Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2I5iVgWXuMT0jmFSI1LTtgjxr2M.roa
File: 2I5iVgWXuMT0jmFSI1LTtgjxr2M.roa (raw, json)
Hash identifier: qkvDTUov65lQbktfpaVRvQd8y8OMhg1Ue6kwG4i5nRU=
Subject key identifier: D8:8E:62:56:05:97:B8:C4:F4:8E:61:52:23:52:D3:B6:08:F1:AF:63
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189A7CC3A6FCE5E8705280E7446A661BEED
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2I5iVgWXuMT0jmFSI1LTtgjxr2M.roa
Signing time: Sun 30 Jul 2023 17:15:26 +0000
ROA not before: Sun 30 Jul 2023 17:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201949
IP address blocks: 5.105.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a7:cc:3a:6f:ce:5e:87:05:28:0e:74:46:a6:61:be:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 30 17:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d88e62560597b8c4f48e61522352d3b608f1af63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:35:3b:ab:49:c8:9b:74:e9:ea:70:f5:0b:
2b:63:60:c3:0c:db:d6:5c:62:0c:46:d3:67:a1:43:
2a:91:46:41:ed:96:b0:86:9f:b9:0b:30:05:b6:e2:
5d:32:69:74:c2:b9:3f:bc:4c:f0:66:3c:57:a9:fa:
ab:e4:3b:77:c1:ef:99:48:89:a7:fc:7d:e3:a0:30:
76:ed:67:f3:c6:1c:78:70:26:29:6d:92:0f:18:7b:
c5:1c:ee:1d:af:e7:9d:d7:7b:d4:88:7c:b8:3f:89:
98:fd:ab:67:a6:21:02:e2:c2:c0:de:da:ab:42:50:
a9:6d:db:94:c9:35:5a:5e:a8:9d:ab:86:18:48:4d:
2b:e3:71:48:6a:3b:db:1e:a5:1e:24:c4:ca:48:06:
09:5d:09:bf:2f:61:97:2c:26:8a:16:a2:25:d7:fc:
12:46:d0:cc:7d:e6:03:fc:a2:b7:af:0b:be:52:56:
c6:5c:e7:fa:73:da:5e:60:bc:36:f7:8d:a2:0d:c6:
21:ee:04:b7:3f:74:66:0b:14:0c:5a:71:c9:27:af:
ae:7a:9f:91:57:9e:8e:4e:f9:03:99:d3:cd:f0:0c:
8f:71:75:2b:38:4f:9a:f1:60:88:22:e2:9a:08:0b:
1e:f8:a1:92:33:2f:5f:9b:03:d2:98:1c:69:84:67:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:62:56:05:97:B8:C4:F4:8E:61:52:23:52:D3:B6:08:F1:AF:63
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2I5iVgWXuMT0jmFSI1LTtgjxr2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:37:39:d6:54:d0:e5:f9:a0:4e:32:bd:35:87:3d:4e:dc:4a:
7c:84:94:33:a0:65:28:91:54:56:22:ac:9c:8a:5d:c3:b2:60:
74:c1:43:52:88:47:30:6c:a7:9c:a6:fc:ce:fe:f4:59:62:62:
1c:c3:3b:2e:16:1d:ab:27:a8:bc:ae:35:e2:74:90:d8:f8:77:
0b:14:2a:62:2b:fb:01:90:f1:69:a5:e4:97:58:55:3d:7b:bb:
2c:e4:24:1e:c6:47:06:c8:29:03:4e:3a:30:98:94:01:a3:3b:
de:03:80:6f:25:11:ed:08:f5:ba:d4:3a:bb:36:28:f1:ef:27:
62:a6:cf:da:38:1f:32:2f:ea:8d:0a:1f:f4:ef:fd:73:65:d5:
63:fa:95:dc:41:b0:81:fb:ff:df:0b:ba:b2:9e:74:34:25:91:
70:90:19:06:1d:69:33:a6:e8:fd:28:bf:cb:92:99:0b:56:64:
1c:5e:dd:d9:f6:87:25:58:21:32:4c:ad:12:68:ac:d2:e6:dc:
c0:6a:f4:d4:60:33:52:f1:41:be:3b:68:73:9a:cd:48:cd:ef:
e0:0c:1c:32:f9:3c:8d:8d:dc:0f:28:aa:57:80:7c:4d:c9:b6:
01:3c:51:ec:81:b6:3d:3f:f2:04:53:d9:f1:8c:f9:74:9b:5d:
57:7f:19:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmnzDpvzl6HBSgOdEamYb7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNzMwMTcxNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODhlNjI1NjA1OTdiOGM0ZjQ4ZTYxNTIyMzUyZDNiNjA4ZjFhZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNU1O6tJyJt06epw9QsrY2DDDNvW
XGIMRtNnoUMqkUZB7Zawhp+5CzAFtuJdMml0wrk/vEzwZjxXqfqr5Dt3we+ZSImn
/H3joDB27Wfzxhx4cCYpbZIPGHvFHO4dr+ed13vUiHy4P4mY/atnpiEC4sLA3tqr
QlCpbduUyTVaXqidq4YYSE0r43FIajvbHqUeJMTKSAYJXQm/L2GXLCaKFqIl1/wS
RtDMfeYD/KK3rwu+UlbGXOf6c9peYLw2942iDcYh7gS3P3RmCxQMWnHJJ6+uep+R
V56OTvkDmdPN8AyPcXUrOE+a8WCIIuKaCAse+KGSMy9fmwPSmBxphGcwPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNiOYlYFl7jE9I5hUiNS07YI8a9jMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMkk1aVZnV1h1TVQwam1GU0kxTFR0Z2p4cjJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWm5MA0G
CSqGSIb3DQEBCwUAA4IBAQCpNznWVNDl+aBOMr01hz1O3Ep8hJQzoGUokVRWIqyc
il3DsmB0wUNSiEcwbKecpvzO/vRZYmIcwzsuFh2rJ6i8rjXidJDY+HcLFCpiK/sB
kPFppeSXWFU9e7ss5CQexkcGyCkDTjowmJQBozveA4BvJRHtCPW61Dq7Nijx7ydi
ps/aOB8yL+qNCh/07/1zZdVj+pXcQbCB+//fC7qynnQ0JZFwkBkGHWkzpuj9KL/L
kpkLVmQcXt3Z9oclWCEyTK0SaKzS5tzAavTUYDNS8UG+O2hzms1Ize/gDBwy+TyN
jdwPKKpXgHxNybYBPFHsgbY9P/IEU9nxjPl0m11Xfxl6
-----END CERTIFICATE-----
Generated at Mon Aug 14 20:28:19 2023 by rpki-client on console-fra.rpki-client.org