Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vyOb1qvvQ1DLCAYzccQo1evX3Tc.roa
File: vyOb1qvvQ1DLCAYzccQo1evX3Tc.roa (raw, json)
Hash identifier: s6OwWNREnYsNweFLy+KofPVCSC9Wcp7yUQzLEes/spU=
Subject key identifier: BF:23:9B:D6:AB:EF:43:50:CB:08:06:33:71:C4:28:D5:EB:D7:DD:37
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187473A4868A4A692657F5BFFFAB3FD1E7B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vyOb1qvvQ1DLCAYzccQo1evX3Tc.roa
Signing time: Mon 03 Apr 2023 13:06:54 +0000
ROA not before: Mon 03 Apr 2023 13:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:3a:48:68:a4:a6:92:65:7f:5b:ff:fa:b3:fd:1e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 3 13:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf239bd6abef4350cb08063371c428d5ebd7dd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:46:63:1a:0c:0f:e7:f2:49:76:07:c2:03:
7f:8d:8e:6d:10:d8:1d:e8:ad:95:2f:72:97:ee:3f:
e4:ed:59:e8:83:e5:b9:6d:50:c2:5d:54:eb:32:67:
a5:20:f8:e9:5f:7e:f8:29:d0:1e:56:7b:e9:cb:9a:
0d:c6:84:3d:69:07:91:0d:fb:34:08:71:2e:82:39:
c3:61:ba:c5:d4:6d:4d:6b:7e:5a:9d:06:88:0a:48:
23:ce:e3:8e:a5:af:57:24:40:0d:7c:ae:35:75:7c:
94:4d:4a:50:b5:7f:bf:33:02:bc:e2:c0:60:b5:7c:
05:e1:cf:bd:57:2d:82:2e:cd:88:44:44:56:dd:2f:
81:ad:7c:b6:31:57:38:78:44:ec:72:a2:86:a9:2b:
3b:a4:c5:a7:47:9c:c9:11:e3:e5:42:da:c1:41:e3:
0b:5f:31:c4:57:58:47:00:d7:98:19:28:d2:06:5d:
68:10:a6:01:d3:b9:74:e2:c8:a3:47:c7:40:a4:f6:
4e:71:d8:26:d7:e9:ee:d1:55:2a:75:48:be:53:35:
36:a8:a2:9a:93:b8:de:84:65:cd:c0:ef:81:7b:c7:
53:86:67:8c:55:a8:91:99:f5:3a:53:5b:ce:da:df:
cd:d1:d0:ac:70:37:cf:51:84:40:b8:8d:db:28:f9:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:9B:D6:AB:EF:43:50:CB:08:06:33:71:C4:28:D5:EB:D7:DD:37
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vyOb1qvvQ1DLCAYzccQo1evX3Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.30.0/23
5.105.51.0/24
5.105.66.0/24
5.105.68.0/23
5.105.82.0/24
5.105.102.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.124.0/24
5.105.127.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.157.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2e:9a:59:ab:71:a0:91:a6:d6:8a:73:ee:3c:c4:98:ed:f9:
bb:cb:56:71:34:18:09:63:3b:f8:ea:dc:a5:1e:c2:f7:a1:ea:
c9:8b:5c:6f:c9:b5:d5:b9:b5:b4:86:9b:c1:48:a3:97:1b:f7:
ed:43:db:b0:d1:b7:33:fd:04:c3:b1:f3:87:5c:54:88:91:5c:
a5:42:21:65:59:1e:e9:d5:38:d6:ad:1f:de:b8:36:df:22:e8:
d0:e8:97:56:6f:c0:32:94:cf:d0:f2:e2:66:32:b7:c5:b1:b2:
69:58:20:6a:6a:a4:b7:22:b7:b6:be:c7:91:d1:6f:3f:63:2c:
83:5b:26:a3:be:d9:10:8b:e4:f8:22:62:90:bf:b9:76:d4:54:
6e:a1:f7:df:4b:3e:cb:ab:5b:2a:59:89:be:fa:8c:3e:0d:eb:
5b:5a:37:58:71:48:3a:68:1b:fc:1a:69:16:d1:e8:bb:a6:04:
31:7e:2d:f6:d5:c6:94:de:68:c5:e8:97:f5:f2:6e:3c:fb:fd:
a6:25:f0:f1:d5:d9:43:b3:0c:31:1d:6a:4c:b6:c7:d8:59:05:
9f:cd:7d:10:ce:9a:f1:93:b3:8a:88:35:35:49:8c:95:c9:d0:
c1:da:cc:e3:48:76:f8:5f:47:c7:31:33:eb:63:38:09:10:e8:
a7:f0:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org