Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QL9hm756vxLuNwW7pUpQlaqBF1s.roa
File: QL9hm756vxLuNwW7pUpQlaqBF1s.roa (raw, json)
Hash identifier: 7v231VQVNe+f1NKvw/3HR9wCmd3Prj1oTENMI+cvSQ4=
Subject key identifier: 40:BF:61:9B:BE:7A:BF:12:EE:37:05:BB:A5:4A:50:95:AA:81:17:5B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AC32773AD7C17C410FF1A71F56F7193BB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QL9hm756vxLuNwW7pUpQlaqBF1s.roa
Signing time: Sat 23 Sep 2023 17:47:37 +0000
ROA not before: Sat 23 Sep 2023 17:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.120.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.129.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.97.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.238.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.212.0/24 maxlen: 24
5.105.210.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.48.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.0.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:27:73:ad:7c:17:c4:10:ff:1a:71:f5:6f:71:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 23 17:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40bf619bbe7abf12ee3705bba54a5095aa81175b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5e:13:40:03:8c:5b:16:0b:c7:7b:43:21:af:
05:b6:d4:63:2b:23:96:34:69:a1:ff:9a:d6:4e:e6:
34:11:95:f6:69:7a:04:16:8b:4d:12:ec:48:62:50:
3e:ee:2c:99:90:d1:c0:d5:a2:04:27:cd:cd:a8:5d:
92:74:21:18:b8:25:86:c7:49:7b:26:73:46:c4:51:
b4:21:b0:26:b5:e1:1d:18:ec:21:95:94:cf:f8:55:
f4:58:75:c7:8e:da:7b:d6:c0:92:97:12:61:e7:64:
ae:1b:d5:20:6d:99:d2:39:f6:9d:d8:76:d0:8d:c7:
50:7f:98:9d:e3:8a:bb:da:92:09:03:0d:82:78:69:
66:21:c7:d7:20:36:67:31:ac:45:87:e5:c3:e2:94:
7d:82:85:be:ca:75:af:98:61:a1:a7:0a:ef:55:91:
c1:ee:b9:63:54:12:e3:c1:a7:ca:7e:32:33:7b:76:
53:1f:1c:16:2a:b7:18:1b:6e:00:b8:87:25:8f:34:
af:e5:1e:7e:ef:5f:66:fa:f4:9b:d2:22:41:7d:cd:
08:2c:8c:ef:95:a6:2d:e3:6d:bc:cb:cc:29:af:d8:
7c:92:b6:e8:a3:a2:bc:84:4d:65:74:81:bd:fc:66:
3c:b4:62:34:36:76:88:17:0e:0d:db:f8:91:7e:a7:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:61:9B:BE:7A:BF:12:EE:37:05:BB:A5:4A:50:95:AA:81:17:5B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QL9hm756vxLuNwW7pUpQlaqBF1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.0.0/24
5.105.4.0/23
5.105.10.0/24
5.105.12.0/24
5.105.15.0-5.105.18.255
5.105.21.0/24
5.105.27.0/24
5.105.29.0/24
5.105.33.0/24
5.105.38.0-5.105.40.255
5.105.42.0/24
5.105.48.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.74.0/24
5.105.79.0/24
5.105.81.0/24
5.105.84.0/24
5.105.95.0-5.105.97.255
5.105.100.0/24
5.105.103.0/24
5.105.105.0-5.105.106.255
5.105.108.0/24
5.105.115.0/24
5.105.120.0/24
5.105.122.0/23
5.105.127.0/24
5.105.129.0-5.105.131.255
5.105.134.0-5.105.139.255
5.105.142.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/24
5.105.169.0/24
5.105.178.0/24
5.105.180.0-5.105.185.255
5.105.187.0/24
5.105.195.0-5.105.197.255
5.105.203.0-5.105.204.255
5.105.206.0/23
5.105.209.0-5.105.210.255
5.105.212.0/24
5.105.230.0/24
5.105.238.0-5.105.241.255
5.105.244.0/23
5.105.252.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ad:54:43:cc:74:20:3d:5b:84:98:0a:90:c5:2c:0a:75:22:
44:93:33:b7:f8:f9:18:8d:df:38:3d:fe:fa:6e:32:c7:34:29:
b5:20:5e:8a:da:fd:09:03:c6:a1:04:17:55:1d:dd:ad:8d:0a:
98:59:5a:ed:b0:90:84:3e:45:48:56:fe:6e:d4:3f:bd:ba:bb:
cc:7f:11:1a:4d:bd:15:28:ea:82:1e:c0:e5:99:af:b0:cb:2a:
90:4a:c4:27:17:1d:41:1d:59:b5:df:74:c7:f6:fe:5d:34:7d:
51:62:d9:ca:8e:5b:10:bc:ef:83:34:70:a8:82:53:48:ce:43:
04:4f:2d:d1:cd:65:0b:f0:8d:33:4d:c4:eb:38:1b:48:b5:3a:
25:b1:22:e9:00:3b:cf:09:1c:9d:5e:cb:81:c7:6c:d6:01:f0:
03:cd:79:5c:7c:ff:fd:66:78:6d:d6:2e:ec:5d:49:ff:95:5e:
94:7f:39:f2:7f:73:61:5a:08:f3:2e:59:de:06:d4:76:9c:a9:
22:4e:81:af:48:c9:73:d3:1f:de:e7:03:24:04:21:2f:6e:4b:
d8:9e:97:12:6b:03:8c:cc:63:69:0c:eb:57:72:c6:0c:af:7c:
b0:8f:9d:23:ae:b0:89:c9:cd:02:5c:a9:bc:84:76:96:21:3f:
a8:b0:2f:f3
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgISAYrDJ3OtfBfEEP8acfVvcZO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTIzMTc0NzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGJmNjE5YmJlN2FiZjEyZWUzNzA1YmJhNTRhNTA5NWFhODExNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF4TQAOMWxYLx3tDIa8FttRjKyOW
NGmh/5rWTuY0EZX2aXoEFotNEuxIYlA+7iyZkNHA1aIEJ83NqF2SdCEYuCWGx0l7
JnNGxFG0IbAmteEdGOwhlZTP+FX0WHXHjtp71sCSlxJh52SuG9UgbZnSOfad2HbQ
jcdQf5id44q72pIJAw2CeGlmIcfXIDZnMaxFh+XD4pR9goW+ynWvmGGhpwrvVZHB
7rljVBLjwafKfjIze3ZTHxwWKrcYG24AuIcljzSv5R5+719m+vSb0iJBfc0ILIzv
laYt4228y8wpr9h8krboo6K8hE1ldIG9/GY8tGI0NnaIFw4N2/iRfqdMUwIDAQAB
o4IDizCCA4cwHQYDVR0OBBYEFEC/YZu+er8S7jcFu6VKUJWqgRdbMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvUUw5aG03NTZ2eEx1TndXN3BVcFFsYXFCRjFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBnwYIKwYBBQUHAQcBAf8EggGOMIIBijCCAYYEAgABMIIB
fgMEAAVpAAMEAQVpBAMEAAVpCgMEAAVpDDAMAwQABWkPAwQABWkSAwQABWkVAwQA
BWkbAwQABWkdAwQABWkhMAwDBAEFaSYDBAAFaSgDBAAFaSoDBAAFaTADBAAFaTID
BAAFaTkDBAAFaT4DBAAFaUoDBAAFaU8DBAAFaVEDBAAFaVQwDAMEAAVpXwMEAQVp
YAMEAAVpZAMEAAVpZzAMAwQABWlpAwQABWlqAwQABWlsAwQABWlzAwQABWl4AwQB
BWl6AwQABWl/MAwDBAAFaYEDBAIFaYAwDAMEAQVphgMEAgVpiAMEAAVpjgMEAAVp
nQMEAAVpogMEAAVppAMEAAVpqQMEAAVpsjAMAwQCBWm0AwQBBWm4AwQABWm7MAwD
BAAFacMDBAEFacQwDAMEAAVpywMEAAVpzAMEAQVpzjAMAwQABWnRAwQABWnSAwQA
BWnUAwQABWnmMAwDBAEFae4DBAEFafADBAEFafQDBAEFafwDBAAFtLADBADBLtIw
DQYJKoZIhvcNAQELBQADggEBAKqtVEPMdCA9W4SYCpDFLAp1IkSTM7f4+RiN3zg9
/vpuMsc0KbUgXora/QkDxqEEF1Ud3a2NCphZWu2wkIQ+RUhW/m7UP726u8x/ERpN
vRUo6oIewOWZr7DLKpBKxCcXHUEdWbXfdMf2/l00fVFi2cqOWxC874M0cKiCU0jO
QwRPLdHNZQvwjTNNxOs4G0i1OiWxIukAO88JHJ1ey4HHbNYB8APNeVx8//1meG3W
LuxdSf+VXpR/OfJ/c2FaCPMuWd4G1HacqSJOga9IyXPTH97nAyQEIS9uS9ielxJr
A4zMY2kM61dyxgyvfLCPnSOusInJzQJcqbyEdpYhP6iwL/M=
-----END CERTIFICATE-----
Generated at Wed Oct 4 18:24:17 2023 by rpki-client on console-ams.rpki-client.org