Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cOxfRer7sIXDqhjEsjNTtla242M.roa
File: cOxfRer7sIXDqhjEsjNTtla242M.roa (raw, json)
Hash identifier: z45DLAYmaRNsmV9HihEbhu5zxgT18DWGSQexO+XIn4k=
Subject key identifier: 70:EC:5F:45:EA:FB:B0:85:C3:AA:18:C4:B2:33:53:B6:56:B6:E3:63
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185CC1C306E02A118A6755179A2E0B2BA11
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cOxfRer7sIXDqhjEsjNTtla242M.roa
Signing time: Thu 19 Jan 2023 22:17:57 +0000
ROA not before: Thu 19 Jan 2023 22:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 08:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cc:1c:30:6e:02:a1:18:a6:75:51:79:a2:e0:b2:ba:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 19 22:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70ec5f45eafbb085c3aa18c4b23353b656b6e363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:6f:4b:0c:31:38:fa:af:26:22:70:eb:52:
e0:3d:c7:9e:05:08:d2:c1:56:96:87:a0:83:a8:23:
0e:e3:29:9a:6e:02:cf:39:34:10:27:29:52:47:23:
ff:dc:58:2d:4a:2e:12:46:70:c9:56:49:6e:6f:93:
39:4b:db:10:f4:c0:59:95:1e:9b:46:2b:7e:c0:d5:
12:d9:f9:75:e1:56:98:0c:52:b3:c7:01:b0:d8:2a:
f4:88:c8:a1:72:6f:44:ae:80:d5:4d:a5:53:d5:75:
2f:9d:e4:84:5e:e4:67:24:97:55:3f:d7:14:fd:56:
47:7c:dc:fe:e4:68:32:fc:d8:26:65:f9:4f:38:9e:
2d:84:5b:b0:56:44:5a:5e:d9:31:62:39:55:56:14:
e0:48:1e:4f:0e:c0:a0:8d:a7:d3:e6:91:9a:d1:13:
9f:03:db:0e:86:6d:e8:9a:4f:8b:e3:48:51:b3:5d:
be:ae:fc:36:23:d0:7e:39:95:0b:7c:ed:6a:a9:8d:
fd:62:2c:bc:04:a4:3f:00:85:b3:70:65:6d:32:ec:
f3:96:4a:d9:7d:4f:93:9c:10:9c:97:f8:dd:1d:56:
85:83:85:b5:2a:0a:38:b7:3e:4f:28:1a:cd:36:fc:
77:19:82:a4:05:4d:22:ec:37:ac:b0:dc:c4:47:2d:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:5F:45:EA:FB:B0:85:C3:AA:18:C4:B2:33:53:B6:56:B6:E3:63
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cOxfRer7sIXDqhjEsjNTtla242M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.10.0/24
5.105.12.0/24
5.105.40.0/24
5.105.43.0/24
5.105.65.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.95.0/24
5.105.103.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
95:35:7d:b8:5a:65:36:7c:04:a9:c9:7d:8b:da:0e:04:e4:7c:
44:ff:98:1b:52:05:2c:b3:43:42:6e:a5:c0:04:42:a5:55:ae:
4f:9b:48:48:5d:39:0e:b3:81:a6:8b:f6:42:b4:5b:8a:fe:ae:
88:63:9e:66:a2:09:97:fb:1d:97:27:c8:b2:f4:a0:1a:5d:0b:
b6:5c:c4:9e:b5:09:09:63:15:5d:6b:8e:bc:b4:78:ba:cd:f0:
4b:a9:2b:0b:9f:20:df:69:47:7b:0d:df:6a:7c:6b:af:46:06:
91:81:d9:c2:6c:9e:9a:87:cd:fc:50:74:da:0f:1b:49:32:12:
0e:4b:11:53:c2:85:0b:20:9b:98:c8:f6:01:b0:3f:a1:9a:2e:
68:5d:e4:40:20:62:2f:f5:39:36:c4:3b:26:d4:03:f2:1b:9a:
52:b7:bc:11:42:27:1d:ac:74:b5:34:76:6c:bb:cb:65:57:16:
cb:3f:74:08:c6:4c:f4:01:a8:cd:32:77:66:8c:9a:1a:46:09:
91:ed:3f:b6:fd:9e:df:0f:4e:23:5a:22:20:59:7e:64:fd:7c:
32:e6:12:9b:7a:c1:84:c5:3d:70:f7:a0:8a:36:b3:d0:77:17:
0e:5b:61:ec:b1:89:e4:af:9f:0c:d9:18:cf:f4:e9:db:70:e2:
23:4e:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:57 2024 by rpki-client on console-ams.rpki-client.org