Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/zRiltFuzw5Cm79Cttjf6XEB6JaA.roa
File: zRiltFuzw5Cm79Cttjf6XEB6JaA.roa (raw, json)
Hash identifier: jQrbpbBFCsDNbyx/sUpAE78fSHeJ8TP8t/PGg/yV+PY=
Subject key identifier: CD:18:A5:B4:5B:B3:C3:90:A6:EF:D0:AD:B6:37:FA:5C:40:7A:25:A0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A4AA9EC1F0E2E0F3523B0B1711F658787
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/zRiltFuzw5Cm79Cttjf6XEB6JaA.roa
Signing time: Thu 31 Aug 2023 08:16:04 +0000
ROA not before: Thu 31 Aug 2023 08:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:a9:ec:1f:0e:2e:0f:35:23:b0:b1:71:1f:65:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 31 08:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd18a5b45bb3c390a6efd0adb637fa5c407a25a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:ea:57:98:a8:65:04:26:95:6f:65:ae:70:
1b:f2:cd:22:cf:d8:94:69:5b:fc:4d:8f:2f:44:63:
4b:ac:d5:f9:1d:a0:66:70:3f:c6:49:5b:0f:f4:dc:
ad:5c:9c:e8:16:fd:75:d9:20:83:a3:25:9e:9f:97:
8f:09:a5:fa:a6:82:41:c7:58:58:fb:60:7a:90:01:
ea:c5:1b:10:e9:0a:e1:4c:20:b5:70:c7:50:7e:ed:
d8:51:95:ff:f8:2b:8a:b9:d2:84:af:7d:9f:e7:c9:
1a:c8:c2:93:ec:e4:b2:0b:92:cd:8a:b7:b0:c5:85:
6b:0a:46:f5:5f:0a:dd:fc:56:25:a6:b7:c2:79:15:
c7:d8:8a:3e:55:52:c2:f5:9e:7e:53:cb:fc:4f:fb:
79:d2:f1:03:22:d8:42:37:72:f3:59:de:04:8a:5a:
25:a0:25:bd:06:f4:36:d7:8d:1b:b5:6e:88:9e:d8:
02:f8:d4:f5:fc:62:a4:70:f1:61:17:ed:43:1a:ff:
3e:3d:28:a8:1c:5e:56:da:7d:5c:c1:d2:91:79:0e:
3c:ff:65:4c:da:3e:48:16:ed:1e:d0:0f:2a:7f:98:
7c:8a:aa:c3:62:35:a9:ac:8d:e0:0e:ae:f1:f6:1a:
10:03:7c:5c:ad:6a:ae:34:f7:bd:b3:8f:7e:f7:7c:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:18:A5:B4:5B:B3:C3:90:A6:EF:D0:AD:B6:37:FA:5C:40:7A:25:A0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/zRiltFuzw5Cm79Cttjf6XEB6JaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.82.0/24
5.105.84.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.157.0/24
5.105.162.0/24
5.105.203.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:97:a5:6e:f5:8e:96:57:ea:f3:3e:04:41:83:9c:2e:b1:91:
d3:ec:df:e4:00:2d:04:77:17:3e:b1:36:37:69:27:f4:35:b5:
af:58:9e:22:5b:1c:ef:02:75:de:64:bb:0d:d4:02:73:d8:d3:
71:6c:d8:9b:3b:f9:73:28:76:58:78:e0:36:da:a4:2c:31:25:
20:d7:55:bb:8a:bc:db:d0:14:f4:b5:a9:97:5b:b5:bd:76:ea:
78:4e:6e:b4:2b:5a:02:66:59:ff:3b:da:22:c1:e4:dc:0c:d2:
a8:07:8e:8e:51:81:ce:dd:6e:8e:c7:60:b1:e4:b6:ca:9c:b2:
42:c0:7c:d0:07:6b:30:46:41:be:d3:d4:0f:d7:c0:c6:c6:78:
15:ca:ca:b4:fd:cf:df:b2:98:43:69:10:3c:84:62:b7:e0:f6:
0c:49:48:9c:54:71:ce:6e:1e:51:ef:a6:55:26:f2:60:96:28:
e7:5b:64:d1:75:21:f9:1d:81:d1:51:d9:bc:53:0f:64:e3:96:
97:33:d9:51:52:7a:ed:92:e9:af:54:a1:36:76:d9:90:28:bb:
a1:39:dc:bb:ba:57:51:c1:3e:76:4e:7c:70:df:e3:ae:ef:e7:
6d:19:15:8a:2a:2c:ef:fd:4d:74:2e:68:6d:81:55:91:3d:42:
0e:1c:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:43 2023 by rpki-client on console-fra.rpki-client.org