Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eIJpupqHRWPOtI0znNBHqMFMtyk.roa
File: eIJpupqHRWPOtI0znNBHqMFMtyk.roa (raw, json)
Hash identifier: MegiJ5xxEPfsQ2SjohxN4MbO879CitcZj4HU0lHjYXA=
Subject key identifier: 78:82:69:BA:9A:87:45:63:CE:B4:8D:33:9C:D0:47:A8:C1:4C:B7:29
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01870923B4808BD38D155688BF51BC421803
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eIJpupqHRWPOtI0znNBHqMFMtyk.roa
Signing time: Wed 22 Mar 2023 11:45:47 +0000
ROA not before: Wed 22 Mar 2023 11:45:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:23:b4:80:8b:d3:8d:15:56:88:bf:51:bc:42:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 22 11:45:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=788269ba9a874563ceb48d339cd047a8c14cb729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:1a:2d:69:b2:16:47:f7:73:d7:02:39:97:
80:d9:25:5a:60:4a:bc:98:05:00:54:96:a5:02:2f:
b5:2f:e4:da:47:86:55:02:cb:77:f2:c2:94:98:60:
a5:ca:b6:17:be:49:8a:8b:9e:a3:a6:da:70:b0:c6:
5c:d4:19:92:de:03:b9:2d:f7:41:1f:ba:33:5d:f2:
15:b8:be:a1:4e:4e:33:8f:6f:c5:a3:75:01:80:66:
bc:cf:01:4a:4b:75:18:74:e4:2c:95:2a:32:60:07:
92:ee:1f:af:a4:59:cc:5b:64:1c:08:66:69:17:87:
e0:6c:85:92:f9:8d:e4:a8:9a:a5:cc:68:cd:70:8b:
ef:1a:34:33:8e:a4:50:98:dc:6e:4c:59:3a:99:b9:
fe:e3:05:d1:e1:07:98:dc:64:46:f6:51:01:37:33:
7d:92:ca:36:1a:ca:f3:31:af:48:aa:00:c2:e9:d1:
59:26:c0:a2:94:9b:0c:b6:30:36:9e:a3:1b:e5:45:
92:78:2d:4c:e8:4e:10:ae:6a:14:8b:12:8b:e4:8c:
d0:02:cc:97:3c:49:81:46:02:ed:bf:73:0c:74:77:
ef:e7:3e:b2:24:4a:d9:26:e4:14:bc:47:94:48:ba:
2d:64:fb:f6:9f:a8:74:d0:a8:b7:ea:e1:ac:56:df:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:82:69:BA:9A:87:45:63:CE:B4:8D:33:9C:D0:47:A8:C1:4C:B7:29
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eIJpupqHRWPOtI0znNBHqMFMtyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/23
5.105.82.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.186.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.218.0/24
5.105.226.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ad:7f:8d:94:33:45:38:0d:e4:15:2e:13:55:61:44:86:c5:
1a:16:2d:eb:94:bd:02:85:66:05:b5:9b:7e:ea:89:1a:f4:e4:
4b:10:c4:87:5f:78:1d:6d:74:e7:20:83:db:0c:84:fb:55:8e:
75:9c:33:4a:6e:0c:04:4d:ff:82:52:a5:fc:67:c8:0e:ae:6a:
ee:93:f4:5b:ba:89:3b:04:a1:e6:b4:d6:ce:11:f3:4d:d5:f7:
ff:0b:2c:85:6f:17:33:cb:46:0e:a6:72:b1:51:c0:d6:23:9a:
16:0d:1c:77:53:e0:f0:0e:8f:df:b7:a8:fc:1b:76:1a:80:d8:
ee:12:a6:f1:c5:be:3b:45:87:09:3e:83:c5:06:9b:04:9d:24:
4f:01:89:68:4f:68:43:97:1a:60:28:1f:c8:cd:bd:83:62:3d:
0a:b7:17:c9:fd:ba:f3:6b:cc:e2:08:fe:1f:d4:4c:d6:14:fb:
bf:0a:73:ba:df:fb:77:6c:0d:e4:e2:76:53:dc:15:24:ae:94:
05:e6:53:47:37:70:2b:26:7e:e9:84:bd:dc:19:ad:3b:f2:56:
97:19:54:be:65:08:78:d5:07:32:f3:dc:36:97:d7:dd:af:01:
6e:cf:93:03:2e:03:1e:20:40:41:ba:c8:cf:5f:35:26:7e:fe:
00:da:2e:2e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAYcJI7SAi9ONFVaIv1G8QhgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMzIyMTE0NTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODgyNjliYTlhODc0NTYzY2ViNDhkMzM5Y2QwNDdhOGMxNGNiNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF4aLWmyFkf3c9cCOZeA2SVaYEq8
mAUAVJalAi+1L+TaR4ZVAst38sKUmGClyrYXvkmKi56jptpwsMZc1BmS3gO5LfdB
H7ozXfIVuL6hTk4zj2/Fo3UBgGa8zwFKS3UYdOQslSoyYAeS7h+vpFnMW2QcCGZp
F4fgbIWS+Y3kqJqlzGjNcIvvGjQzjqRQmNxuTFk6mbn+4wXR4QeY3GRG9lEBNzN9
kso2GsrzMa9IqgDC6dFZJsCilJsMtjA2nqMb5UWSeC1M6E4QrmoUixKL5IzQAsyX
PEmBRgLtv3MMdHfv5z6yJErZJuQUvEeUSLotZPv2n6h00Ki36uGsVt9QbwIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFHiCabqah0VjzrSNM5zQR6jBTLcpMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvZUlKcHVwcUhSV1BPdEkwem5OQkhxTUZNdHlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBAEF
aUQDBAAFaVIDBAAFaWYDBAAFaWgDBAIFaXADBAAFaXYDBAAFaXwDBAAFaX8DBAEF
aYoDBAEFaY4DBAAFaZ0DBAAFaaIDBAAFaaUDBAAFaagDBAEFabowDAMEAAVpxQME
AwVpwAMEAQVpygMEAQVpzjAMAwQBBWnWAwQABWnYAwQABWnaAwQABWniAwQABWnk
MAwDBAAFae8DBAAFafADBAEFafQwDAMEAAVp9wMEAQVp+AMEAAW0sAMEAMEu0jAN
BgkqhkiG9w0BAQsFAAOCAQEAbK1/jZQzRTgN5BUuE1VhRIbFGhYt65S9AoVmBbWb
fuqJGvTkSxDEh194HW105yCD2wyE+1WOdZwzSm4MBE3/glKl/GfIDq5q7pP0W7qJ
OwSh5rTWzhHzTdX3/wsshW8XM8tGDqZysVHA1iOaFg0cd1Pg8A6P37eo/Bt2GoDY
7hKm8cW+O0WHCT6DxQabBJ0kTwGJaE9oQ5caYCgfyM29g2I9CrcXyf2682vM4gj+
H9RM1hT7vwpzut/7d2wN5OJ2U9wVJK6UBeZTRzdwKyZ+6YS93BmtO/JWlxlUvmUI
eNUHMvPcNpfX3a8Bbs+TAy4DHiBAQbrIz181Jn7+ANouLg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org