Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-qyo51c_RaTVIm88hwkSXud1beg.roa
File: 1-qyo51c_RaTVIm88hwkSXud1beg.roa (raw, json)
Hash identifier: 1pLoAzeeogp6IzqT9mLmGTF6gCt/FAf+BSLhVvpU4rs=
Subject key identifier: FA:AC:A8:E7:57:3F:45:A4:D5:22:6F:3C:87:09:12:5E:E7:75:6D:E8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185A1C8BA0FCFF2662E86A1FCD78B7F3BF3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-qyo51c_RaTVIm88hwkSXud1beg.roa
Signing time: Wed 11 Jan 2023 17:02:44 +0000
ROA not before: Wed 11 Jan 2023 17:02:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:c8:ba:0f:cf:f2:66:2e:86:a1:fc:d7:8b:7f:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 11 17:02:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faaca8e7573f45a4d5226f3c8709125ee7756de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:2f:0a:5a:22:46:bd:ca:91:92:d2:fa:e0:
5b:bb:5f:08:e5:aa:5f:2e:21:18:d3:3b:61:4d:50:
dd:be:9c:ae:03:bf:49:80:c9:6f:6c:e0:4a:ad:eb:
41:17:ef:49:5f:c9:85:f2:28:78:46:77:8e:e3:ab:
f2:eb:9b:19:4a:c7:45:7a:35:75:51:d5:8a:96:e2:
89:b4:48:3e:44:37:a2:35:ac:ac:35:86:75:11:f0:
86:dd:0d:a4:5c:fd:c0:82:9e:57:44:74:8c:aa:72:
37:b9:0e:4e:6a:c1:b8:fc:63:9e:f9:d0:18:05:70:
48:a5:5d:e0:99:ab:4c:53:a6:32:32:40:75:ea:99:
83:bf:f0:c7:3f:ff:3e:da:09:a3:74:68:3d:47:b2:
3a:27:a8:8b:97:e1:da:5d:a3:18:4d:da:a1:69:33:
0d:19:b9:12:6a:94:2d:46:f5:67:3a:ef:bd:ce:48:
ac:ce:19:dd:4c:dc:22:96:d8:bc:71:da:a5:d3:c8:
f7:0e:35:69:a9:f3:61:d6:76:36:a8:f6:64:36:59:
ea:4c:a1:16:28:b5:22:5d:8d:aa:e4:d3:6f:b4:35:
57:97:bc:8c:59:91:63:c0:73:b7:5d:e5:26:47:d7:
a7:6a:75:73:50:01:00:eb:bb:d3:2e:90:29:88:3f:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:A8:E7:57:3F:45:A4:D5:22:6F:3C:87:09:12:5E:E7:75:6D:E8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-qyo51c_RaTVIm88hwkSXud1beg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.32.0/23
5.105.38.0/23
5.105.63.0/24
5.105.96.0/24
5.105.130.0/24
5.105.136.0/24
5.105.184.0/24
5.105.215.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:24:40:29:f3:86:6e:7d:ff:9a:fd:5a:9d:a1:73:51:76:f3:
c9:63:7a:d4:65:74:3a:77:da:83:0d:d6:b1:4d:e6:be:ec:fb:
56:8f:59:4b:8a:44:6e:b3:0a:cc:06:86:b0:b7:dc:3d:02:8b:
4e:36:4b:18:48:72:eb:0a:84:52:3c:7f:85:c3:04:33:78:14:
f5:0f:e7:93:c1:25:53:7b:11:cd:65:1a:de:d1:3d:28:b6:bc:
9e:df:04:9b:d1:2f:6c:cc:ad:57:10:ec:73:3e:76:2c:6d:5e:
4e:75:96:7d:60:07:1c:c4:07:8f:ca:45:db:30:eb:97:64:d1:
f4:4e:02:b4:df:5a:7c:a4:a4:18:1c:fa:3a:37:ca:cf:ad:d7:
d0:31:29:92:96:79:1b:ab:86:16:18:97:01:6f:8c:9c:d7:50:
92:22:93:23:32:e8:e0:49:8f:ca:d4:19:f8:5b:55:63:55:38:
9b:40:8a:51:88:f4:da:a2:6f:e4:49:12:3a:97:5e:14:fd:be:
af:ab:b1:36:31:75:b6:96:ee:57:3e:a3:43:81:a1:2a:1e:b1:
c0:89:3d:e5:83:c2:aa:bc:bc:a2:d8:2d:c4:b1:a9:be:e2:50:
e4:7b:54:77:29:62:c6:7b:71:10:d6:bf:a9:42:81:e8:82:ea:
12:9b:34:29
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAYWhyLoPz/JmLoah/NeLfzvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTExMTcwMjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWFjYThlNzU3M2Y0NWE0ZDUyMjZmM2M4NzA5MTI1ZWU3NzU2ZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXMvCloiRr3KkZLS+uBbu18I5apf
LiEY0zthTVDdvpyuA79JgMlvbOBKretBF+9JX8mF8ih4RneO46vy65sZSsdFejV1
UdWKluKJtEg+RDeiNaysNYZ1EfCG3Q2kXP3Agp5XRHSMqnI3uQ5OasG4/GOe+dAY
BXBIpV3gmatMU6YyMkB16pmDv/DHP/8+2gmjdGg9R7I6J6iLl+HaXaMYTdqhaTMN
GbkSapQtRvVnOu+9zkiszhndTNwilti8cdql08j3DjVpqfNh1nY2qPZkNlnqTKEW
KLUiXY2q5NNvtDVXl7yMWZFjwHO3XeUmR9enanVzUAEA67vTLpApiD/iKwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFPqsqOdXP0Wk1SJvPIcJEl7ndW3oMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMS1xeW81MWNfUmFUVkltODhod2tTWHVkMWJlZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvOGZjNzQ2LWZjMDgtNDIxMS1iYTNiLTg5MzkwNmZiNzg1
OC8xLzNmaTBVbFRsUncwZFRNNXZ0OV9VME5nN1hWay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAAVpBwME
AQVpIAMEAQVpJgMEAAVpPwMEAAVpYAMEAAVpggMEAAVpiAMEAAVpuAMEAAVp1wME
AAVp4jANBgkqhkiG9w0BAQsFAAOCAQEAzyRAKfOGbn3/mv1anaFzUXbzyWN61GV0
Onfagw3WsU3mvuz7Vo9ZS4pEbrMKzAaGsLfcPQKLTjZLGEhy6wqEUjx/hcMEM3gU
9Q/nk8ElU3sRzWUa3tE9KLa8nt8Em9EvbMytVxDscz52LG1eTnWWfWAHHMQHj8pF
2zDrl2TR9E4CtN9afKSkGBz6OjfKz63X0DEpkpZ5G6uGFhiXAW+MnNdQkiKTIzLo
4EmPytQZ+FtVY1U4m0CKUYj02qJv5EkSOpdeFP2+r6uxNjF1tpbuVz6jQ4GhKh6x
wIk95YPCqry8otgtxLGpvuJQ5HtUdylixntxENa/qUKB6ILqEps0KQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org