d6:53:43:1c:19:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 27 19:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c443af929c2b420108bbd72b49339be6a51fa2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:f8:76:c4:11:ad:b8:97:12:e1:21:36:cd:
16:63:e9:aa:6f:88:2f:5d:f0:d8:3e:04:f6:e6:80:
1f:11:04:d3:30:bb:ea:86:cb:66:72:8b:d5:b3:0b:
59:70:dc:fb:2c:62:e9:b5:1a:46:dd:1d:a5:94:18:
a6:d5:a4:b6:bc:03:a6:6f:58:47:68:e8:e2:13:f3:
a5:5e:49:5f:98:67:1c:d8:b9:67:f9:22:97:ab:3f:
d3:63:00:a4:7a:3c:a1:77:84:11:40:c0:93:e2:6a:
fb:e1:64:0a:80:44:39:78:c6:2a:8d:d5:49:73:d7:
1a:01:ea:83:4a:1e:f9:a4:66:8f:87:75:37:5f:a0:
a6:1b:64:0a:c4:42:50:d1:24:f7:8a:ae:a0:b4:04:
9a:40:e4:0b:02:78:b0:42:56:00:a5:d5:6c:4f:bb:
a7:57:6c:15:37:05:a4:a1:09:9d:08:a1:72:41:61:
e6:36:f3:c3:e1:6f:f0:97:c4:6c:60:23:b2:0f:3a:
57:8b:18:11:5a:4c:35:88:a0:7c:51:70:9d:f0:00:
b5:8d:55:da:cc:7b:ff:9f:8b:4b:02:04:72:9e:53:
6f:1e:23:d8:e6:81:b5:94:2c:bd:05:f4:6d:19:42:
7d:93:a5:c1:d8:99:f7:f7:95:e0:b7:ea:0d:d5:36:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:AF:92:9C:2B:42:01:08:BB:D7:2B:49:33:9B:E6:A5:1F:A2:A8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xEOvkpwrQgEIu9crSTOb5qUfoqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.23.0/24
5.105.31.0/24
5.105.34.0/23
5.105.44.0/22
5.105.64.0/24
5.105.68.0/23
5.105.76.0/23
5.105.85.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
49:99:ee:a6:de:c6:a9:ef:f8:9d:c2:0f:1c:04:d0:c0:fe:d2:
49:11:f2:4d:ce:33:06:b6:6a:98:ca:7c:20:0e:49:f0:5a:c2:
80:0e:35:63:51:5c:c3:ce:12:f2:af:cf:55:3b:ee:1f:11:7d:
ea:4b:29:97:64:72:5c:f9:d3:17:21:62:23:20:9d:f0:b8:5f:
be:6f:c1:2e:2b:a2:3a:3e:79:5a:47:6d:b2:a8:dc:62:27:1b:
f7:ca:7f:2b:84:5d:36:08:10:90:7c:27:f3:35:ef:cd:90:e9:
81:ce:6e:37:c1:d2:74:1e:75:13:ec:d9:a3:bc:bf:ce:18:f8:
f6:0a:62:ff:7a:97:cd:76:9f:ec:67:0a:e8:93:cb:34:e8:f3:
9c:3a:61:56:66:63:ee:de:af:61:ef:b7:af:44:0a:40:06:5d:
8b:b1:f1:ba:66:d1:98:83:61:b8:28:50:e9:99:45:ae:bb:ad:
9a:25:ab:c6:49:78:bf:59:3c:77:d0:ba:29:dd:5c:d9:c1:53:
60:3d:a3:b0:a2:7d:7b:a8:e1:5c:a9:d9:8d:b9:b9:09:95:c6:
42:64:fc:c7:5d:84:65:51:1d:64:bf:69:99:80:3d:24:10:b1:
b4:88:24:c1:7a:b5:af:68:ee:b2:76:38:98:3d:c1:d0:83:b7:
cf:28:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:59 2024 by rpki-client on console-ams.rpki-client.org