Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wDbK9DUa-DVNSpExnT6AGyRMr6A.roa
File: wDbK9DUa-DVNSpExnT6AGyRMr6A.roa (raw, json)
Hash identifier: IyFYXqe+JIHlAfsA+Q88/dwmVi4wV6ls+4C5kuhOAqI=
Subject key identifier: C0:36:CA:F4:35:1A:F8:35:4D:4A:91:31:9D:3E:80:1B:24:4C:AF:A0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185C05034000931BA0CAC618C2A5B8D08F6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wDbK9DUa-DVNSpExnT6AGyRMr6A.roa
Signing time: Tue 17 Jan 2023 15:19:19 +0000
ROA not before: Tue 17 Jan 2023 15:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:50:34:00:09:31:ba:0c:ac:61:8c:2a:5b:8d:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 17 15:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c036caf4351af8354d4a91319d3e801b244cafa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:44:8a:a8:36:66:be:1c:70:5f:e1:00:50:
ee:91:ee:bf:69:0b:0b:85:7a:16:ef:5f:4f:6c:20:
1e:c0:53:1b:bd:c4:b0:28:e7:41:84:67:85:43:03:
eb:d1:8d:60:03:a9:04:29:1f:b8:d5:25:66:b2:fb:
4f:d6:3a:b0:05:c4:fe:26:f1:14:f1:25:94:1b:90:
a9:11:e4:88:6b:96:da:19:c7:3f:46:ec:ac:bd:8b:
1d:c4:e2:5a:8f:d7:a7:1e:37:1c:af:8b:9d:f8:bb:
bc:0f:e8:b1:37:3f:a8:99:06:7f:c2:9b:2b:e7:0d:
4a:3c:76:2a:03:3d:b3:fd:8e:68:ac:8e:33:1c:21:
8a:4a:5c:42:e0:9f:39:44:88:10:b3:2c:77:c3:6e:
83:d1:b9:65:d4:bc:a3:6e:95:b7:09:7b:ac:4a:6a:
46:80:d4:ce:e5:08:90:68:01:81:6d:7c:75:7f:1b:
39:cb:31:19:27:58:4b:56:63:f3:02:9c:73:72:54:
b4:fb:f2:39:40:f9:53:fd:a9:80:67:2e:43:97:b5:
be:f3:0a:88:99:5d:b9:e7:12:7e:72:77:d8:1f:5c:
d1:77:37:c8:a6:10:be:f1:c2:c5:e3:80:96:f8:f9:
e5:b5:b9:81:78:12:b8:ca:0d:e4:f2:e3:2c:64:64:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:CA:F4:35:1A:F8:35:4D:4A:91:31:9D:3E:80:1B:24:4C:AF:A0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wDbK9DUa-DVNSpExnT6AGyRMr6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.10.0/24
5.105.12.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.95.0/24
5.105.103.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.200.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:6f:ca:5a:65:e8:ce:c1:12:67:f1:6a:dd:3b:fe:1b:92:44:
74:ee:e7:66:a7:64:0e:63:65:c0:f6:fb:1a:2a:ec:4f:68:1c:
0a:6a:5f:45:13:65:ed:2e:59:e6:80:81:dc:78:6b:3f:64:59:
22:d5:43:a4:49:c2:46:38:71:a6:e7:45:e8:8c:14:51:f6:dc:
18:01:cb:bc:59:0d:f9:2d:6b:89:89:04:bc:0e:fa:8d:ea:59:
1f:f6:ed:41:54:a7:65:a7:64:bf:9b:b2:b1:d3:ce:ce:08:96:
f0:a8:2e:f2:bf:ba:af:e5:c1:e7:49:86:4d:6b:09:39:01:ca:
83:05:6a:b9:96:75:81:9b:f1:7b:08:0d:c1:55:92:5a:7d:19:
91:1b:5d:2f:16:aa:c9:a7:91:51:8f:76:ed:fd:19:01:c2:25:
9b:a2:81:a4:1c:f2:c9:03:ec:0a:e5:bb:cf:06:1f:46:bd:b0:
58:e4:ed:0b:78:ea:4c:ff:e4:b4:d3:a7:65:9f:9c:18:63:47:
e2:53:36:df:06:23:2e:d4:c9:55:62:69:93:7a:8c:df:50:05:
5c:27:bb:4c:de:34:cd:ca:da:a1:26:fc:35:72:f7:b7:97:f4:
86:6b:da:62:8d:a1:b8:53:05:c8:7f:87:9a:99:4d:76:be:a0:
f9:a1:73:20
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISAYXAUDQACTG6DKxhjCpbjQj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTE3MTUxOTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDM2Y2FmNDM1MWFmODM1NGQ0YTkxMzE5ZDNlODAxYjI0NGNhZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzVEiqg2Zr4ccF/hAFDuke6/aQsL
hXoW719PbCAewFMbvcSwKOdBhGeFQwPr0Y1gA6kEKR+41SVmsvtP1jqwBcT+JvEU
8SWUG5CpEeSIa5baGcc/RuysvYsdxOJaj9enHjccr4ud+Lu8D+ixNz+omQZ/wpsr
5w1KPHYqAz2z/Y5orI4zHCGKSlxC4J85RIgQsyx3w26D0bll1LyjbpW3CXusSmpG
gNTO5QiQaAGBbXx1fxs5yzEZJ1hLVmPzApxzclS0+/I5QPlT/amAZy5Dl7W+8wqI
mV255xJ+cnfYH1zRdzfIphC+8cLF44CW+PnltbmBeBK4yg3k8uMsZGTniQIDAQAB
o4IDDTCCAwkwHQYDVR0OBBYEFMA2yvQ1Gvg1TUqRMZ0+gBskTK+gMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvd0RiSzlEVWEtRFZOU3BFeG5UNkFHeVJNcjZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDCCAQgEAgABMIIB
AAMEAAVpCgMEAAVpDAMEAQVpRAMEAAVpSjAMAwQABWlPAwQABWlSAwQABWlUAwQA
BWlfAwQABWlnAwQABWlsAwQCBWlwAwQBBWl6AwQABWl9AwQABWl/AwQABWmDAwQA
BWmGAwQBBWmKAwQBBWmOAwQABWmcAwQABWmiMAwDBAAFaaUDBAAFaaYDBAAFaagD
BAAFaaoDBAAFaawDBAEFaboDBAAFacMwDAMEAAVpxQMEAAVpyAMEAQVpygMEAQVp
zgMEAAVp1gMEAAVp2AMEAAVp5TAMAwQABWnvAwQABWnwAwQBBWn0MAwDBAAFafcD
BAEFafgDBAAFtLADBADBLtIwDQYJKoZIhvcNAQELBQADggEBALZvylpl6M7BEmfx
at07/huSRHTu52anZA5jZcD2+xoq7E9oHApqX0UTZe0uWeaAgdx4az9kWSLVQ6RJ
wkY4cabnReiMFFH23BgBy7xZDfkta4mJBLwO+o3qWR/27UFUp2WnZL+bsrHTzs4I
lvCoLvK/uq/lwedJhk1rCTkByoMFarmWdYGb8XsIDcFVklp9GZEbXS8WqsmnkVGP
du39GQHCJZuigaQc8skD7Arlu88GH0a9sFjk7Qt46kz/5LTTp2WfnBhjR+JTNt8G
Iy7UyVViaZN6jN9QBVwnu0zeNM3K2qEm/DVy97eX9IZr2mKNobhTBch/h5qZTXa+
oPmhcyA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org