Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wR66uYVvHEy2RWT2wyQjMJmOryY.roa
File: wR66uYVvHEy2RWT2wyQjMJmOryY.roa (raw, json)
Hash identifier: 1334jhNF/yVVeLC2K220Ay2OA5MvoySgIHcOhhPeZI8=
Subject key identifier: C1:1E:BA:B9:85:6F:1C:4C:B6:45:64:F6:C3:24:23:30:99:8E:AF:26
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185E802C4016CB190FC8CB92639BC9CF93C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wR66uYVvHEy2RWT2wyQjMJmOryY.roa
Signing time: Wed 25 Jan 2023 08:19:33 +0000
ROA not before: Wed 25 Jan 2023 08:19:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:02:c4:01:6c:b1:90:fc:8c:b9:26:39:bc:9c:f9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 25 08:19:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c11ebab9856f1c4cb64564f6c3242330998eaf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:cb:d6:69:ae:62:27:be:4b:25:d8:6d:e0:
fb:6c:39:88:b7:80:fa:f5:8f:ec:81:d5:09:aa:aa:
ae:65:65:8e:8e:ad:4b:86:cb:78:d2:9e:93:8f:81:
3b:fa:09:e2:d0:4a:d0:39:78:10:37:e1:f8:f3:a7:
69:6f:38:d5:3d:86:30:b1:f7:f0:19:8e:00:37:e1:
a1:7b:c3:b9:b4:52:b6:a4:87:aa:0a:d3:43:cc:ab:
90:e1:ae:3e:b3:b3:2e:e8:b2:a1:37:80:a2:87:de:
de:b2:fa:11:4c:8c:d1:f9:d6:a3:04:9e:71:48:63:
c6:8a:40:d0:04:9c:43:54:95:26:f9:fe:2b:ab:50:
77:ef:9e:c7:86:f8:7a:79:e7:c6:bd:cc:33:fd:c6:
2c:4e:0c:0b:3d:f2:0a:af:40:86:10:50:86:b9:65:
d8:f0:87:75:c4:d9:3f:8e:35:da:b8:3f:d0:46:9e:
d6:33:d3:68:93:9d:39:bd:8f:63:48:e5:7f:33:77:
e7:39:d1:ef:e7:25:8f:3e:35:6e:8a:36:a1:7c:60:
93:14:0d:f0:cc:c1:e5:90:38:f6:64:5b:0a:2d:55:
22:7e:d9:91:27:77:d2:5f:6a:42:95:9b:59:2c:db:
13:39:91:2f:34:41:0f:f9:b2:27:5c:71:03:f8:e1:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:BA:B9:85:6F:1C:4C:B6:45:64:F6:C3:24:23:30:99:8E:AF:26
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wR66uYVvHEy2RWT2wyQjMJmOryY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.10.0/24
5.105.12.0/24
5.105.40.0/24
5.105.43.0/24
5.105.65.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.95.0/24
5.105.103.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c5:a5:cc:36:ef:34:b9:ca:1b:b8:86:02:13:74:fc:c1:cf:
c7:d1:1c:47:20:17:6a:8c:bb:77:01:40:07:88:aa:68:2d:4b:
07:cb:10:a6:b2:69:a2:ee:c7:9b:84:2d:3d:85:d6:f6:cb:ca:
da:f7:73:88:50:d8:1d:03:e6:e0:f1:d0:be:a1:d1:7b:9b:fa:
52:c6:87:ed:b2:f3:97:60:67:62:51:b5:e7:a1:b9:63:51:a4:
01:f6:0b:ed:00:27:f5:03:6e:f1:20:2a:ac:01:73:22:2f:cc:
c1:5d:13:ab:79:d7:cf:0c:d1:e5:3a:74:0f:db:3b:b3:bf:e1:
4d:09:d6:c8:e1:52:d5:6e:29:f5:e3:9c:58:51:f6:25:55:67:
38:99:21:da:0b:bc:bd:5d:45:32:f4:ba:71:01:8c:f0:60:7f:
51:87:6d:39:d0:d9:66:4f:bd:7a:97:d9:08:6a:be:65:1e:82:
2d:35:6a:97:eb:9b:cd:55:11:44:ed:00:1c:a0:2e:5c:b6:be:
3a:73:da:ba:6e:4a:c5:81:fe:aa:01:72:a9:cb:17:ed:ee:4f:
73:8d:fc:22:e0:d9:61:5f:c3:dc:81:51:14:26:f7:82:e2:32:
28:8a:9d:2c:05:2f:00:69:aa:04:04:f9:50:38:82:b8:1c:3a:
b5:e5:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org