Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Oq9EoeUv6Tz1KQsZwuqv6eqmd5M.roa
File: Oq9EoeUv6Tz1KQsZwuqv6eqmd5M.roa (raw, json)
Hash identifier: IcZTmzXNhMqPm//pcMEVWLFOfcMoRQuW3TWiAUIPSJI=
Subject key identifier: 3A:AF:44:A1:E5:2F:E9:3C:F5:29:0B:19:C2:EA:AF:E9:EA:A6:77:93
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189A7CC3AF9F88C9242E9CA764871FD3579
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Oq9EoeUv6Tz1KQsZwuqv6eqmd5M.roa
Signing time: Sun 30 Jul 2023 17:15:26 +0000
ROA not before: Sun 30 Jul 2023 17:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.124.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a7:cc:3a:f9:f8:8c:92:42:e9:ca:76:48:71:fd:35:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 30 17:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aaf44a1e52fe93cf5290b19c2eaafe9eaa67793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:d4:ae:e5:5a:27:8d:7a:ad:9e:42:8c:60:
40:97:04:c5:e9:e2:f7:bd:b4:2d:74:71:b9:85:c5:
f2:fb:52:01:e6:e5:3e:cf:5f:9d:7d:a0:f3:ff:bb:
ba:40:12:e4:02:c4:49:2e:98:9f:69:70:eb:ae:0e:
2e:2d:52:3f:c0:fd:71:02:a6:5a:2a:1c:b3:9a:5a:
07:6e:fc:18:72:a9:86:16:f4:ad:c0:30:0b:47:40:
13:d0:d1:44:da:8d:cd:13:0a:00:b3:e1:ef:73:11:
8c:29:14:0b:d4:97:7a:21:d4:24:b6:0a:60:a9:fc:
8c:e3:66:f7:bc:89:e9:0d:04:70:d4:7e:29:d3:07:
5e:09:bb:06:c8:ff:f5:af:92:78:3f:3d:ea:fd:20:
d7:55:7c:c0:d7:8c:dd:07:e1:79:1e:b6:28:e4:a7:
3d:33:8d:5e:b8:b2:43:4f:41:65:99:24:38:25:5d:
e4:14:76:dc:f3:a1:2f:12:fb:71:16:34:37:20:fb:
07:6d:e1:f2:89:b7:a0:30:c6:33:b0:22:17:e6:78:
96:1b:f6:c6:bb:50:d0:bd:78:e4:1f:b6:83:00:26:
85:3f:77:f5:1a:d5:e4:6a:5c:b3:a8:53:fb:90:88:
2b:d7:89:a8:ab:ca:38:33:91:ea:ee:36:c5:d9:95:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:44:A1:E5:2F:E9:3C:F5:29:0B:19:C2:EA:AF:E9:EA:A6:77:93
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Oq9EoeUv6Tz1KQsZwuqv6eqmd5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.7.0/24
5.105.13.0-5.105.15.255
5.105.18.0/24
5.105.21.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0-5.105.51.255
5.105.57.0/24
5.105.66.0/24
5.105.69.0/24
5.105.94.0/24
5.105.101.0-5.105.102.255
5.105.111.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.122.0/24
5.105.124.0/24
5.105.126.0/23
5.105.134.0/24
5.105.136.0/24
5.105.143.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0-5.105.170.255
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.209.0/24
5.105.216.0/24
5.105.218.0/24
5.105.220.0/23
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.105.249.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a9:57:5f:83:59:77:6e:2e:fc:a0:52:11:e6:5d:ef:cd:ab:
bc:39:c7:28:8d:9a:a9:51:4b:e5:28:2e:66:3a:ed:b0:f0:c5:
63:47:e9:df:1c:4f:47:44:b7:8f:82:10:ee:17:2d:3f:0f:1e:
df:08:52:dd:ba:79:06:1e:4d:d6:49:e2:7b:6f:5d:de:6f:67:
17:3f:0f:2a:23:0d:2a:2d:71:bd:a1:3c:a3:12:a3:a4:22:02:
b7:b6:e5:f1:e0:87:67:52:71:67:bf:83:00:bb:7b:91:dc:78:
a2:e3:0d:ac:cd:53:10:82:9f:6b:4c:0a:a3:fe:21:32:3a:85:
a9:18:f2:a9:83:d4:cd:6f:8c:24:36:ee:59:81:6c:78:e6:cc:
5a:05:76:12:f1:2e:67:9d:4b:ca:2b:67:55:4a:1a:2e:86:62:
77:27:b3:8f:27:32:f2:f6:10:58:4f:52:28:71:77:65:14:30:
7c:24:b6:de:c2:cd:b5:e7:11:a7:ad:c3:1a:fc:79:3e:75:9a:
42:9f:ac:c6:be:a1:7e:7c:e7:43:ec:6f:77:39:77:36:df:09:
24:b7:97:ef:c6:4c:fd:6d:45:23:ea:33:ae:2d:f9:f0:2e:e9:
88:61:4d:ab:46:36:86:84:48:30:b8:52:98:f6:10:fb:3a:db:
e7:57:46:a8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAYmnzDr5+IySQunKdkhx/TV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNzMwMTcxNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWFmNDRhMWU1MmZlOTNjZjUyOTBiMTljMmVhYWZlOWVhYTY3NzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzjUruVaJ416rZ5CjGBAlwTF6eL3
vbQtdHG5hcXy+1IB5uU+z1+dfaDz/7u6QBLkAsRJLpifaXDrrg4uLVI/wP1xAqZa
KhyzmloHbvwYcqmGFvStwDALR0AT0NFE2o3NEwoAs+HvcxGMKRQL1Jd6IdQktgpg
qfyM42b3vInpDQRw1H4p0wdeCbsGyP/1r5J4Pz3q/SDXVXzA14zdB+F5HrYo5Kc9
M41euLJDT0FlmSQ4JV3kFHbc86EvEvtxFjQ3IPsHbeHyibegMMYzsCIX5niWG/bG
u1DQvXjkH7aDACaFP3f1GtXkalyzqFP7kIgr14moq8o4M5Hq7jbF2ZVJ1QIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFDqvRKHlL+k89SkLGcLqr+nqpneTMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvT3E5RW9lVXY2VHoxS1FzWnd1cXY2ZXFtZDVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAVAEAgABMIIB
SAMEAAVpAgMEAAVpBzAMAwQABWkNAwQEBWkAAwQABWkSAwQABWkVAwQABWkaAwQA
BWkeAwQBBWkgAwQBBWkkAwQABWktAwQABWkvMAwDBAAFaTEDBAIFaTADBAAFaTkD
BAAFaUIDBAAFaUUDBAAFaV4wDAMEAAVpZQMEAAVpZgMEAAVpbwMEAAVpcTAMAwQA
BWl1AwQABWl2AwQABWl6AwQABWl8AwQBBWl+AwQABWmGAwQABWmIAwQABWmPAwQA
BWmdAwQABWmiMAwDBAIFaaQDBAAFaaYwDAMEAwVpqAMEAAVpqgMEAQVpujAMAwQB
BWnGAwQABWnIAwQBBWnKAwQABWnRAwQABWnYAwQABWnaAwQBBWncAwQBBWnkMAwD
BAAFae8DBAAFafADBAEFafQDBAAFafcDBAAFafkDBAAFtLADBADBLtIwDQYJKoZI
hvcNAQELBQADggEBACipV1+DWXduLvygUhHmXe/Nq7w5xyiNmqlRS+UoLmY67bDw
xWNH6d8cT0dEt4+CEO4XLT8PHt8IUt26eQYeTdZJ4ntvXd5vZxc/DyojDSotcb2h
PKMSo6QiAre25fHgh2dScWe/gwC7e5HceKLjDazNUxCCn2tMCqP+ITI6hakY8qmD
1M1vjCQ27lmBbHjmzFoFdhLxLmedS8orZ1VKGi6GYncns48nMvL2EFhPUihxd2UU
MHwktt7CzbXnEaetwxr8eT51mkKfrMa+oX5850Psb3c5dzbfCSS3l+/GTP1tRSPq
M64t+fAu6YhhTatGNoaESDC4Upj2EPs62+dXRqg=
-----END CERTIFICATE-----
Generated at Sun Jul 30 20:03:24 2023 by rpki-client on console-ams.rpki-client.org