Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hnJtDLXDezx8LMS3lRPsjq30bCc.roa
File: hnJtDLXDezx8LMS3lRPsjq30bCc.roa (raw, json)
Hash identifier: wBW8JGHxEFkWAJn1uEUlAOL1AgefNvlNY54tgRPNMSs=
Subject key identifier: 86:72:6D:0C:B5:C3:7B:3C:7C:2C:C4:B7:95:13:EC:8E:AD:F4:6C:27
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018608135DD4B87187509EC1377DECF64521
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hnJtDLXDezx8LMS3lRPsjq30bCc.roa
Signing time: Tue 31 Jan 2023 13:45:32 +0000
ROA not before: Tue 31 Jan 2023 13:45:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:13:5d:d4:b8:71:87:50:9e:c1:37:7d:ec:f6:45:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 31 13:45:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86726d0cb5c37b3c7c2cc4b79513ec8eadf46c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:eb:9c:a0:e0:e3:d9:d8:c8:83:ad:0d:5c:
85:c0:10:7c:76:73:d5:c6:98:b7:fe:af:0d:72:a8:
74:b1:de:77:0f:d3:52:ef:06:ef:f4:31:45:78:89:
ec:64:10:76:b4:7f:15:83:47:26:1e:8e:eb:91:62:
33:1a:b8:1e:82:96:74:35:98:e2:09:f2:ec:0a:f1:
78:37:43:5f:a9:f8:15:ea:93:c8:ca:46:ff:99:fd:
3c:a3:18:41:2d:7c:7e:0f:14:dc:2d:40:13:1d:cf:
f4:1f:4c:b5:96:84:68:90:03:23:61:5a:93:bf:fb:
94:56:a8:6a:52:38:98:5a:a9:6c:92:1c:e2:58:a6:
f0:61:bf:7b:99:01:3f:30:66:2e:0b:d3:6f:5f:ad:
ee:2b:96:55:e6:b1:f0:45:ad:80:85:67:19:4b:b6:
85:8c:cd:43:7e:81:41:d9:be:69:86:9e:8f:d0:98:
5f:10:54:0e:a6:75:2c:20:a1:cd:ca:66:a5:10:34:
d2:bb:b7:e2:3d:b1:76:c0:67:05:fb:28:28:a9:c3:
f2:41:65:6b:16:ff:67:92:3d:28:24:49:1b:d9:a9:
8b:dc:8f:b3:e2:43:0a:3f:5f:9e:6a:70:68:9e:84:
2a:56:0b:1a:c5:31:2e:01:dc:89:67:db:be:1c:23:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:6D:0C:B5:C3:7B:3C:7C:2C:C4:B7:95:13:EC:8E:AD:F4:6C:27
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hnJtDLXDezx8LMS3lRPsjq30bCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.10.0/24
5.105.12.0/24
5.105.32.0/23
5.105.50.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0-5.105.82.255
5.105.95.0-5.105.96.255
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.125.0/24
5.105.127.0/24
5.105.130.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.172.0/24
5.105.184.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.226.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:51:7d:59:d2:db:a1:7d:de:ff:27:f6:6c:ca:e3:14:a3:ae:
9d:8f:7c:98:96:d5:ff:f0:4c:a0:9f:61:ab:c9:82:3d:59:03:
2f:dd:d2:b4:b8:60:29:90:51:a3:16:7b:2d:f9:7c:e5:22:e9:
82:69:91:fc:1a:3b:3f:2a:1a:a4:a2:13:9d:d5:78:b7:2c:a6:
bc:fd:c0:ca:4f:4e:e6:ef:0b:33:2c:9b:13:02:52:23:27:65:
7f:4a:3d:b4:d5:dd:71:5a:cc:48:0d:59:bf:8e:3b:19:a4:ef:
be:0e:37:d4:1f:4a:a7:97:94:e6:3f:7a:f8:32:68:68:8f:8b:
fa:12:51:b1:84:02:c1:4d:9e:67:96:3e:a3:a0:8c:ba:60:74:
b0:f1:32:06:96:c2:c1:b3:59:52:d7:58:ad:d9:5c:34:d3:f5:
3f:a1:2c:72:4e:d7:b5:e2:7a:bb:3b:ab:0f:ca:a8:b4:f8:44:
b8:e8:10:b9:a2:c9:ab:72:cb:39:31:86:2f:58:42:6a:ee:c4:
5d:31:35:df:f5:5e:f0:49:d5:90:36:c9:fb:cf:5c:67:e6:08:
87:46:d5:b9:1d:65:22:98:69:a6:bf:7b:82:bc:b7:1a:17:4f:
1d:77:28:10:c5:db:23:49:1e:e4:a1:35:6e:71:cc:87:07:2e:
67:ed:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org