Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7uni1xB-FVR0uAuT6aBWJS_XJV4.roa
File: 7uni1xB-FVR0uAuT6aBWJS_XJV4.roa (raw, json)
Hash identifier: MLkV7IrpO0Y5XRLyJALd8PgGKBxfffWZE1+FRz1WuUI=
Subject key identifier: EE:E9:E2:D7:10:7E:15:54:74:B8:0B:93:E9:A0:56:25:2F:D7:25:5E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189D48560E8BDB5C92748D9748D92460012
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7uni1xB-FVR0uAuT6aBWJS_XJV4.roa
Signing time: Tue 08 Aug 2023 09:40:58 +0000
ROA not before: Tue 08 Aug 2023 09:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:85:60:e8:bd:b5:c9:27:48:d9:74:8d:92:46:00:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 8 09:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eee9e2d7107e155474b80b93e9a056252fd7255e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:9c:46:d5:7c:e7:ef:a9:a2:6d:e6:2a:67:
56:51:63:30:60:56:d8:f4:0e:4d:dc:14:7b:8a:ba:
b5:80:10:7a:c5:eb:54:32:2c:16:cc:03:53:07:af:
8d:64:fc:b8:a0:28:83:37:79:4d:29:e4:9c:d5:da:
19:42:97:d9:c5:90:3e:73:ae:f2:2e:30:74:f5:78:
1c:4d:b5:99:81:15:53:e7:4f:58:af:3b:04:ef:80:
fa:17:8e:de:33:9c:b1:cf:3b:33:25:4d:65:b0:b7:
29:ac:3f:c7:98:7c:2e:21:36:74:f0:39:7b:71:f2:
72:aa:b6:83:c5:b6:86:cf:69:be:39:df:d5:c3:91:
45:54:80:0a:92:17:92:6f:c3:0b:c9:76:25:0f:49:
d9:88:54:5e:42:8d:b5:c1:d4:95:55:1b:ce:a8:21:
ac:ad:5f:67:07:aa:27:58:d3:1a:bf:da:1f:93:2b:
97:c8:0b:84:56:09:75:4f:0f:0c:57:88:6a:23:1a:
5e:7c:66:3f:85:6c:19:99:83:e2:4d:80:07:59:2d:
58:03:3a:91:0f:45:37:96:fc:14:99:d7:e5:f7:af:
50:0c:5a:46:23:06:b7:57:ec:a1:fc:df:91:50:5e:
cf:cd:0e:2c:93:7c:7b:0a:de:84:66:dc:4e:97:f1:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:E2:D7:10:7E:15:54:74:B8:0B:93:E9:A0:56:25:2F:D7:25:5E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7uni1xB-FVR0uAuT6aBWJS_XJV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.123.0/24
5.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:e1:63:7e:5b:8f:a2:9d:ed:65:b1:a9:f8:a2:72:42:35:35:
c7:a4:35:e7:a0:36:b7:4a:bc:be:b1:e4:24:b6:c7:20:06:91:
42:9b:7d:69:d3:ab:fd:2a:07:a0:b8:d7:75:62:4d:27:1d:ce:
df:fa:92:88:9a:56:5d:ca:63:4e:07:9a:3a:ee:30:01:42:e2:
88:c1:39:a5:4b:1c:31:41:30:d3:ce:cb:1f:79:04:c6:f0:83:
e1:cc:89:49:c4:02:ee:99:c6:a3:ed:27:eb:b7:a0:d6:f1:83:
ea:3a:38:f3:08:44:f9:97:18:bd:a1:84:08:54:cc:2c:90:1f:
60:3a:03:a8:99:45:9c:98:51:30:60:a1:d7:91:27:04:2a:c3:
a4:c2:96:a9:82:11:af:9a:68:ba:90:f3:08:c7:b6:c5:8f:e5:
f4:07:84:15:3e:af:cc:50:ad:74:cb:d1:8c:e5:3c:ab:55:1b:
d5:29:31:56:e1:a1:6b:ec:f2:3e:7e:46:e9:5d:ca:20:18:fd:
be:78:dd:ac:98:f9:24:de:f4:c0:5f:50:0a:2d:93:9b:69:e3:
a6:ba:77:14:b7:8d:06:97:b0:38:71:7d:55:51:62:4a:dc:98:
26:31:57:5b:7f:a3:53:67:e8:d8:9d:3a:dd:16:e2:26:a8:d9:
0c:35:a7:0f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYnUhWDovbXJJ0jZdI2SRgASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwODA4MDk0MDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWU5ZTJkNzEwN2UxNTU0NzRiODBiOTNlOWEwNTYyNTJmZDcyNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEOcRtV85++pom3mKmdWUWMwYFbY
9A5N3BR7irq1gBB6xetUMiwWzANTB6+NZPy4oCiDN3lNKeSc1doZQpfZxZA+c67y
LjB09XgcTbWZgRVT509YrzsE74D6F47eM5yxzzszJU1lsLcprD/HmHwuITZ08Dl7
cfJyqraDxbaGz2m+Od/Vw5FFVIAKkheSb8MLyXYlD0nZiFReQo21wdSVVRvOqCGs
rV9nB6onWNMav9ofkyuXyAuEVgl1Tw8MV4hqIxpefGY/hWwZmYPiTYAHWS1YAzqR
D0U3lvwUmdfl969QDFpGIwa3V+yh/N+RUF7PzQ4sk3x7Ct6EZtxOl/Gs9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO7p4tcQfhVUdLgLk+mgViUv1yVeMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvN3VuaTF4Qi1GVlIwdUF1VDZhQldKU19YSlY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABWkCAwQA
BWl7AwQABWn9MA0GCSqGSIb3DQEBCwUAA4IBAQDL4WN+W4+ine1lsan4onJCNTXH
pDXnoDa3Sry+seQktscgBpFCm31p06v9KgeguNd1Yk0nHc7f+pKImlZdymNOB5o6
7jABQuKIwTmlSxwxQTDTzssfeQTG8IPhzIlJxALumcaj7Sfrt6DW8YPqOjjzCET5
lxi9oYQIVMwskB9gOgOomUWcmFEwYKHXkScEKsOkwpapghGvmmi6kPMIx7bFj+X0
B4QVPq/MUK10y9GM5TyrVRvVKTFW4aFr7PI+fkbpXcogGP2+eN2smPkk3vTAX1AK
LZObaeOmuncUt40Gl7A4cX1VUWJK3JgmMVdbf6NTZ+jYnTrdFuImqNkMNacP
-----END CERTIFICATE-----
Generated at Mon Aug 14 20:34:47 2023 by rpki-client on console-ams.rpki-client.org