Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/66XqMrNliJctficcZgLqNTb1JOs.roa
File: 66XqMrNliJctficcZgLqNTb1JOs.roa (raw, json)
Hash identifier: 7GSXQHDqTH+KnQM5scF4PUddcJHaiMr0qap5y5DM8aM=
Subject key identifier: EB:A5:EA:32:B3:65:88:97:2D:7E:27:1C:66:02:EA:35:36:F5:24:EB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186285B7D460CBE264A28A4F7421A2B1542
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/66XqMrNliJctficcZgLqNTb1JOs.roa
Signing time: Mon 06 Feb 2023 20:12:09 +0000
ROA not before: Mon 06 Feb 2023 20:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 5.105.2.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:28:5b:7d:46:0c:be:26:4a:28:a4:f7:42:1a:2b:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 6 20:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eba5ea32b36588972d7e271c6602ea3536f524eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:33:50:8c:92:91:ac:e7:4b:c0:cb:b9:b6:
b1:32:8c:3f:16:98:0c:5e:c6:af:e7:dc:74:7d:49:
d3:77:88:c6:df:46:47:2f:10:fc:96:ae:7a:e4:8f:
cf:6b:e4:03:5f:1d:0c:81:66:89:be:0b:a8:60:fb:
2b:fb:fd:f7:3d:31:b8:9f:94:8d:fd:8d:f6:f9:8c:
05:a2:db:91:85:3c:49:e1:82:e0:84:b3:9f:0b:3a:
ca:2b:db:8c:ea:15:f4:7d:1c:20:fe:54:8d:21:1d:
69:fd:07:9a:17:ab:ee:0c:e0:a2:aa:82:03:e3:24:
78:cf:5b:c4:ed:34:e5:45:62:7a:3a:ac:a0:a1:c9:
49:2b:19:3b:bf:db:79:3a:77:23:29:f1:0b:80:d6:
ee:05:cb:61:4e:a2:53:fe:0b:da:77:eb:8b:18:3e:
69:81:90:37:7f:1d:8a:4f:6d:c8:5c:3a:7d:08:b4:
36:09:82:bf:36:4e:ad:4c:02:b9:98:46:db:73:13:
85:08:94:94:b2:be:31:23:9c:8b:ae:b3:7f:1a:42:
7a:45:a6:97:b2:63:bc:76:be:8d:0d:f8:61:50:0e:
7d:13:d9:77:0b:61:32:e4:ef:f7:0c:4d:36:92:eb:
3a:85:59:88:0c:fb:4a:76:23:98:56:ed:c6:74:1a:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A5:EA:32:B3:65:88:97:2D:7E:27:1C:66:02:EA:35:36:F5:24:EB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/66XqMrNliJctficcZgLqNTb1JOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/23
5.105.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:85:66:5a:37:e4:28:c7:c5:51:6c:ef:8c:98:30:6e:a6:97:
21:0f:d2:51:03:5b:eb:05:e7:ed:42:3e:41:73:86:30:fb:98:
92:b6:9e:d2:f8:5e:66:ff:4e:42:41:e0:c1:2b:73:04:e7:41:
16:53:25:a2:90:c7:71:04:a6:91:ca:4e:78:37:55:92:85:a0:
85:c8:12:dc:6b:ef:a9:b3:e5:2c:4a:1d:16:3a:8d:41:b3:1f:
14:db:c4:08:b1:d8:29:1c:3b:00:3c:b8:b1:4d:99:57:f2:d5:
f5:7a:e9:e9:4e:e5:b2:82:2f:9c:37:c5:e0:5b:47:e6:b7:fb:
8a:22:92:95:17:5f:16:e8:38:71:2e:85:27:2f:1c:38:44:f6:
e8:55:4a:d1:6c:e7:d0:bb:4b:c0:e0:f2:90:6a:fe:a0:55:4e:
10:6f:33:72:f5:68:7f:57:b3:8b:f9:8f:31:75:f6:63:f1:82:
bd:f8:f7:28:fd:95:ac:13:78:e0:3b:18:42:ad:e7:83:87:41:
80:4f:b8:72:80:1a:87:ea:6a:c4:ed:23:f4:96:ce:61:3b:d4:
d7:6b:f4:3d:7d:6b:ed:80:3b:aa:de:fb:88:a2:e5:25:df:c5:
23:f5:8e:aa:8e:6b:ed:6a:7b:75:85:0e:3f:a4:30:fe:46:ac:
c3:06:d2:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYoW31GDL4mSiik90IaKxVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjA2MjAxMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmE1ZWEzMmIzNjU4ODk3MmQ3ZTI3MWM2NjAyZWEzNTM2ZjUyNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosUzUIySkaznS8DLubaxMow/FpgM
Xsav59x0fUnTd4jG30ZHLxD8lq565I/Pa+QDXx0MgWaJvguoYPsr+/33PTG4n5SN
/Y32+YwFotuRhTxJ4YLghLOfCzrKK9uM6hX0fRwg/lSNIR1p/QeaF6vuDOCiqoID
4yR4z1vE7TTlRWJ6OqygoclJKxk7v9t5OncjKfELgNbuBcthTqJT/gvad+uLGD5p
gZA3fx2KT23IXDp9CLQ2CYK/Nk6tTAK5mEbbcxOFCJSUsr4xI5yLrrN/GkJ6RaaX
smO8dr6NDfhhUA59E9l3C2Ey5O/3DE02kus6hVmIDPtKdiOYVu3GdBrxeQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOul6jKzZYiXLX4nHGYC6jU29STrMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvNjZYcU1yTmxpSmN0ZmljY1pnTHFOVGIxSk9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBWkCAwQA
BWkHMA0GCSqGSIb3DQEBCwUAA4IBAQCbhWZaN+Qox8VRbO+MmDBuppchD9JRA1vr
BeftQj5Bc4Yw+5iStp7S+F5m/05CQeDBK3ME50EWUyWikMdxBKaRyk54N1WShaCF
yBLca++ps+UsSh0WOo1Bsx8U28QIsdgpHDsAPLixTZlX8tX1eunpTuWygi+cN8Xg
W0fmt/uKIpKVF18W6DhxLoUnLxw4RPboVUrRbOfQu0vA4PKQav6gVU4QbzNy9Wh/
V7OL+Y8xdfZj8YK9+Pco/ZWsE3jgOxhCreeDh0GAT7hygBqH6mrE7SP0ls5hO9TX
a/Q9fWvtgDuq3vuIouUl38Uj9Y6qjmvtant1hQ4/pDD+RqzDBtKr
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org