Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5ZW81kfTkCrjjEj4c_bSuIIOJZc.roa
File: 5ZW81kfTkCrjjEj4c_bSuIIOJZc.roa (raw, json)
Hash identifier: p38BW169FDmeFFkUxFr+Jk/a1i4L4XroCSGJONKa6I8=
Subject key identifier: E5:95:BC:D6:47:D3:90:2A:E3:8C:48:F8:73:F6:D2:B8:82:0E:25:97
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A1D04115B0BA4A14747A2CE30078F22A4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5ZW81kfTkCrjjEj4c_bSuIIOJZc.roa
Signing time: Tue 22 Aug 2023 11:32:00 +0000
ROA not before: Tue 22 Aug 2023 11:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 5.105.209.0/24 maxlen: 24
5.105.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:04:11:5b:0b:a4:a1:47:47:a2:ce:30:07:8f:22:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 22 11:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e595bcd647d3902ae38c48f873f6d2b8820e2597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:cf:56:38:f9:72:87:b6:11:f5:b8:8d:ff:
4d:7a:c3:0f:96:b9:34:45:ce:64:69:cf:c6:1d:52:
fe:71:1a:10:9f:a1:41:b5:3f:08:59:3b:3e:36:3f:
ec:93:9f:fe:a7:62:45:0d:13:9a:2b:b1:40:ad:1e:
1f:e7:3e:ad:5d:99:90:78:56:31:4b:01:28:2c:fe:
2e:95:dc:e4:46:a9:b0:cc:47:e0:e9:cd:ae:a5:fd:
fb:9c:47:91:d9:59:fd:c3:ce:5b:16:36:7b:29:5b:
4a:fe:d2:0d:be:7b:5d:26:c7:59:17:3d:ac:8c:7e:
6f:04:5d:06:20:91:00:83:79:57:78:ef:e5:64:af:
b0:36:2c:cc:69:02:09:89:7e:51:48:a6:5c:61:e1:
f6:3f:06:8b:21:20:f7:1a:24:4d:01:cd:f8:e9:0c:
b7:71:5d:90:74:d0:70:de:d5:75:1b:3c:23:e7:83:
f2:9d:fb:7d:85:b2:ee:ca:60:6a:1f:88:0a:c7:40:
6e:38:9d:d5:0a:e0:88:27:8a:2d:ab:92:70:d6:cb:
39:aa:e1:9f:fa:f2:f7:26:34:ff:f5:f6:51:57:45:
83:49:17:41:88:87:e8:12:bf:27:6a:17:c8:0a:dd:
61:8b:e2:e9:1d:7a:87:72:75:4d:83:a2:71:95:33:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:95:BC:D6:47:D3:90:2A:E3:8C:48:F8:73:F6:D2:B8:82:0E:25:97
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5ZW81kfTkCrjjEj4c_bSuIIOJZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.209.0-5.105.210.255
Signature Algorithm: sha256WithRSAEncryption
a0:15:c0:6b:4c:e1:38:34:41:1e:31:6f:47:de:db:bf:5b:da:
ff:37:c9:fa:e5:58:85:02:e3:5b:68:4b:84:76:9f:66:77:27:
d5:d4:2a:7a:75:31:02:80:85:66:7b:9b:c5:8d:2f:5a:d7:06:
96:f2:fa:94:be:3f:fc:f3:81:83:f0:a2:1f:7b:3b:bf:3a:ea:
40:78:9d:66:54:02:e4:6a:40:1b:49:3d:6f:79:bb:f9:63:78:
b1:cb:02:c5:78:43:c5:70:4c:89:d3:a9:9d:d1:a1:61:9f:33:
1a:57:e2:0e:44:36:cf:aa:d5:02:50:57:d5:75:c8:39:66:11:
f3:85:f8:e5:a3:a5:c8:42:d3:fd:0d:46:40:31:4d:0b:b0:3d:
02:10:a4:39:17:4b:74:3f:b7:67:ff:09:ca:20:26:f9:66:3b:
3a:30:e0:c7:ec:35:e6:4f:f0:e9:74:f8:51:e5:56:78:e2:15:
d0:32:55:18:43:dc:88:96:36:8e:f9:53:59:aa:15:3c:25:77:
b7:b1:54:10:0f:e5:26:d2:af:29:79:15:22:53:a5:65:df:1d:
74:96:b9:a3:ee:6f:55:5e:26:47:b0:41:c1:4d:76:16:5f:de:
55:fd:29:cb:8a:13:7e:a0:9c:44:41:c4:24:68:ec:15:43:57:
f2:83:5b:5a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYodBBFbC6ShR0eizjAHjyKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwODIyMTEzMjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTk1YmNkNjQ3ZDM5MDJhZTM4YzQ4Zjg3M2Y2ZDJiODgyMGUyNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEXPVjj5coe2EfW4jf9NesMPlrk0
Rc5kac/GHVL+cRoQn6FBtT8IWTs+Nj/sk5/+p2JFDROaK7FArR4f5z6tXZmQeFYx
SwEoLP4uldzkRqmwzEfg6c2upf37nEeR2Vn9w85bFjZ7KVtK/tINvntdJsdZFz2s
jH5vBF0GIJEAg3lXeO/lZK+wNizMaQIJiX5RSKZcYeH2PwaLISD3GiRNAc346Qy3
cV2QdNBw3tV1Gzwj54Pynft9hbLuymBqH4gKx0BuOJ3VCuCIJ4otq5Jw1ss5quGf
+vL3JjT/9fZRV0WDSRdBiIfoEr8nahfICt1hi+LpHXqHcnVNg6JxlTNeIQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOWVvNZH05Aq44xI+HP20riCDiWXMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvNVpXODFrZlRrQ3JqakVqNGNfYlN1SUlPSlpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAFadED
BAAFadIwDQYJKoZIhvcNAQELBQADggEBAKAVwGtM4Tg0QR4xb0fe279b2v83yfrl
WIUC41toS4R2n2Z3J9XUKnp1MQKAhWZ7m8WNL1rXBpby+pS+P/zzgYPwoh97O786
6kB4nWZUAuRqQBtJPW95u/ljeLHLAsV4Q8VwTInTqZ3RoWGfMxpX4g5ENs+q1QJQ
V9V1yDlmEfOF+OWjpchC0/0NRkAxTQuwPQIQpDkXS3Q/t2f/CcogJvlmOzow4Mfs
NeZP8Ol0+FHlVnjiFdAyVRhD3IiWNo75U1mqFTwld7exVBAP5SbSryl5FSJTpWXf
HXSWuaPub1VeJkewQcFNdhZf3lX9KcuKE36gnERBxCRo7BVDV/KDW1o=
-----END CERTIFICATE-----
Generated at Fri Sep 8 07:48:31 2023 by rpki-client on console-fra.rpki-client.org