Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-znegaqu3PA3h3N5GMZo74Yqh3Q.roa
File: 1-znegaqu3PA3h3N5GMZo74Yqh3Q.roa (raw, json)
Hash identifier: LKlJkXrDRLEoiUhq6hTPOrFtEiexRy4sqVkzGjg+5LA=
Subject key identifier: FB:39:DE:81:AA:AE:DC:F0:37:87:73:79:18:C6:68:EF:86:2A:87:74
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187626ADA05F98091C9E63FCD6B3E109BDE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-znegaqu3PA3h3N5GMZo74Yqh3Q.roa
Signing time: Sat 08 Apr 2023 19:49:42 +0000
ROA not before: Sat 08 Apr 2023 19:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:62:6a:da:05:f9:80:91:c9:e6:3f:cd:6b:3e:10:9b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 8 19:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb39de81aaaedcf03787737918c668ef862a8774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:67:42:21:f9:45:23:9c:d5:16:aa:11:10:
24:a8:e6:37:65:97:1f:cf:87:ca:22:6b:33:c8:d4:
27:38:94:be:e9:22:c4:25:c5:03:ab:ce:6a:8c:28:
d6:ec:a4:b0:6d:b8:05:e3:b4:a5:ef:c0:b6:42:c1:
0d:f5:c5:f7:a3:bc:5b:4b:77:b9:10:31:92:1d:da:
da:4f:bf:48:78:be:e8:e2:cf:53:06:c7:b7:ca:8a:
5d:dc:25:26:56:a4:2d:3f:c4:18:bd:2f:1a:8c:d9:
dc:47:ea:e3:52:36:80:75:bb:73:35:29:93:8a:c0:
67:9c:73:47:ab:35:4a:11:77:94:15:2c:00:ce:eb:
95:b4:6a:c4:e6:c7:67:03:53:d0:26:f0:14:1a:ed:
9b:a8:b9:24:08:56:0e:b8:18:3d:13:9f:2e:34:63:
43:0d:ab:04:08:47:6c:08:f5:7d:c3:5c:b6:08:43:
df:19:72:9f:de:f6:54:31:af:e4:dc:1a:b6:5a:ef:
69:42:8f:14:c1:17:3e:da:fa:1c:58:d8:a7:a1:aa:
63:d8:9d:17:17:a6:e4:6e:59:7a:5d:1b:9b:7f:a3:
f3:d3:a4:69:e1:b4:e4:99:a1:03:c9:18:4a:4b:08:
49:8f:a5:6c:43:b6:aa:66:f3:96:ee:3a:93:77:90:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:DE:81:AA:AE:DC:F0:37:87:73:79:18:C6:68:EF:86:2A:87:74
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-znegaqu3PA3h3N5GMZo74Yqh3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.30.0/23
5.105.68.0/23
5.105.82.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:65:e9:63:15:e1:37:ea:50:4c:35:cd:c9:e6:c4:c5:9c:4f:
3e:0f:00:63:9a:7e:e8:91:8b:a9:3a:9e:53:1b:55:73:0d:3b:
04:cb:0d:30:98:7f:13:76:84:97:12:8f:4a:99:9c:aa:5a:58:
0b:a5:08:09:a2:bd:44:59:cb:38:98:28:ec:10:6d:5c:c6:4a:
7c:86:8c:7c:e2:49:07:6a:44:09:82:4b:84:6f:d4:39:55:f7:
40:69:3d:55:56:15:be:4f:07:ad:f0:09:ee:4b:e7:60:bb:ee:
16:13:9d:60:c9:e3:f0:77:62:60:43:97:55:0a:9f:17:1d:cc:
d4:ac:0d:6d:08:e0:08:7a:fe:da:91:44:f2:64:7c:0b:18:19:
37:c5:2e:e2:60:99:d9:45:df:ad:36:5e:6c:bf:2b:ac:6f:47:
be:67:65:62:04:5c:6a:4a:9e:d7:33:91:af:49:76:6b:a9:59:
79:8c:d8:e5:74:ce:ce:e6:2b:bb:12:98:09:c9:20:6a:a3:95:
b2:24:79:79:d9:19:07:ad:20:0c:e6:27:e6:87:61:b3:76:0e:
69:a5:5f:7f:08:b6:4a:60:f8:09:c6:48:f0:ba:ea:f4:c9:0a:
a4:9a:4a:f8:e6:6d:42:c2:3d:d6:77:0e:a4:7c:f8:bb:d7:36:
f3:33:97:3b
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgISAYdiatoF+YCRyeY/zWs+EJveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDA4MTk0OTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjM5ZGU4MWFhYWVkY2YwMzc4NzczNzkxOGM2NjhlZjg2MmE4Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBdnQiH5RSOc1RaqERAkqOY3ZZcf
z4fKImszyNQnOJS+6SLEJcUDq85qjCjW7KSwbbgF47Sl78C2QsEN9cX3o7xbS3e5
EDGSHdraT79IeL7o4s9TBse3yopd3CUmVqQtP8QYvS8ajNncR+rjUjaAdbtzNSmT
isBnnHNHqzVKEXeUFSwAzuuVtGrE5sdnA1PQJvAUGu2bqLkkCFYOuBg9E58uNGND
DasECEdsCPV9w1y2CEPfGXKf3vZUMa/k3Bq2Wu9pQo8UwRc+2vocWNinoapj2J0X
F6bkbll6XRubf6Pz06Rp4bTkmaEDyRhKSwhJj6VsQ7aqZvOW7jqTd5Cd/wIDAQAB
o4IC3TCCAtkwHQYDVR0OBBYEFPs53oGqrtzwN4dzeRjGaO+GKod0MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMS16bmVnYXF1M1BBM2gzTjVHTVpvNzRZcWgzUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvOGZjNzQ2LWZjMDgtNDIxMS1iYTNiLTg5MzkwNmZiNzg1
OC8xLzNmaTBVbFRsUncwZFRNNXZ0OV9VME5nN1hWay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB8QYIKwYBBQUHAQcBAf8EgeEwgd4wgdsEAgABMIHUAwQA
BWkEAwQBBWkeAwQBBWlEAwQABWlSAwQABWlmAwQABWloAwQCBWlwAwQABWl2AwQA
BWl8AwQABWl/AwQABWmGAwQBBWmKAwQBBWmOAwQABWmdAwQABWmiAwQABWmlAwQA
BWmqAwQABWmsMAwDBAAFabkDBAIFabgwDAMEAAVpxQMEAwVpwAMEAQVpygMEAQVp
zjAMAwQABWnXAwQABWnYAwQABWnaAwQABWnkMAwDBAAFae8DBAAFafADBAEFafQD
BAEFafgDBAAFtLADBADBLtIwDQYJKoZIhvcNAQELBQADggEBABpl6WMV4TfqUEw1
zcnmxMWcTz4PAGOafuiRi6k6nlMbVXMNOwTLDTCYfxN2hJcSj0qZnKpaWAulCAmi
vURZyziYKOwQbVzGSnyGjHziSQdqRAmCS4Rv1DlV90BpPVVWFb5PB63wCe5L52C7
7hYTnWDJ4/B3YmBDl1UKnxcdzNSsDW0I4Ah6/tqRRPJkfAsYGTfFLuJgmdlF3602
Xmy/K6xvR75nZWIEXGpKntczka9JdmupWXmM2OV0zs7mK7sSmAnJIGqjlbIkeXnZ
GQetIAzmJ+aHYbN2DmmlX38Itkpg+AnGSPC66vTJCqSaSvjmbULCPdZ3DqR8+LvX
NvMzlzs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org