Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wfuEokMFsF6-75-2J9_gqLJDuuo.roa
File: wfuEokMFsF6-75-2J9_gqLJDuuo.roa (raw, json)
Hash identifier: P80FmfzkgVBeoLYP/LaOOW4yLf3i+PwI3lmYxa+HiU0=
Subject key identifier: C1:FB:84:A2:43:05:B0:5E:BE:EF:9F:B6:27:DF:E0:A8:B2:43:BA:EA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018636B96E51890A8A6A6EBF9E71FEAA6488
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wfuEokMFsF6-75-2J9_gqLJDuuo.roa
Signing time: Thu 09 Feb 2023 15:09:27 +0000
ROA not before: Thu 09 Feb 2023 15:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:b9:6e:51:89:0a:8a:6a:6e:bf:9e:71:fe:aa:64:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 9 15:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1fb84a24305b05ebeef9fb627dfe0a8b243baea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a1:48:c6:5b:b3:26:40:e0:4d:27:99:5a:61:
f8:db:b8:25:34:30:62:20:72:c7:e5:60:70:d7:3d:
f4:25:2f:f6:41:42:ec:83:fb:22:19:ae:3f:76:38:
e0:b9:3d:95:f2:d4:a4:a3:e3:02:3e:ac:65:d5:ea:
a7:69:fa:d8:67:20:00:68:16:10:28:c6:d5:8f:0a:
68:e2:61:fc:c3:0d:4b:a3:29:c3:5c:c3:ba:58:77:
d6:5f:a3:c0:0d:79:43:ab:fc:f0:88:58:5a:e6:10:
5f:ee:44:07:5f:86:4f:87:4e:ce:3c:00:12:a7:e9:
ac:b1:77:d8:4c:ed:c9:67:c0:f3:9e:ce:16:8a:62:
a8:f9:8f:d6:9c:62:42:74:61:db:44:8a:91:c5:82:
59:69:ec:bf:da:59:ae:c3:7f:fd:50:5b:97:da:9b:
90:98:5a:0b:7e:f9:ec:d4:4c:fa:3c:30:6c:a1:96:
be:0b:ef:68:e1:71:68:5f:dc:3d:a7:cc:e4:c5:3e:
b5:9c:cf:61:25:d2:4a:81:ba:20:f8:7d:57:31:e6:
4b:cd:39:af:e5:33:e2:02:f7:33:ca:a9:1f:aa:22:
89:72:01:cc:33:2e:57:81:d8:99:ff:31:ad:28:58:
07:89:ed:54:09:24:19:14:40:bf:bf:e4:3b:9e:e3:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:84:A2:43:05:B0:5E:BE:EF:9F:B6:27:DF:E0:A8:B2:43:BA:EA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wfuEokMFsF6-75-2J9_gqLJDuuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.38.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0/24
5.105.81.0-5.105.82.255
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.127.0/24
5.105.130.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0/24
5.105.168.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.216.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.105.252.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5e:67:ce:82:10:db:fc:a5:e9:ef:b0:da:84:37:fd:8c:df:
08:94:9c:5b:22:e8:bf:1b:b2:d0:f3:96:57:c9:b6:9f:3c:cf:
e0:ac:67:60:72:6e:96:32:32:2a:ab:8a:54:fd:8f:3b:9f:60:
35:20:0d:ab:31:cb:e3:b2:90:3d:d4:c2:f8:24:80:41:dd:46:
05:36:89:d2:e8:db:7b:99:ac:b0:5e:9b:de:30:04:2d:ed:e6:
eb:3a:21:1e:44:19:86:be:d4:e5:ca:92:0d:2d:54:bc:4d:17:
26:03:92:08:f5:59:bd:e2:b8:03:8d:c5:0f:60:b0:86:74:e7:
c7:6a:0c:56:9c:75:32:31:1d:47:0f:fb:b9:02:77:79:da:5c:
e8:59:3a:af:a6:c8:b4:3c:f1:31:a4:09:2a:61:a8:2a:05:83:
56:09:ce:99:23:f9:54:31:08:c5:f9:24:c7:34:c5:74:78:88:
2c:67:c4:a7:aa:e0:03:b8:5e:5a:79:9e:3f:e4:9b:4d:5f:ef:
ad:2f:37:76:c0:57:8c:3a:0e:73:eb:91:ea:da:8e:24:89:de:
4b:5a:2d:dc:ab:5d:03:42:67:5f:c5:80:10:40:59:a6:7d:e0:
7b:e9:90:08:a6:37:c2:9b:05:b3:61:7e:f1:29:e1:57:19:5e:
a7:23:8a:bc
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAYY2uW5RiQqKam6/nnH+qmSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjA5MTUwOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWZiODRhMjQzMDViMDVlYmVlZjlmYjYyN2RmZTBhOGIyNDNiYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aFIxluzJkDgTSeZWmH427glNDBi
IHLH5WBw1z30JS/2QULsg/siGa4/djjguT2V8tSko+MCPqxl1eqnafrYZyAAaBYQ
KMbVjwpo4mH8ww1LoynDXMO6WHfWX6PADXlDq/zwiFha5hBf7kQHX4ZPh07OPAAS
p+mssXfYTO3JZ8Dzns4WimKo+Y/WnGJCdGHbRIqRxYJZaey/2lmuw3/9UFuX2puQ
mFoLfvns1Ez6PDBsoZa+C+9o4XFoX9w9p8zkxT61nM9hJdJKgbog+H1XMeZLzTmv
5TPiAvczyqkfqiKJcgHMMy5XgdiZ/zGtKFgHie1UCSQZFEC/v+Q7nuNH4wIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFMH7hKJDBbBevu+ftiff4KiyQ7rqMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvd2Z1RW9rTUZzRjYtNzUtMko5X2dxTEpEdXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAAF
aQwDBAAFaSYDBAEFaUQDBAAFaUoDBAAFaU8wDAMEAAVpUQMEAAVpUgMEAAVpXwME
AAVpZwMEAAVpagMEAAVpbAMEAgVpcAMEAAVpfwMEAAVpggMEAQVpigMEAQVpjgME
AAVpnAMEAAVpogMEAAVppQMEAAVpqAMEAAVprAMEAQVpugMEAAVpwzAMAwQABWnF
AwQDBWnAMAwDBAEFacoDBAAFacwDBAEFac4DBAAFadgwDAMEAAVp7wMEAAVp8AME
AQVp9AMEAQVp+AMEAAVp/AMEAAW0sAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEA
j15nzoIQ2/yl6e+w2oQ3/YzfCJScWyLovxuy0POWV8m2nzzP4KxnYHJuljIyKquK
VP2PO59gNSANqzHL47KQPdTC+CSAQd1GBTaJ0ujbe5mssF6b3jAELe3m6zohHkQZ
hr7U5cqSDS1UvE0XJgOSCPVZveK4A43FD2CwhnTnx2oMVpx1MjEdRw/7uQJ3edpc
6Fk6r6bItDzxMaQJKmGoKgWDVgnOmSP5VDEIxfkkxzTFdHiILGfEp6rgA7heWnme
P+SbTV/vrS83dsBXjDoOc+uR6tqOJIneS1ot3KtdA0JnX8WAEEBZpn3ge+mQCKY3
wpsFs2F+8SnhVxlepyOKvA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org