Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yrOXodpgqVMwv3tg8P1Ib1PfMkY.roa
File: yrOXodpgqVMwv3tg8P1Ib1PfMkY.roa (raw, json)
Hash identifier: eM26ZlciuEUkpXXpb4ynFFUEdSsi7cEx95SuwBBNKso=
Subject key identifier: CA:B3:97:A1:DA:60:A9:53:30:BF:7B:60:F0:FD:48:6F:53:DF:32:46
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A08C9514A57192E5CE4CD4FE3CCF9D2AC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yrOXodpgqVMwv3tg8P1Ib1PfMkY.roa
Signing time: Fri 18 Aug 2023 13:15:25 +0000
ROA not before: Fri 18 Aug 2023 13:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:c9:51:4a:57:19:2e:5c:e4:cd:4f:e3:cc:f9:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 18 13:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cab397a1da60a95330bf7b60f0fd486f53df3246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:c4:23:52:26:3a:0d:27:c9:60:d9:5f:60:
8e:6e:9b:d8:01:67:a6:44:da:ec:89:03:2f:a1:a7:
d7:47:6f:3b:b1:11:64:2b:37:b7:81:92:6d:eb:a8:
c6:8f:7c:46:bb:14:71:6e:67:bc:1b:5a:4d:95:c7:
de:91:3d:39:47:55:3e:27:57:9c:f8:03:4b:0c:94:
dc:3a:78:d0:bf:f1:c7:0d:4e:9e:a7:a2:f8:02:f6:
11:64:e8:0b:d4:c2:45:cf:cb:45:ff:8d:ab:08:f8:
d7:2e:10:93:28:02:b3:36:fe:67:b2:03:07:f0:7a:
ea:52:8b:42:45:bc:77:ec:06:d7:e1:ac:45:e3:83:
68:02:de:82:96:34:a4:44:bc:77:e4:ed:62:b1:1f:
ee:19:68:63:fd:92:7d:f4:17:8c:ab:a3:3f:49:11:
18:3f:82:3f:29:a5:02:50:30:68:65:f7:18:ab:b7:
17:97:ad:23:8b:be:91:cc:f2:27:22:bc:98:c4:07:
ed:66:69:e7:b8:99:81:37:83:2d:c9:3e:09:ed:57:
35:a8:df:ef:e1:b5:22:9b:84:e0:6a:e6:6e:f9:49:
30:d3:3b:57:bb:2d:cc:56:61:56:32:8c:1c:ae:35:
86:9d:88:52:4b:18:6a:ad:03:5d:e4:0c:8e:4b:ac:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B3:97:A1:DA:60:A9:53:30:BF:7B:60:F0:FD:48:6F:53:DF:32:46
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yrOXodpgqVMwv3tg8P1Ib1PfMkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.14.0/24
5.105.18.0/24
5.105.21.0/24
5.105.23.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/24
5.105.40.0/24
5.105.44.0/24
5.105.57.0/24
5.105.62.0/23
5.105.75.0/24
5.105.101.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/24
5.105.157.0/24
5.105.162.0/24
5.105.209.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6b:06:4a:f1:73:21:73:30:16:80:b4:98:25:8a:ee:64:58:
88:a8:44:5d:42:98:ab:53:b7:2e:2e:d7:5b:d8:15:14:3d:0f:
dd:2d:ee:8f:09:33:dd:70:1a:92:fa:b4:d0:db:06:14:9b:7b:
b9:e6:f4:ce:fe:55:f2:5c:17:c7:26:a0:dc:ea:b1:fd:4a:be:
e8:47:8c:b9:a9:9c:c5:34:38:40:4d:80:c2:24:9c:fa:f6:15:
33:57:80:d8:cd:e6:40:75:c1:97:b6:a5:88:87:9a:6b:65:41:
c9:c5:86:a5:bd:58:11:0b:21:d8:94:2d:7b:b3:13:d8:5e:00:
58:51:af:0f:50:77:7d:6c:3a:66:10:c5:f9:d3:47:6a:bb:59:
f8:3f:f5:32:b4:5c:e0:86:63:d0:de:13:59:b8:14:99:bc:dc:
97:f1:00:5c:e3:1a:21:69:a0:e4:95:fd:ff:ed:98:c0:05:83:
04:aa:c8:36:b7:11:9b:9e:2b:3b:98:20:da:be:02:df:ad:c3:
52:9e:33:32:4b:46:2c:67:b4:3a:4a:29:2e:72:ac:d0:82:9b:
02:9a:b8:c2:bf:df:68:99:70:5b:70:21:88:d5:4a:33:14:57:
5e:87:a5:10:d6:4f:17:b8:a0:b3:e3:c9:d8:d9:f7:a5:91:bb:
01:6b:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 14:27:24 2023 by rpki-client on console-ams.rpki-client.org