Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1olY27Whj6cuga4jlGhPpxtSlFY.roa
File: 1olY27Whj6cuga4jlGhPpxtSlFY.roa (raw, json)
Hash identifier: yNYaxNH0wX2mo6D/M2YuXeBXHiA5NFW1MfhctQ9tsnk=
Subject key identifier: D6:89:58:DB:B5:A1:8F:A7:2E:81:AE:23:94:68:4F:A7:1B:52:94:56
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01888D08016BD0705C278D188FB57118E7A0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1olY27Whj6cuga4jlGhPpxtSlFY.roa
Signing time: Mon 05 Jun 2023 19:28:12 +0000
ROA not before: Mon 05 Jun 2023 19:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.186.0/23 maxlen: 24
5.105.198.0/23 maxlen: 24
5.105.202.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:08:01:6b:d0:70:5c:27:8d:18:8f:b5:71:18:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 5 19:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d68958dbb5a18fa72e81ae2394684fa71b529456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:f9:0a:b1:20:3d:53:fe:68:46:e1:77:12:
7e:49:34:79:1e:62:08:85:38:d6:1c:16:f8:27:ca:
6e:c1:05:de:7d:6f:0e:0e:80:ec:7c:2c:da:e3:78:
ff:de:d2:73:e1:57:af:52:dc:03:6e:60:8b:98:de:
05:a6:81:df:b3:8b:b3:9f:ab:3a:f2:81:02:52:2c:
a2:81:23:70:59:12:b6:0c:f3:92:f7:01:8b:f8:61:
04:c2:ed:bd:6f:50:71:d4:86:21:94:b1:29:27:90:
f5:0d:99:16:70:48:4c:00:49:d1:f3:c8:7e:ea:ca:
60:10:b7:59:34:e0:58:a5:27:17:c8:d5:31:51:6d:
1c:02:a9:6c:45:f3:c7:37:36:d1:a4:df:bf:f4:80:
b5:a3:2e:20:7f:bc:a5:94:7c:a5:8c:cd:1d:54:46:
e0:b3:70:b3:93:5e:60:f7:46:70:e8:76:69:fd:be:
74:ee:ce:6e:4c:f3:af:25:1d:ff:5d:95:d0:86:ea:
a4:bf:69:98:75:00:44:2b:4e:06:bb:76:1b:6b:1f:
d0:f3:f9:a6:bb:9a:42:a4:de:bd:d5:e0:6a:d4:39:
cc:d0:10:5e:f8:d1:20:76:03:c1:d9:8a:e3:86:f4:
b2:cc:12:97:dd:90:2a:b2:42:16:ba:d6:09:10:e2:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:58:DB:B5:A1:8F:A7:2E:81:AE:23:94:68:4F:A7:1B:52:94:56
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1olY27Whj6cuga4jlGhPpxtSlFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
Signature Algorithm: sha256WithRSAEncryption
75:a3:d0:d7:e4:4f:c1:a0:de:a4:50:cb:fc:a5:fb:e2:95:12:
84:76:ff:b5:45:0a:09:29:7a:8a:2f:d5:f2:1b:8a:26:8d:60:
d5:3e:76:00:4c:2c:81:47:c1:68:9a:f3:18:f6:67:2a:dc:e3:
00:3c:33:ce:2d:18:cd:49:3e:88:6d:00:d9:73:a0:e8:fe:1c:
81:c6:e7:af:a6:d4:4d:8b:01:73:1d:49:6d:95:2a:e1:dd:41:
75:7c:15:12:ef:bc:15:da:ae:14:cd:8e:a5:41:e2:c5:c1:fc:
23:4a:9b:fd:aa:3e:66:50:ac:8f:bc:ea:f5:ad:6b:2c:23:a2:
3d:08:70:34:3f:9c:8e:cb:06:62:78:0b:72:de:2c:08:4e:b8:
ca:d8:13:ed:70:12:f5:a7:f6:cd:79:20:03:53:23:0b:da:5f:
f8:1a:61:0b:a2:b9:19:2c:85:70:70:83:e0:59:22:41:5b:93:
30:05:b5:7c:de:e5:7e:77:5c:bc:88:2d:0c:5c:ab:9f:ed:5a:
a0:5f:4c:21:ca:4d:7b:b3:0d:11:01:98:e6:d3:ad:e4:3d:7a:
1d:6f:8f:c1:50:12:9d:1d:7d:dc:ad:7d:d7:c8:8f:3a:c4:b1:
87:23:79:4f:72:f7:fd:ef:6e:5d:31:1a:24:74:9f:97:6e:22:
4a:0b:96:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYiNCAFr0HBcJ40Yj7VxGOegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjA1MTkyODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjg5NThkYmI1YTE4ZmE3MmU4MWFlMjM5NDY4NGZhNzFiNTI5NDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssv5CrEgPVP+aEbhdxJ+STR5HmII
hTjWHBb4J8puwQXefW8ODoDsfCza43j/3tJz4VevUtwDbmCLmN4FpoHfs4uzn6s6
8oECUiyigSNwWRK2DPOS9wGL+GEEwu29b1Bx1IYhlLEpJ5D1DZkWcEhMAEnR88h+
6spgELdZNOBYpScXyNUxUW0cAqlsRfPHNzbRpN+/9IC1oy4gf7yllHyljM0dVEbg
s3Czk15g90Zw6HZp/b507s5uTPOvJR3/XZXQhuqkv2mYdQBEK04Gu3Ybax/Q8/mm
u5pCpN691eBq1DnM0BBe+NEgdgPB2YrjhvSyzBKX3ZAqskIWutYJEOIinQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNaJWNu1oY+nLoGuI5RoT6cbUpRWMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMW9sWTI3V2hqNmN1Z2E0amxHaFBweHRTbEZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBWm6AwQB
BWnGAwQBBWnKMA0GCSqGSIb3DQEBCwUAA4IBAQB1o9DX5E/BoN6kUMv8pfvilRKE
dv+1RQoJKXqKL9XyG4omjWDVPnYATCyBR8FomvMY9mcq3OMAPDPOLRjNST6IbQDZ
c6Do/hyBxuevptRNiwFzHUltlSrh3UF1fBUS77wV2q4UzY6lQeLFwfwjSpv9qj5m
UKyPvOr1rWssI6I9CHA0P5yOywZieAty3iwITrjK2BPtcBL1p/bNeSADUyML2l/4
GmELorkZLIVwcIPgWSJBW5MwBbV83uV+d1y8iC0MXKuf7VqgX0whyk17sw0RAZjm
063kPXodb4/BUBKdHX3crX3XyI86xLGHI3lPcvf9725dMRokdJ+XbiJKC5Yt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org