Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AEcgOB5RoYwWMMhSqmVe310tZ3M.roa
File: AEcgOB5RoYwWMMhSqmVe310tZ3M.roa (raw, json)
Hash identifier: vlk4lzW/mPab5QAHc13KXY7IWBcdJSQuL1k/S3BgMX0=
Subject key identifier: 00:47:20:38:1E:51:A1:8C:16:30:C8:52:AA:65:5E:DF:5D:2D:67:73
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185A0D7DED7404658C515B55FAD01EFC7C3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AEcgOB5RoYwWMMhSqmVe310tZ3M.roa
Signing time: Wed 11 Jan 2023 12:39:39 +0000
ROA not before: Wed 11 Jan 2023 12:39:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:d7:de:d7:40:46:58:c5:15:b5:5f:ad:01:ef:c7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 11 12:39:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=004720381e51a18c1630c852aa655edf5d2d6773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:08:6f:80:6c:e2:81:50:41:8b:21:c3:04:
74:b0:b2:9f:93:03:03:89:92:f9:80:3f:aa:69:53:
e8:dd:ec:c8:ea:49:e7:71:aa:6a:53:a8:c4:bf:df:
c0:6d:a2:f0:ac:db:eb:f3:f3:15:68:25:a2:6e:d2:
f8:78:8b:1f:e9:3b:24:40:df:25:92:80:e1:43:a6:
47:ae:86:7f:7e:2e:fd:e6:0b:8f:99:94:f8:ca:f7:
ce:f5:e6:e4:b0:d5:8d:7f:c9:b6:17:9a:ad:9c:d0:
99:3b:98:be:2d:5c:55:54:00:f2:2d:80:98:73:56:
2e:58:ba:71:95:4e:41:ea:2c:38:bd:bd:35:24:e6:
6b:bc:ea:27:ad:8a:ce:57:7b:1b:e1:56:73:21:04:
3a:b0:7c:6e:42:92:84:62:33:b5:7b:92:f9:be:d8:
1b:5a:a9:68:61:bf:d9:83:8e:cc:a1:1e:ae:ec:43:
c9:54:da:a3:a6:ce:f6:e8:b3:8b:62:e1:d8:1a:d6:
1a:27:b7:3a:47:de:12:7b:8b:9f:4a:76:46:ac:b6:
d8:83:b5:2a:c4:c0:2e:3e:eb:bb:8a:27:ad:f7:02:
02:57:cc:6f:81:47:0a:59:40:75:15:05:67:ad:a9:
3b:0e:b6:19:17:b1:11:a4:ed:1b:f4:f3:8a:d1:8a:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:20:38:1E:51:A1:8C:16:30:C8:52:AA:65:5E:DF:5D:2D:67:73
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AEcgOB5RoYwWMMhSqmVe310tZ3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.10.0/24
5.105.12.0/24
5.105.30.0/23
5.105.40.0/24
5.105.43.0/24
5.105.68.0/23
5.105.74.0/24
5.105.76.0/23
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.200.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:76:55:c9:c7:69:da:6f:49:d5:d7:6d:08:ff:f4:45:c1:a8:
60:c1:81:6f:dd:89:45:d2:ca:b7:51:c5:ec:49:1b:b5:dd:e1:
b3:6c:db:7b:f4:9c:1d:e4:4c:4d:f4:50:4d:03:16:55:53:8c:
c8:14:8b:ed:eb:cc:51:30:40:f7:44:e2:7f:30:ae:b7:04:d4:
14:ea:35:71:33:c8:d9:62:4e:a1:8b:57:18:3e:15:80:37:14:
52:66:8c:68:27:ed:b7:43:db:6a:8e:7d:99:ca:70:0e:89:c8:
0c:81:04:a9:fd:a3:91:c3:01:16:5c:11:7f:05:45:f4:d9:f8:
82:cb:bd:d4:e7:49:fa:1f:3f:b7:75:69:c0:e1:55:1a:01:de:
2d:d9:2c:6a:9f:fb:38:54:fd:82:6f:0c:83:d3:40:0c:ac:52:
2d:f7:2c:35:e0:92:cc:ef:f6:1c:34:87:1b:ef:85:03:c4:7a:
46:d0:0e:c6:24:bc:ec:b4:4a:3a:2d:14:5a:c7:80:49:0a:be:
d5:e8:b3:d5:d4:d4:88:9a:7b:bd:9b:7d:ad:b3:28:a5:49:81:
ae:99:4b:79:7e:b7:fb:7c:07:40:3a:66:5e:73:70:2e:21:62:
c2:42:43:b9:fd:76:2c:c4:c2:2f:a0:a3:82:6b:88:55:1a:4a:
94:0a:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org