Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/y5kBiRpXcjhWeATsZWboGFXIfPs.roa
File: y5kBiRpXcjhWeATsZWboGFXIfPs.roa (raw, json)
Hash identifier: Jc1ywkJ8QYMXrrQ4kvaRMEbbl7cz2y89PyB7SuHPUxc=
Subject key identifier: CB:99:01:89:1A:57:72:38:56:78:04:EC:65:66:E8:18:55:C8:7C:FB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AADB9D007BC5DF43047CD9114046EBC52
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/y5kBiRpXcjhWeATsZWboGFXIfPs.roa
Signing time: Tue 19 Sep 2023 13:55:50 +0000
ROA not before: Tue 19 Sep 2023 13:55:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.120.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.129.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.97.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.238.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.212.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.48.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:b9:d0:07:bc:5d:f4:30:47:cd:91:14:04:6e:bc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 19 13:55:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb9901891a577238567804ec6566e81855c87cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:f2:b4:79:6e:14:eb:c8:00:55:cd:3e:c9:
c9:c3:39:a6:cb:c1:e6:a9:fa:18:0c:8b:2d:d1:6d:
3c:07:05:e2:7f:7f:91:cb:b6:65:b3:2b:bb:aa:55:
6a:e1:ee:52:63:74:44:5d:cd:46:9a:2e:c3:c5:18:
54:67:4c:80:99:00:01:68:5d:41:c9:30:64:37:6f:
27:d2:71:e4:d0:c4:c4:d1:97:1e:e9:73:0b:24:cf:
c1:70:1e:99:9b:4a:a7:80:ff:52:a8:8f:34:24:48:
4a:b0:0c:2a:19:7b:82:e1:c0:16:39:86:76:53:33:
e6:07:46:6e:6a:12:db:ef:6c:b2:74:ff:09:a5:d3:
2d:2a:1b:d0:67:2a:e0:0a:27:7f:2e:17:48:4b:6d:
22:89:60:e2:99:50:33:f5:ec:66:84:45:9e:86:8b:
ec:29:75:0e:45:f7:79:5c:8f:33:60:8c:e8:96:48:
63:28:69:21:59:ad:a4:8e:76:87:b7:b4:0a:eb:17:
6c:f2:05:05:34:43:1e:a4:03:ca:35:9b:d8:96:a5:
8c:34:b3:93:f5:75:62:93:9e:7a:d5:c6:56:1a:e4:
41:80:0f:70:9d:5c:c8:07:82:29:bc:7b:8e:14:d5:
ec:b8:74:eb:c7:92:e8:4a:aa:22:54:74:a1:4d:49:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:99:01:89:1A:57:72:38:56:78:04:EC:65:66:E8:18:55:C8:7C:FB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/y5kBiRpXcjhWeATsZWboGFXIfPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/23
5.105.10.0/24
5.105.12.0/24
5.105.15.0-5.105.18.255
5.105.21.0/24
5.105.27.0/24
5.105.29.0/24
5.105.33.0/24
5.105.38.0-5.105.40.255
5.105.42.0/24
5.105.48.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.74.0/24
5.105.79.0/24
5.105.81.0/24
5.105.84.0/24
5.105.95.0/24
5.105.97.0/24
5.105.100.0/24
5.105.103.0/24
5.105.105.0-5.105.106.255
5.105.108.0/24
5.105.115.0/24
5.105.120.0/24
5.105.122.0/23
5.105.127.0/24
5.105.129.0-5.105.131.255
5.105.134.0-5.105.139.255
5.105.142.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/24
5.105.169.0/24
5.105.178.0/24
5.105.180.0/22
5.105.185.0/24
5.105.187.0/24
5.105.195.0-5.105.197.255
5.105.203.0-5.105.204.255
5.105.206.0/23
5.105.212.0/24
5.105.238.0-5.105.241.255
5.105.244.0/23
5.105.252.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
18:86:d0:0a:a6:92:9f:94:ec:f5:90:9c:56:ad:57:b9:c8:93:
28:3a:64:53:12:73:7c:35:18:f9:ca:a6:35:41:3b:da:c7:e9:
0d:b8:f1:88:d2:20:a8:a5:04:ac:da:4e:bc:ff:31:45:f3:32:
78:65:ab:44:e2:54:b2:87:bb:b7:66:5b:1e:3a:04:fe:9a:d9:
ff:1f:a6:ad:70:38:6f:78:77:1c:57:0a:1a:12:4a:d6:6d:5d:
43:8d:24:05:9d:10:ee:fc:bc:82:b5:9c:8a:54:08:f8:98:35:
20:5d:89:37:55:79:27:0b:21:ac:69:37:21:b1:da:2c:99:cf:
75:51:f8:16:8f:a9:34:35:66:41:ed:13:92:73:4b:3c:d7:ab:
51:d2:01:51:c8:12:a0:84:04:80:11:35:0b:06:65:28:6d:3f:
5d:dc:ca:26:e7:7b:49:fd:a5:1d:dd:f7:35:bc:9a:9d:e4:53:
51:26:00:23:67:fd:7b:60:e5:21:58:a2:7b:00:92:b3:45:81:
d0:de:be:c5:31:84:4c:ec:2e:0b:c2:1f:ff:4b:4a:f6:6e:18:
7c:e0:6e:d1:03:aa:9f:34:1f:73:09:54:0f:a8:c0:5b:ef:23:
db:bb:45:dd:e9:3f:16:40:d6:c9:5c:ca:22:9c:e3:7d:83:2d:
36:cc:d1:03
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgISAYqtudAHvF30MEfNkRQEbrxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTE5MTM1NTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjk5MDE4OTFhNTc3MjM4NTY3ODA0ZWM2NTY2ZTgxODU1Yzg3Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AfytHluFOvIAFXNPsnJwzmmy8Hm
qfoYDIst0W08BwXif3+Ry7Zlsyu7qlVq4e5SY3REXc1Gmi7DxRhUZ0yAmQABaF1B
yTBkN28n0nHk0MTE0Zce6XMLJM/BcB6Zm0qngP9SqI80JEhKsAwqGXuC4cAWOYZ2
UzPmB0ZuahLb72yydP8JpdMtKhvQZyrgCid/LhdIS20iiWDimVAz9exmhEWehovs
KXUORfd5XI8zYIzolkhjKGkhWa2kjnaHt7QK6xds8gUFNEMepAPKNZvYlqWMNLOT
9XVik5561cZWGuRBgA9wnVzIB4IpvHuOFNXsuHTrx5LoSqoiVHShTUmygwIDAQAB
o4IDbTCCA2kwHQYDVR0OBBYEFMuZAYkaV3I4VngE7GVm6BhVyHz7MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEveTVrQmlScFhjamhXZUFUc1pXYm9HRlhJZlBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBgQYIKwYBBQUHAQcBAf8EggFwMIIBbDCCAWgEAgABMIIB
YAMEAQVpBAMEAAVpCgMEAAVpDDAMAwQABWkPAwQABWkSAwQABWkVAwQABWkbAwQA
BWkdAwQABWkhMAwDBAEFaSYDBAAFaSgDBAAFaSoDBAAFaTADBAAFaTIDBAAFaTkD
BAAFaT4DBAAFaUoDBAAFaU8DBAAFaVEDBAAFaVQDBAAFaV8DBAAFaWEDBAAFaWQD
BAAFaWcwDAMEAAVpaQMEAAVpagMEAAVpbAMEAAVpcwMEAAVpeAMEAQVpegMEAAVp
fzAMAwQABWmBAwQCBWmAMAwDBAEFaYYDBAIFaYgDBAAFaY4DBAAFaZ0DBAAFaaID
BAAFaaQDBAAFaakDBAAFabIDBAIFabQDBAAFabkDBAAFabswDAMEAAVpwwMEAQVp
xDAMAwQABWnLAwQABWnMAwQBBWnOAwQABWnUMAwDBAEFae4DBAEFafADBAEFafQD
BAEFafwDBAAFtLADBADBLtIwDQYJKoZIhvcNAQELBQADggEBABiG0Aqmkp+U7PWQ
nFatV7nIkyg6ZFMSc3w1GPnKpjVBO9rH6Q248YjSIKilBKzaTrz/MUXzMnhlq0Ti
VLKHu7dmWx46BP6a2f8fpq1wOG94dxxXChoSStZtXUONJAWdEO78vIK1nIpUCPiY
NSBdiTdVeScLIaxpNyGx2iyZz3VR+BaPqTQ1ZkHtE5JzSzzXq1HSAVHIEqCEBIAR
NQsGZShtP13cyibne0n9pR3d9zW8mp3kU1EmACNn/Xtg5SFYonsAkrNFgdDevsUx
hEzsLgvCH/9LSvZuGHzgbtEDqp80H3MJVA+owFvvI9u7Rd3pPxZA1slcyiKc432D
LTbM0QM=
-----END CERTIFICATE-----
Generated at Sat Sep 23 18:37:44 2023 by rpki-client on console-ams.rpki-client.org