Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3cjZHn5Xv1DpzXTDaRHPQuacZoE.roa
File: 3cjZHn5Xv1DpzXTDaRHPQuacZoE.roa (raw, json)
Hash identifier: PyRpq0zjVWZaEp6JE1NY5rhk5vgy5/FvT6Ny6W56duQ=
Subject key identifier: DD:C8:D9:1E:7E:57:BF:50:E9:CD:74:C3:69:11:CF:42:E6:9C:66:81
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B396007571A705E7F8ADC59017F9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3cjZHn5Xv1DpzXTDaRHPQuacZoE.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 22:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b3:96:00:75:71:a7:05:e7:f8:ad:c5:90:17:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddc8d91e7e57bf50e9cd74c36911cf42e69c6681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:82:51:82:23:f5:41:c2:79:3a:0c:fd:75:
c4:91:34:ff:38:d2:2a:09:f6:20:82:58:ad:52:a6:
bb:75:05:43:40:f8:2d:15:b9:e0:89:91:db:9b:c6:
b9:15:c1:e8:df:9b:f7:44:dd:1d:c8:90:b3:8a:79:
57:b7:44:64:5d:f1:8c:51:0d:04:95:15:66:6b:f5:
8b:e5:b8:93:6d:00:74:46:35:fc:eb:7b:fd:0b:dd:
89:8c:8e:d7:71:a9:e8:86:ef:7c:4c:47:4c:1f:dc:
52:c9:c6:04:e2:d0:89:34:d0:dc:7a:74:47:94:77:
17:ab:56:91:55:bd:bb:25:b0:2d:6d:79:42:4a:49:
83:6d:eb:90:4e:0c:b9:0a:f1:f2:e5:fb:bd:b6:11:
03:77:6c:44:4c:ab:63:f6:08:8b:2b:17:b3:75:79:
78:19:eb:1b:77:d8:94:9d:78:a6:3f:d5:3c:99:4e:
79:43:b2:a0:f2:a3:e8:ab:60:7e:ae:5c:ba:0b:3a:
98:a7:07:05:43:41:bf:f6:73:ab:16:9b:9a:be:1e:
ff:64:cc:e0:49:4b:a3:75:a3:36:5a:90:ff:55:cf:
29:77:e8:46:cb:92:86:0b:f4:92:a4:82:36:d9:45:
d7:be:d9:fb:a2:7d:1f:13:db:32:cb:bb:55:74:41:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C8:D9:1E:7E:57:BF:50:E9:CD:74:C3:69:11:CF:42:E6:9C:66:81
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3cjZHn5Xv1DpzXTDaRHPQuacZoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.26.0/24
5.105.40.0/24
5.105.43.0/24
5.105.68.0/23
5.105.72.0/24
5.105.74.0/24
5.105.76.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
40:20:f5:98:bc:09:d0:df:1c:43:8d:31:43:11:16:71:84:f8:
d9:8e:44:bd:7a:ad:94:7b:82:82:cb:0c:3e:8d:29:ad:26:d7:
25:89:b2:af:20:af:8e:0c:57:51:44:36:be:95:75:d7:43:e6:
23:61:50:f3:45:9b:6d:40:cc:42:ea:6a:97:e7:e0:03:b9:0a:
ab:ea:5e:8c:67:05:1b:f2:49:05:00:f6:e0:f5:af:f3:ba:c3:
79:0c:13:c5:cf:89:bb:69:d6:b5:d9:4d:cc:ce:b0:ef:03:52:
22:14:ad:4d:65:ad:68:ef:48:10:ea:36:3c:06:45:1b:0e:cd:
b2:77:af:54:d9:32:30:64:e5:38:05:22:2b:32:ce:8d:30:57:
25:43:b4:35:26:91:14:b8:3d:db:30:83:fe:51:08:f1:9e:ed:
9b:13:84:ef:a0:37:69:29:c4:0f:c5:99:bb:cd:0e:91:8d:bf:
d0:7d:98:22:33:58:45:e2:4e:69:3a:da:c6:71:3e:52:f8:41:
53:2e:5e:f8:85:77:b0:b0:0f:d7:5b:fa:12:be:aa:3b:3d:b7:
5a:4b:b6:db:4c:49:51:94:19:d4:1c:b1:1d:d8:0b:34:80:f1:
e8:45:0b:cb:fc:93:66:87:ec:55:11:ba:c8:94:98:48:40:b1:
24:fc:b0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:26 2024 by rpki-client on console-fra.rpki-client.org