Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7tGdeHG_uZEz7fgr9a2Is5piSAc.roa
File: 7tGdeHG_uZEz7fgr9a2Is5piSAc.roa (raw, json)
Hash identifier: QLzzKzwAjuOLLD+mnSWcoapFvzyIdX1rd4EO/Z4+te0=
Subject key identifier: EE:D1:9D:78:71:BF:B9:91:33:ED:F8:2B:F5:AD:88:B3:9A:62:48:07
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018622F7C99DB429EDCC6F7A45EAE65C9693
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7tGdeHG_uZEz7fgr9a2Is5piSAc.roa
Signing time: Sun 05 Feb 2023 19:05:09 +0000
ROA not before: Sun 05 Feb 2023 19:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203967
IP address blocks: 5.105.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Mar 2023 13:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:22:f7:c9:9d:b4:29:ed:cc:6f:7a:45:ea:e6:5c:96:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 5 19:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed19d7871bfb99133edf82bf5ad88b39a624807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:a6:31:f4:f5:81:55:bb:c3:72:5b:03:bb:
b4:4a:b4:63:17:35:75:53:43:9e:fe:4b:9e:5b:db:
9f:09:2e:37:31:8b:45:f2:1d:6e:64:97:85:9b:aa:
10:94:46:26:c7:69:13:34:4a:49:46:c9:2f:f5:17:
50:7b:98:0a:22:8f:d3:f9:ba:54:d5:be:19:fc:c3:
5f:11:b3:49:83:a4:f9:3b:0e:de:10:3a:c5:13:6c:
58:f9:d6:03:5a:c5:c7:da:72:3c:f2:29:ef:4c:5d:
2e:5e:e5:f7:f4:1c:b9:f3:a6:1c:50:ec:d4:8b:b5:
0b:41:2d:d0:e4:3a:24:b8:a7:3c:af:61:46:55:da:
96:29:46:6d:0a:3e:65:2b:8a:41:95:ad:d1:51:67:
b6:52:29:b6:25:5d:c0:23:4f:e1:6c:5f:0b:ce:49:
05:a4:b9:37:1c:aa:3a:ce:48:30:4f:c2:ad:a3:87:
ba:31:a8:b3:57:55:7f:dd:7f:56:59:7c:a4:7a:c0:
90:ad:54:3b:7f:14:6d:77:9c:2c:9d:dd:d6:0b:0b:
07:bc:31:62:c1:08:bb:50:34:7d:a2:6d:69:03:2d:
34:47:63:3b:5c:35:f3:58:7c:10:de:fa:3c:f7:5a:
49:c5:45:34:ba:f2:77:1c:4a:db:3a:f9:ab:7f:66:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:9D:78:71:BF:B9:91:33:ED:F8:2B:F5:AD:88:B3:9A:62:48:07
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7tGdeHG_uZEz7fgr9a2Is5piSAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.10.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b1:4e:5c:20:ae:45:41:29:e0:b3:58:04:67:9b:76:4a:86:
c1:02:e2:3c:2a:94:c9:30:75:a7:f6:2c:8c:7a:ac:ca:0c:cd:
b9:cd:05:41:2b:19:6c:dc:27:e4:a3:7d:5e:81:f7:17:26:e0:
e7:6f:4e:e8:08:d1:b8:18:a5:6f:8d:f5:f1:e7:9c:92:07:d3:
7b:a4:c0:75:59:54:4e:22:1a:75:07:ab:6f:8e:4c:96:14:de:
03:2c:ff:60:67:4c:21:bf:82:82:d3:bd:e0:a3:45:27:ff:53:
21:1f:49:d4:e3:5a:41:38:c7:84:56:a2:57:85:b1:d8:a3:db:
33:14:69:e6:5b:23:40:e0:21:df:c8:97:88:b7:6b:2d:a6:0d:
2d:fb:20:5e:6b:e8:e4:23:37:e8:91:93:b7:17:17:07:dd:60:
6f:fc:0b:d0:72:83:ed:23:44:80:2d:64:3b:f9:bf:64:e6:9e:
95:13:05:69:c7:47:a7:20:0e:44:f3:00:bb:66:8b:07:fc:d8:
83:3e:28:a4:79:f5:9b:c3:f0:af:15:c0:fd:42:c7:69:8d:c7:
c8:00:67:c0:fc:99:54:a0:78:76:67:72:0e:a8:9c:96:44:91:
8f:6a:8b:7e:68:8c:82:2d:84:dd:c4:b9:5e:47:93:32:2a:34:
0d:bd:5f:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYi98mdtCntzG96RermXJaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjA1MTkwNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWQxOWQ3ODcxYmZiOTkxMzNlZGY4MmJmNWFkODhiMzlhNjI0ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB6mMfT1gVW7w3JbA7u0SrRjFzV1
U0Oe/kueW9ufCS43MYtF8h1uZJeFm6oQlEYmx2kTNEpJRskv9RdQe5gKIo/T+bpU
1b4Z/MNfEbNJg6T5Ow7eEDrFE2xY+dYDWsXH2nI88invTF0uXuX39By586YcUOzU
i7ULQS3Q5DokuKc8r2FGVdqWKUZtCj5lK4pBla3RUWe2Uim2JV3AI0/hbF8LzkkF
pLk3HKo6zkgwT8Kto4e6MaizV1V/3X9WWXykesCQrVQ7fxRtd5wsnd3WCwsHvDFi
wQi7UDR9om1pAy00R2M7XDXzWHwQ3vo891pJxUU0uvJ3HErbOvmrf2b6OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7RnXhxv7mRM+34K/WtiLOaYkgHMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvN3RHZGVIR191WkV6N2ZncjlhMklzNXBpU0FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWkKMA0G
CSqGSIb3DQEBCwUAA4IBAQDVsU5cIK5FQSngs1gEZ5t2SobBAuI8KpTJMHWn9iyM
eqzKDM25zQVBKxls3Cfko31egfcXJuDnb07oCNG4GKVvjfXx55ySB9N7pMB1WVRO
Ihp1B6tvjkyWFN4DLP9gZ0whv4KC073go0Un/1MhH0nU41pBOMeEVqJXhbHYo9sz
FGnmWyNA4CHfyJeIt2stpg0t+yBea+jkIzfokZO3FxcH3WBv/AvQcoPtI0SALWQ7
+b9k5p6VEwVpx0enIA5E8wC7ZosH/NiDPiikefWbw/CvFcD9QsdpjcfIAGfA/JlU
oHh2Z3IOqJyWRJGPaot+aIyCLYTdxLleR5MyKjQNvV/C
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:26 2024 by rpki-client on console-fra.rpki-client.org