Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k3Ys-i4kvn0d_stNp4w82f8viGs.roa
File: k3Ys-i4kvn0d_stNp4w82f8viGs.roa (raw, json)
Hash identifier: 0tQCoE/EWKE3v3VcZ6hupOwtUkf4tn/FD/Fz6GZMZes=
Subject key identifier: 93:76:2C:FA:2E:24:BE:7D:1D:FE:CB:4D:A7:8C:3C:D9:FF:2F:88:6B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A85B4D6A43225DF6B96B339D3F5F22F25
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k3Ys-i4kvn0d_stNp4w82f8viGs.roa
Signing time: Mon 11 Sep 2023 19:25:35 +0000
ROA not before: Mon 11 Sep 2023 19:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.129.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.238.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:b4:d6:a4:32:25:df:6b:96:b3:39:d3:f5:f2:2f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 11 19:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93762cfa2e24be7d1dfecb4da78c3cd9ff2f886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:31:0f:1f:d7:62:46:38:fa:f2:1b:dd:19:
bd:70:66:8d:64:ad:f1:7c:27:e4:6e:79:ea:28:8c:
7b:cf:3e:73:95:4f:2a:4a:52:9a:84:9d:a1:65:54:
da:98:93:3e:de:cd:0c:1b:a1:fc:80:00:a9:78:e2:
43:09:90:a2:b8:ff:33:00:19:ea:b3:35:1d:d9:f8:
0f:b9:b7:81:8e:10:2d:0f:38:8a:b2:96:2d:0b:c9:
9e:16:d1:b5:11:a3:83:01:0f:df:6a:3e:07:b5:0d:
45:74:16:3d:15:51:96:15:56:12:0a:87:72:d1:b2:
d7:ca:03:42:f0:38:7c:84:48:44:ff:65:5e:61:2a:
e4:37:9d:38:1a:5a:f9:c6:50:b5:2c:b4:32:56:2a:
eb:06:c5:dc:3c:fb:5f:c4:28:db:20:e9:b0:fe:0a:
9e:b5:ac:58:0b:16:71:c6:5d:a6:8a:d2:e2:69:91:
43:20:2a:5d:9d:26:1f:cc:eb:dc:0b:38:ad:1f:67:
08:74:72:aa:12:27:d7:cd:6a:20:19:1d:80:75:4e:
eb:1d:6a:0a:06:6f:f7:2f:41:50:10:11:09:74:38:
0f:ce:29:66:b5:67:a6:32:fd:72:19:3e:33:14:3b:
2c:bd:96:ca:09:39:83:ae:34:a2:13:ae:11:40:aa:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:76:2C:FA:2E:24:BE:7D:1D:FE:CB:4D:A7:8C:3C:D9:FF:2F:88:6B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k3Ys-i4kvn0d_stNp4w82f8viGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.27.0/24
5.105.38.0-5.105.40.255
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.79.0/24
5.105.81.0/24
5.105.84.0/24
5.105.95.0/24
5.105.100.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.115.0/24
5.105.122.0/23
5.105.127.0/24
5.105.129.0-5.105.131.255
5.105.134.0-5.105.136.255
5.105.138.0/23
5.105.142.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/24
5.105.178.0/24
5.105.180.0/24
5.105.187.0/24
5.105.195.0-5.105.197.255
5.105.203.0-5.105.204.255
5.105.207.0/24
5.105.238.0-5.105.241.255
5.105.244.0/23
5.105.252.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:50:33:e9:5b:9d:5c:93:53:2f:45:a7:97:0c:c2:60:f2:cf:
6c:06:58:ba:31:db:b6:00:32:28:7f:79:6f:9b:f9:65:51:14:
e0:4e:55:b6:a6:9e:45:a5:64:2c:17:33:1d:88:33:a6:71:63:
6e:f8:ea:ea:dd:08:9f:0e:66:83:59:fe:45:e1:72:8f:f2:87:
1d:43:59:79:09:f8:ad:40:1a:29:9b:92:ff:32:7b:07:ee:70:
f3:af:de:a9:74:c1:43:73:ad:2c:ca:69:87:f3:a9:63:d7:94:
e8:18:12:e2:7d:30:8a:77:7c:57:84:a2:11:37:94:d2:44:1f:
f2:49:6e:a6:73:48:35:07:28:56:f0:27:cd:f5:fd:0e:f2:66:
3c:b5:d3:fc:08:a5:f9:34:80:fb:05:56:e6:67:c8:df:bd:fe:
32:ed:ba:3f:3f:9c:02:a0:f8:28:24:a3:22:5d:7f:04:a0:68:
c7:f0:f6:92:9d:2d:90:3d:2f:f8:53:2e:f0:47:44:aa:3f:1a:
7e:b3:b9:29:f3:4d:22:25:a1:aa:1a:f4:09:2c:77:55:85:e8:
22:6c:f7:fc:e0:2e:56:f0:54:78:4a:99:0d:2b:68:c7:11:f3:
b1:b2:86:3c:99:f3:cc:8e:87:8b:09:41:26:50:e3:de:1e:42:
7e:2c:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 22:36:20 2023 by rpki-client on console-ams.rpki-client.org