Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4dYjT9wCjjfF2Q1P2wfTVfNivOk.roa
File: 4dYjT9wCjjfF2Q1P2wfTVfNivOk.roa (raw, json)
Hash identifier: Nd/GfqkFPUmqGPxc56L/GX88nw+bgkZeEkfVIkpInjs=
Subject key identifier: E1:D6:23:4F:DC:02:8E:37:C5:D9:0D:4F:DB:07:D3:55:F3:62:BC:E9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186516B9FE72EA714945B11517D3AD8482E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4dYjT9wCjjfF2Q1P2wfTVfNivOk.roa
Signing time: Tue 14 Feb 2023 19:34:13 +0000
ROA not before: Tue 14 Feb 2023 19:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.129.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:6b:9f:e7:2e:a7:14:94:5b:11:51:7d:3a:d8:48:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 14 19:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1d6234fdc028e37c5d90d4fdb07d355f362bce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:3a:a6:e3:e2:83:92:2c:1c:28:7f:1f:7c:
96:dd:cc:4f:3b:af:86:9c:32:b1:12:bb:19:65:94:
e8:d0:cb:c9:85:59:56:6b:54:ad:69:71:e8:4d:f5:
2e:00:69:f2:33:6f:f9:66:2c:10:aa:1b:dd:a3:5d:
3e:42:13:c5:1e:34:67:24:74:49:22:9b:c8:83:e1:
78:29:be:69:4b:34:c8:51:8c:b7:d2:62:9f:57:4e:
e3:d7:d2:fd:2a:2a:5f:fd:ff:41:61:e7:af:1c:8d:
cc:55:e8:75:a1:d4:35:40:19:3c:2b:21:74:5a:02:
b4:24:11:04:19:3d:44:83:b5:a8:34:43:1e:a1:7c:
a6:ff:d7:8f:0d:d5:ce:79:57:10:1a:e5:b0:35:dc:
6f:d1:3b:be:5e:83:73:7b:85:da:a4:1c:33:64:e8:
de:87:b0:ef:bc:07:2c:0a:9d:a8:2c:85:f1:98:9c:
7c:56:dd:61:de:50:5c:63:c6:c7:2c:4f:4c:a1:21:
7e:de:01:cc:f4:e4:a7:79:68:90:97:f0:04:0e:6e:
dc:d8:5e:80:ee:de:7a:ec:1f:4f:ff:b6:d8:29:0b:
42:ac:63:69:e7:db:93:0b:21:60:6b:43:be:64:86:
37:5c:af:ed:1c:85:48:b9:28:dc:fb:19:29:8e:30:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D6:23:4F:DC:02:8E:37:C5:D9:0D:4F:DB:07:D3:55:F3:62:BC:E9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4dYjT9wCjjfF2Q1P2wfTVfNivOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.27.0/24
5.105.84.0/24
5.105.94.0/24
5.105.98.0/24
5.105.102.0/24
5.105.105.0/24
5.105.124.0/24
5.105.129.0/24
5.105.135.0/24
5.105.158.0/24
5.105.188.0/24
5.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:12:c5:f1:39:9c:7a:73:2a:ea:e2:53:29:28:fb:d6:f1:f6:
d9:52:f4:d7:c4:74:5a:cd:e6:7c:16:ee:7d:27:45:91:0a:9f:
68:7c:dc:59:92:4d:c7:95:6c:1a:3f:e7:c7:18:bb:d3:19:62:
34:da:55:0d:31:0a:79:ae:1d:9d:29:d9:78:69:88:9f:38:75:
07:4a:0a:e7:15:cd:2f:b4:3d:fb:3e:08:ce:29:f2:70:2a:5a:
a4:0f:58:e0:24:1d:7e:02:10:19:72:d5:34:74:61:27:db:0d:
70:ac:b8:5a:46:df:00:69:6d:c9:55:18:0b:fe:aa:a8:9e:38:
87:34:4e:04:67:9a:1a:a2:d8:6e:4f:8e:8a:0d:8b:35:1a:81:
bd:db:a1:27:0d:e8:b9:ba:b5:97:a4:ab:3e:0b:3a:0c:d2:22:
8b:13:20:68:74:86:27:45:36:3d:fc:09:bf:cb:45:a6:ef:65:
ea:cb:7f:b5:0e:62:ec:4e:66:79:3f:44:f1:4a:cb:84:7e:5d:
40:f5:95:f7:ee:f1:c6:98:c4:af:49:13:72:78:fe:f4:a4:46:
ed:85:14:b2:11:c2:da:c8:62:c4:77:a4:82:e6:bf:0f:f7:a6:
44:b2:42:38:93:71:02:cb:49:71:41:7e:35:b0:22:ac:f1:f5:
88:c7:9c:2d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYZRa5/nLqcUlFsRUX062EguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjE0MTkzNDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWQ2MjM0ZmRjMDI4ZTM3YzVkOTBkNGZkYjA3ZDM1NWYzNjJiY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6A6puPig5IsHCh/H3yW3cxPO6+G
nDKxErsZZZTo0MvJhVlWa1StaXHoTfUuAGnyM2/5ZiwQqhvdo10+QhPFHjRnJHRJ
IpvIg+F4Kb5pSzTIUYy30mKfV07j19L9Kipf/f9BYeevHI3MVeh1odQ1QBk8KyF0
WgK0JBEEGT1Eg7WoNEMeoXym/9ePDdXOeVcQGuWwNdxv0Tu+XoNze4XapBwzZOje
h7DvvAcsCp2oLIXxmJx8Vt1h3lBcY8bHLE9MoSF+3gHM9OSneWiQl/AEDm7c2F6A
7t567B9P/7bYKQtCrGNp59uTCyFga0O+ZIY3XK/tHIVIuSjc+xkpjjARGwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOHWI0/cAo43xdkNT9sH01XzYrzpMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvNGRZalQ5d0NqamZGMlExUDJ3ZlRWZk5pdk9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQABWkbAwQA
BWlUAwQABWleAwQABWliAwQABWlmAwQABWlpAwQABWl8AwQABWmBAwQABWmHAwQA
BWmeAwQABWm8AwQABWn9MA0GCSqGSIb3DQEBCwUAA4IBAQBrEsXxOZx6cyrq4lMp
KPvW8fbZUvTXxHRazeZ8Fu59J0WRCp9ofNxZkk3HlWwaP+fHGLvTGWI02lUNMQp5
rh2dKdl4aYifOHUHSgrnFc0vtD37PgjOKfJwKlqkD1jgJB1+AhAZctU0dGEn2w1w
rLhaRt8AaW3JVRgL/qqonjiHNE4EZ5oaothuT46KDYs1GoG926EnDei5urWXpKs+
CzoM0iKLEyBodIYnRTY9/Am/y0Wm72Xqy3+1DmLsTmZ5P0TxSsuEfl1A9ZX37vHG
mMSvSRNyeP70pEbthRSyEcLayGLEd6SC5r8P96ZEskI4k3ECy0lxQX41sCKs8fWI
x5wt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org