Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1IwGM8cZx-nwY1FCBtsIlfD4VdY.roa
File: 1IwGM8cZx-nwY1FCBtsIlfD4VdY.roa (raw, json)
Hash identifier: ZI6ub/iDdRBu/t9a85TqMBCZtTZqcZQAURIQX/I5Y/A=
Subject key identifier: D4:8C:06:33:C7:19:C7:E9:F0:63:51:42:06:DB:08:95:F0:F8:55:D6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185AB9F18FF6FFEA2A39EE1E392384DC55F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1IwGM8cZx-nwY1FCBtsIlfD4VdY.roa
Signing time: Fri 13 Jan 2023 14:53:28 +0000
ROA not before: Fri 13 Jan 2023 14:53:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:9f:18:ff:6f:fe:a2:a3:9e:e1:e3:92:38:4d:c5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 13 14:53:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d48c0633c719c7e9f063514206db0895f0f855d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:db:6f:14:c6:5d:9c:9d:40:bd:e4:88:64:
32:f6:96:df:30:ab:4a:b0:3e:a6:5c:58:44:51:4f:
ad:a3:58:5f:d4:f3:d2:f9:fc:f8:df:44:37:7b:e2:
17:b3:45:f4:71:fd:ff:2b:52:e4:65:49:b8:f4:9a:
38:47:ca:8b:d8:9d:e9:48:1b:c4:68:f5:7f:b7:32:
a6:32:3c:33:4b:a1:fa:ba:6e:9f:da:ba:1b:9d:5a:
f3:1b:12:ef:1b:ab:ca:31:1e:0c:c1:f6:be:72:64:
c1:4b:b7:32:c2:83:16:e8:6a:3c:3b:91:aa:90:ee:
73:c1:ae:52:2c:30:d5:8f:43:d5:c0:32:9b:6c:9c:
5f:24:a0:bc:7e:3f:d1:c5:28:f2:f7:2c:2b:67:73:
02:bc:3d:af:7d:fc:d7:c2:91:a9:65:ef:85:43:88:
7a:4a:2c:65:69:16:d0:4d:6f:e6:79:2d:0f:1e:b9:
56:6b:10:29:61:20:8c:a8:30:fc:c4:46:61:3a:20:
5d:ca:42:b0:46:3d:a7:13:75:c3:29:03:ed:0b:9c:
d1:f9:c8:4b:a9:62:9e:b6:79:d6:f5:f0:28:3f:4b:
83:0d:0e:a2:42:61:8b:8a:96:67:78:2c:36:5d:c1:
57:ee:a3:5e:39:80:3c:72:a8:de:5f:c3:89:a0:36:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:06:33:C7:19:C7:E9:F0:63:51:42:06:DB:08:95:F0:F8:55:D6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1IwGM8cZx-nwY1FCBtsIlfD4VdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.10.0/24
5.105.12.0/24
5.105.31.0/24
5.105.68.0/23
5.105.74.0/24
5.105.77.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.200.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7b:ea:a7:2e:95:3c:21:63:84:74:c7:0e:ba:92:6b:b9:4b:
25:99:2b:e6:43:a6:eb:f3:73:1d:07:4f:a2:ab:eb:b4:b5:76:
92:b6:f9:c6:c4:47:92:6c:f8:cc:63:08:e6:2c:b6:ca:db:b3:
d9:a2:73:c5:52:62:7b:35:7f:45:27:58:55:bd:8c:09:2c:5f:
f0:73:9b:93:81:f6:77:51:f6:1a:58:4a:1f:a3:e5:66:2e:6b:
33:da:9b:f7:f6:be:05:98:c8:a5:d4:e2:98:5c:76:dd:31:8c:
b3:0f:67:52:95:49:2a:25:6e:7a:47:22:bb:4e:8e:dc:7e:e9:
eb:4f:53:13:4d:57:8a:c8:80:a3:f4:e2:10:df:11:0b:a0:c0:
4d:20:ae:07:4d:88:89:93:13:fb:b7:36:72:f3:98:59:7a:f1:
d1:0e:74:d4:77:c2:41:65:ec:b1:65:9f:36:33:de:05:78:d3:
0a:76:9b:f1:02:bf:f2:67:c7:2e:50:a1:3f:d4:79:56:22:9e:
31:09:cb:30:f6:2f:10:7e:d4:48:e0:5a:e7:34:ea:c1:2a:5b:
b0:78:92:fb:50:54:1a:ff:4a:46:57:61:e1:df:e4:6a:79:82:
d1:20:f8:bb:0f:22:a3:42:04:fe:da:5d:b9:29:3f:02:1c:34:
53:2d:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org