Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yuQz-btjwgGOuXJowNcTZv8gh8k.roa
File: yuQz-btjwgGOuXJowNcTZv8gh8k.roa (raw, json)
Hash identifier: f/oLk73yjZLHpFNW1h7wtTAJcBf1VK+x+toQ/VUi998=
Subject key identifier: CA:E4:33:F9:BB:63:C2:01:8E:B9:72:68:C0:D7:13:66:FF:20:87:C9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A1857D8978375E0AD8FE3841B4C690742
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yuQz-btjwgGOuXJowNcTZv8gh8k.roa
Signing time: Mon 21 Aug 2023 13:45:24 +0000
ROA not before: Mon 21 Aug 2023 13:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.20.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:57:d8:97:83:75:e0:ad:8f:e3:84:1b:4c:69:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 21 13:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cae433f9bb63c2018eb97268c0d71366ff2087c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:3a:f7:17:cb:71:02:1d:34:d3:3c:df:65:
00:4c:10:18:71:37:d5:72:30:45:a3:47:e9:90:b1:
95:c1:08:64:ae:e4:e2:dd:ba:26:a4:3f:91:bb:d0:
3d:7e:94:90:91:5a:fc:e2:8a:d2:1d:82:fd:d2:ba:
77:dd:1c:28:6e:62:d4:d5:f2:ff:d2:a5:da:b8:a9:
fb:01:84:fc:c9:a1:df:49:54:18:34:da:7e:0c:d2:
df:94:34:79:2d:e7:71:76:72:b5:2d:32:56:a2:07:
db:de:61:6a:4c:7c:76:99:fe:49:42:8b:1c:8f:e8:
7f:db:7f:76:ef:6f:27:90:3d:a1:b5:07:1e:03:c1:
25:96:b5:a1:e2:c4:64:11:e4:b9:b1:d9:9e:23:bc:
65:93:5d:56:72:ba:52:a3:d7:c6:a0:96:43:4f:9f:
6c:d7:40:0e:b3:45:50:4d:3f:dd:7a:73:3c:d2:31:
6c:18:a7:81:bd:6d:8f:79:1f:1d:8a:1b:64:49:4e:
e9:96:b6:43:b7:49:6e:81:19:90:f1:a1:b9:7b:09:
c1:c5:3a:d3:e0:c3:b9:e5:98:3c:ab:f7:18:1b:8d:
2a:2c:0f:96:83:93:8c:8f:8a:c1:7b:ee:f5:13:db:
fb:ea:4d:41:17:77:f6:00:2b:34:54:1b:80:d2:6d:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:33:F9:BB:63:C2:01:8E:B9:72:68:C0:D7:13:66:FF:20:87:C9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yuQz-btjwgGOuXJowNcTZv8gh8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.14.0/24
5.105.16.0/24
5.105.18.0/24
5.105.20.0/23
5.105.23.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/24
5.105.40.0/24
5.105.44.0/24
5.105.57.0/24
5.105.62.0/23
5.105.75.0/24
5.105.101.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/24
5.105.157.0/24
5.105.162.0/24
5.105.209.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2d:0c:c8:bc:3a:56:14:6f:c4:78:16:77:8a:82:2d:db:98:
06:23:ea:7a:28:01:46:06:25:13:eb:aa:c9:70:b5:10:29:63:
c2:f8:63:22:1e:3c:e7:92:32:f2:1a:c8:82:d7:6f:4d:d7:5d:
b9:3f:4e:08:f7:b8:31:8a:e4:f4:3e:16:09:70:54:68:41:1d:
27:19:e6:e9:0f:03:ae:fa:fc:fd:82:02:ab:16:a6:d1:cd:be:
aa:fd:6f:d0:03:4a:75:76:69:85:48:64:4b:a6:36:f8:55:e5:
d1:3f:f7:57:54:39:fb:1e:c3:f6:76:c8:f9:75:47:52:7c:c7:
f7:7a:14:7d:95:71:aa:ea:9e:a6:9f:d3:75:30:bd:20:35:11:
60:98:30:6e:3b:d4:6c:05:40:ad:de:d5:1c:64:c4:b9:e0:ca:
83:2b:6f:7e:8f:dd:43:9e:76:00:39:3b:de:12:15:0f:68:5b:
9c:82:16:3f:66:af:a9:58:26:95:12:e7:22:97:c9:70:2d:c2:
e6:b5:94:3c:cd:de:ce:39:ab:b3:82:d7:6b:95:8f:dd:da:cf:
45:c1:df:a6:b7:b6:9a:3c:09:35:97:15:fc:56:13:76:17:09:
e4:a6:6d:a7:52:51:d2:24:46:34:a2:ef:82:2a:b4:84:81:3a:
5e:95:e6:b5
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 22 12:13:03 2023 by rpki-client on console-fra.rpki-client.org