Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-JMcBt_khS_vA2uZf4lxsbYIBMU.roa
File: 1-JMcBt_khS_vA2uZf4lxsbYIBMU.roa (raw, json)
Hash identifier: wNc9oMBR9MgYCMC1+8oD0kJkAMVbx4UiAJep2OUX5J4=
Subject key identifier: F8:93:1C:06:DF:E4:85:2F:EF:03:6B:99:7F:89:71:B1:B6:08:04:C5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186C5909F61BBEDD2FF0C1FE39173E6FF57
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-JMcBt_khS_vA2uZf4lxsbYIBMU.roa
Signing time: Thu 09 Mar 2023 08:50:34 +0000
ROA not before: Thu 09 Mar 2023 08:50:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 5.105.62.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:90:9f:61:bb:ed:d2:ff:0c:1f:e3:91:73:e6:ff:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 9 08:50:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8931c06dfe4852fef036b997f8971b1b60804c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:18:b1:de:a7:1a:93:27:cb:67:47:f5:23:
9f:58:8f:1f:c9:54:d3:35:e1:34:fa:0f:8e:c7:47:
87:57:d2:9f:68:3b:66:d2:ae:3f:b6:6f:59:e5:05:
e8:b2:85:0c:d4:3f:9f:36:7b:ef:36:08:88:e9:93:
33:02:18:5e:e2:8e:6d:ef:67:e2:85:84:e5:c9:05:
72:a4:0b:45:9e:30:01:65:06:80:8d:a7:64:0b:b6:
ff:83:77:88:05:dd:3c:a4:8a:95:ef:b6:1d:9d:b1:
f8:6f:a4:e7:4e:b9:8a:8b:63:81:c6:0c:4b:eb:98:
46:c9:e3:e3:f6:cf:26:27:83:b8:00:3e:e2:e7:00:
ba:46:c6:39:5e:ec:dc:c3:fa:89:66:03:ba:15:41:
76:ad:5e:02:db:97:3c:bb:c3:53:c1:5a:8e:7a:1e:
43:9e:98:61:d0:06:c5:c6:f4:91:0d:75:5a:62:db:
04:d7:6c:db:30:97:87:af:97:66:89:86:50:22:ad:
40:7a:6a:8a:89:c8:0b:de:99:e8:05:6f:da:38:84:
5e:61:64:07:e8:f4:ec:f1:ef:5d:fe:a8:61:4d:c4:
b2:b6:ac:8c:3a:16:f9:93:df:ba:1a:9b:3f:ac:6e:
36:d3:8b:82:27:93:70:24:fc:9f:71:4c:35:ec:56:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:93:1C:06:DF:E4:85:2F:EF:03:6B:99:7F:89:71:B1:B6:08:04:C5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-JMcBt_khS_vA2uZf4lxsbYIBMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.62.0/24
5.105.71.0/24
5.105.117.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4a:5e:85:9b:90:7f:88:6a:eb:63:24:a9:b0:7d:5d:52:a0:
00:39:bc:e1:3d:74:7e:42:6d:36:84:f2:89:64:48:1a:99:f4:
62:4d:88:58:ac:7e:74:93:81:e9:8f:82:78:31:cf:fe:e3:4a:
d1:b5:aa:7d:36:86:b1:8f:58:aa:50:15:7a:62:23:9f:5f:dc:
29:26:22:4f:e6:8c:d8:8a:f9:f5:04:f2:8f:e1:3b:10:8a:8a:
2f:6b:70:bd:f2:67:c5:df:52:da:1d:b3:d4:48:82:92:2a:72:
e8:63:e1:21:c2:5d:83:49:9d:4c:8c:73:67:e9:01:a5:23:03:
a1:0c:e1:c1:bf:4b:d0:26:00:8e:0b:42:19:fa:5a:d8:5c:ab:
2a:5e:66:a3:d5:b8:25:f1:bc:df:64:ea:7c:2d:e1:7b:b3:a7:
d2:55:52:6f:51:73:0b:73:89:70:f3:25:6e:f3:7c:dd:a8:df:
d2:88:2d:25:a4:a5:5a:74:91:ec:2e:bd:a8:c2:53:5a:38:81:
fd:41:3d:19:31:67:8f:e4:b4:c5:93:bf:71:14:24:63:23:3e:
16:03:30:36:16:65:d8:26:20:c6:6c:f4:39:70:09:12:a8:0b:
bb:5a:02:cd:5f:85:27:67:9b:eb:e2:62:0e:5c:8c:40:2f:98:
64:e0:9c:05
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYbFkJ9hu+3S/wwf45Fz5v9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMzA5MDg1MDM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODkzMWMwNmRmZTQ4NTJmZWYwMzZiOTk3Zjg5NzFiMWI2MDgwNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuawYsd6nGpMny2dH9SOfWI8fyVTT
NeE0+g+Ox0eHV9KfaDtm0q4/tm9Z5QXosoUM1D+fNnvvNgiI6ZMzAhhe4o5t72fi
hYTlyQVypAtFnjABZQaAjadkC7b/g3eIBd08pIqV77YdnbH4b6TnTrmKi2OBxgxL
65hGyePj9s8mJ4O4AD7i5wC6RsY5Xuzcw/qJZgO6FUF2rV4C25c8u8NTwVqOeh5D
nphh0AbFxvSRDXVaYtsE12zbMJeHr5dmiYZQIq1AemqKicgL3pnoBW/aOIReYWQH
6PTs8e9d/qhhTcSytqyMOhb5k9+6Gps/rG4204uCJ5NwJPyfcUw17FalAQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPiTHAbf5IUv7wNrmX+JcbG2CATFMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMS1KTWNCdF9raFNfdkEydVpmNGx4c2JZSUJNVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvOGZjNzQ2LWZjMDgtNDIxMS1iYTNiLTg5MzkwNmZiNzg1
OC8xLzNmaTBVbFRsUncwZFRNNXZ0OV9VME5nN1hWay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAAVpPgME
AAVpRwMEAAVpdTANBgkqhkiG9w0BAQsFAAOCAQEAREpehZuQf4hq62MkqbB9XVKg
ADm84T10fkJtNoTyiWRIGpn0Yk2IWKx+dJOB6Y+CeDHP/uNK0bWqfTaGsY9YqlAV
emIjn1/cKSYiT+aM2Ir59QTyj+E7EIqKL2twvfJnxd9S2h2z1EiCkipy6GPhIcJd
g0mdTIxzZ+kBpSMDoQzhwb9L0CYAjgtCGfpa2FyrKl5mo9W4JfG832TqfC3he7On
0lVSb1FzC3OJcPMlbvN83ajf0ogtJaSlWnSR7C69qMJTWjiB/UE9GTFnj+S0xZO/
cRQkYyM+FgMwNhZl2CYgxmz0OXAJEqgLu1oCzV+FJ2eb6+JiDlyMQC+YZOCcBQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org