Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8aSZipv5HgaAcIqF47tqH-MgGeo.roa
File: 8aSZipv5HgaAcIqF47tqH-MgGeo.roa (raw, json)
Hash identifier: ZB4kgyavi18k0pqVz0dWwBW1W2dc996WUkOvY+ksEQ0=
Subject key identifier: F1:A4:99:8A:9B:F9:1E:06:80:70:8A:85:E3:BB:6A:1F:E3:20:19:EA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186DF501D3F395D9F4CB56CD01738483F66
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8aSZipv5HgaAcIqF47tqH-MgGeo.roa
Signing time: Tue 14 Mar 2023 08:50:14 +0000
ROA not before: Tue 14 Mar 2023 08:50:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.230.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:50:1d:3f:39:5d:9f:4c:b5:6c:d0:17:38:48:3f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 14 08:50:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1a4998a9bf91e0680708a85e3bb6a1fe32019ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:30:25:30:9a:5f:90:73:8e:45:a7:5a:3c:
5f:5e:f8:92:0e:4b:13:6d:ea:77:2a:da:84:04:e5:
c6:48:c8:2d:d3:47:d2:c7:ed:e7:9e:1e:5e:c9:d5:
f5:73:96:ab:a0:3e:05:58:7d:9b:20:3e:24:a7:de:
4e:3e:57:c3:c8:20:b0:65:48:54:22:d1:1f:ef:3f:
a2:a9:4d:0a:a3:40:2f:b4:0c:9a:e0:f4:99:72:4f:
da:ea:58:89:93:55:43:f7:be:20:cd:03:ed:4b:2b:
d0:01:0b:a5:44:df:07:ef:e6:13:e5:4a:8b:0a:15:
a3:fa:50:33:85:79:9f:cf:22:f4:40:50:dc:4d:d2:
64:ae:87:87:b9:e3:1e:44:85:9a:af:de:b9:02:c4:
c2:33:70:39:2d:02:86:58:41:68:39:bb:9d:b6:62:
ad:8f:aa:df:c2:c8:0d:90:9b:1f:77:de:07:8c:56:
38:7d:b9:41:87:bd:d6:d0:b6:1f:8a:3e:6d:2e:da:
82:e5:e7:45:41:c7:27:ad:01:e8:33:5d:1b:d9:1e:
4f:86:73:2a:40:8f:06:62:83:fe:c4:f0:c3:a4:46:
c7:4f:7a:ff:74:65:4a:e4:a3:b1:bb:4d:5e:00:9a:
5d:77:1d:7b:3c:e9:c8:60:2c:a0:3f:4b:0b:e8:03:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:99:8A:9B:F9:1E:06:80:70:8A:85:E3:BB:6A:1F:E3:20:19:EA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8aSZipv5HgaAcIqF47tqH-MgGeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.65.0/24
5.105.81.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
32:90:2c:2c:8d:c9:ef:4f:d5:10:43:89:5d:dd:8f:90:e0:56:
3b:65:46:c2:2d:7e:15:16:09:d5:a5:00:97:70:cf:3e:bd:36:
d2:64:b0:49:14:be:c8:b8:c6:10:89:fd:1a:84:75:f1:1d:f3:
0f:93:07:96:0a:87:88:6e:21:24:46:a7:f5:b9:04:e4:e6:ad:
03:7e:f8:23:bb:95:b9:63:f1:4a:fc:f0:5e:07:66:08:0e:38:
5b:0b:a2:78:54:42:19:c4:9d:5f:c7:bb:54:b6:01:be:a6:8c:
09:65:8a:37:4a:5f:81:3a:50:79:89:98:35:6b:91:6b:d0:fa:
10:c8:3a:77:d3:a3:1e:71:37:d9:4c:41:71:38:ae:8a:cc:b4:
8a:37:e5:a6:97:c2:91:5c:53:74:f8:bd:4c:2c:ea:96:d0:77:
f2:94:6e:47:d2:c0:5e:39:4a:65:96:b9:e3:b7:f4:4b:19:54:
5e:ae:3f:23:fe:2d:a3:21:66:4b:38:ae:d1:f1:75:63:2b:a3:
a0:ff:6f:c0:d8:0c:ca:d2:0d:c4:02:75:c3:8f:49:da:fd:4c:
40:33:7d:dc:a2:14:40:8d:13:16:b1:cc:0c:59:f4:c8:a9:8c:
81:f4:b5:71:09:93:a6:77:77:90:e5:c4:bb:49:f2:7f:12:fb:
ac:ec:89:07
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYbfUB0/OV2fTLVs0Bc4SD9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMzE0MDg1MDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWE0OTk4YTliZjkxZTA2ODA3MDhhODVlM2JiNmExZmUzMjAxOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJMwJTCaX5BzjkWnWjxfXviSDksT
bep3KtqEBOXGSMgt00fSx+3nnh5eydX1c5aroD4FWH2bID4kp95OPlfDyCCwZUhU
ItEf7z+iqU0Ko0AvtAya4PSZck/a6liJk1VD974gzQPtSyvQAQulRN8H7+YT5UqL
ChWj+lAzhXmfzyL0QFDcTdJkroeHueMeRIWar965AsTCM3A5LQKGWEFoObudtmKt
j6rfwsgNkJsfd94HjFY4fblBh73W0LYfij5tLtqC5edFQccnrQHoM10b2R5PhnMq
QI8GYoP+xPDDpEbHT3r/dGVK5KOxu01eAJpddx17POnIYCygP0sL6AMuuwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFPGkmYqb+R4GgHCKheO7ah/jIBnqMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvOGFTWmlwdjVIZ2FBY0lxRjQ3dHFILU1nR2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABWkTAwQB
BWkYAwQABWkhAwQABWkoAwQABWkrAwQABWkyAwQABWk5AwQABWlBAwQABWlRAwQA
BWnmMA0GCSqGSIb3DQEBCwUAA4IBAQAykCwsjcnvT9UQQ4ld3Y+Q4FY7ZUbCLX4V
FgnVpQCXcM8+vTbSZLBJFL7IuMYQif0ahHXxHfMPkweWCoeIbiEkRqf1uQTk5q0D
fvgju5W5Y/FK/PBeB2YIDjhbC6J4VEIZxJ1fx7tUtgG+powJZYo3Sl+BOlB5iZg1
a5Fr0PoQyDp306MecTfZTEFxOK6KzLSKN+Wml8KRXFN0+L1MLOqW0HfylG5H0sBe
OUpllrnjt/RLGVRerj8j/i2jIWZLOK7R8XVjK6Og/2/A2AzK0g3EAnXDj0na/UxA
M33cohRAjRMWscwMWfTIqYyB9LVxCZOmd3eQ5cS7SfJ/Evus7IkH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org