Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mDnE6tLDnlz1MMoERRjdieh0sFg.roa
File: mDnE6tLDnlz1MMoERRjdieh0sFg.roa (raw, json)
Hash identifier: Sn6B6SG+DNYEpDwvpqG0aCbLacOa+T8lt2M0N+GLV8Q=
Subject key identifier: 98:39:C4:EA:D2:C3:9E:5C:F5:30:CA:04:45:18:DD:89:E8:74:B0:58
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01860759CCA5163D020E50166CBB3DE3D0B4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mDnE6tLDnlz1MMoERRjdieh0sFg.roa
Signing time: Tue 31 Jan 2023 10:22:50 +0000
ROA not before: Tue 31 Jan 2023 10:22:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:59:cc:a5:16:3d:02:0e:50:16:6c:bb:3d:e3:d0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 31 10:22:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9839c4ead2c39e5cf530ca044518dd89e874b058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:9d:f3:08:24:6f:6b:a2:58:d9:7c:6a:ac:
c1:c8:94:3b:01:cc:5a:ee:0b:f0:12:6a:3a:96:47:
43:51:70:5f:3e:7e:56:4b:8d:cb:90:6b:ca:1b:01:
35:d3:6e:a1:54:a9:56:2f:15:32:96:ef:1a:1e:6b:
f2:d9:53:4c:1a:f6:97:51:51:58:17:43:f6:a3:b6:
aa:aa:f1:a1:aa:c8:24:d4:9c:1f:0b:e6:ba:ad:20:
82:73:1d:c5:cb:9e:13:b9:a7:ea:2c:91:6c:e2:e9:
9b:dd:04:02:cb:e1:64:69:0c:5f:2d:98:5f:91:76:
9b:66:32:fe:b8:62:52:89:01:cc:62:48:9c:b6:9d:
e0:9d:ba:c3:b2:fe:3a:1d:f2:1f:26:10:48:fe:52:
37:ba:10:59:09:a2:85:0b:f7:8b:57:25:f1:d2:1c:
08:8b:74:f6:40:39:25:49:00:db:5e:7d:43:cf:7f:
b6:2f:bc:a1:05:37:a7:97:b0:8d:21:9c:07:d2:88:
52:5d:dc:92:a2:59:72:7e:e2:f6:6b:db:e9:3d:58:
1f:0c:1f:f2:39:ed:97:77:11:6e:e8:2a:1e:ce:dc:
cf:d2:87:35:fe:3e:27:ad:00:03:b3:9a:d0:d8:b6:
11:41:bc:78:c2:fa:2b:e9:9c:35:ff:95:45:82:97:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:C4:EA:D2:C3:9E:5C:F5:30:CA:04:45:18:DD:89:E8:74:B0:58
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mDnE6tLDnlz1MMoERRjdieh0sFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.10.0/24
5.105.12.0/24
5.105.32.0/23
5.105.50.0/24
5.105.63.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0-5.105.82.255
5.105.95.0-5.105.96.255
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.130.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.172.0/24
5.105.184.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.226.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fa:9b:36:e1:65:d9:7f:ed:c9:df:5f:e9:6f:5d:31:63:7b:
77:67:13:de:d1:3f:56:7e:73:52:95:f9:83:c5:82:80:8b:d3:
c1:f0:93:bf:2e:5d:fc:b7:21:b9:98:50:c2:2f:8d:a2:ca:fc:
62:9a:ae:8a:49:4c:dc:da:6f:7e:d0:49:4f:cc:b0:61:34:9b:
c1:d5:4d:7a:29:b1:ea:0c:53:4d:4a:b8:aa:2d:55:8b:8e:71:
4b:b1:83:8f:f1:3b:91:4f:e0:f6:90:4e:99:60:31:94:df:3f:
cc:e4:31:4d:9b:ba:67:cd:99:ae:53:dd:cb:90:b2:d1:66:d9:
38:c7:73:5e:98:06:59:41:6f:33:cb:4f:f8:76:97:ea:e1:a0:
ab:9a:fa:7a:e7:36:a7:5f:50:ce:36:f9:0c:ef:a4:2f:2a:32:
3b:69:4e:1e:66:51:3a:3e:b2:17:8e:82:a8:28:53:39:8a:1c:
63:45:b0:18:f9:ea:03:9d:ab:9c:61:15:f4:f5:ba:0c:a5:6e:
29:c2:38:56:72:8f:99:1a:c6:7a:69:25:ff:ee:d2:5a:e5:b8:
a3:fc:76:ae:65:86:c3:f9:c9:a7:d8:42:4d:d3:7c:ad:97:0f:
3c:73:da:ff:48:a5:fd:4a:7c:cd:9a:d8:15:87:5d:84:49:c5:
7e:0c:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org