Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9-kfv1PkFe8olt7e1IK19VRPfLM.roa
File: 9-kfv1PkFe8olt7e1IK19VRPfLM.roa (raw, json)
Hash identifier: JkG70NXx7HwESL+as3sTuMH96NFSuOmd9xYPxfHYT8I=
Subject key identifier: F7:E9:1F:BF:53:E4:15:EF:28:96:DE:DE:D4:82:B5:F5:54:4F:7C:B3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E0BF902C860B4D3A9C41B93DC535C257
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9-kfv1PkFe8olt7e1IK19VRPfLM.roa
Signing time: Wed 03 May 2023 08:34:23 +0000
ROA not before: Wed 03 May 2023 08:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:bf:90:2c:86:0b:4d:3a:9c:41:b9:3d:c5:35:c2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 3 08:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7e91fbf53e415ef2896deded482b5f5544f7cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:ff:31:91:35:48:8c:f8:1e:01:b3:fb:31:
a2:a1:7f:95:12:ac:19:03:ad:81:d8:65:87:80:8d:
a8:9e:33:b6:12:f3:6e:d9:32:95:79:52:14:c1:c4:
bc:38:8b:36:81:16:cc:b6:ba:93:53:b2:71:ce:da:
56:b3:3e:c0:e8:ca:04:83:2d:80:10:9d:b0:ea:d7:
8f:cd:92:77:dd:d6:ac:7e:73:27:2b:10:de:21:78:
96:27:2e:12:f5:e5:4c:8f:ec:fc:e1:38:7c:fe:19:
67:48:4d:64:8c:8a:d0:b6:9f:b7:59:6c:5a:e2:cf:
33:43:61:4b:f3:fc:ab:6b:cc:8f:f5:af:c9:fd:19:
33:d0:f1:69:ff:2a:75:33:60:35:4b:21:ee:30:ff:
da:c2:02:fe:c5:8e:dc:bd:9f:80:33:6b:3b:2e:0c:
91:e8:2e:ed:f9:4b:60:3b:76:2c:0a:15:e3:12:ee:
d8:41:bc:c7:ff:79:e5:31:fe:99:08:5a:ac:1f:d5:
e1:5c:39:cd:89:32:d7:e7:d4:dc:f3:d4:ce:ae:41:
99:42:5a:ec:eb:e0:6e:e4:8f:68:d1:40:06:80:f1:
5f:78:44:55:97:db:eb:51:8a:eb:de:9f:26:c9:99:
4e:8c:a3:1f:52:7f:8e:54:e3:d5:15:af:fa:09:f6:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E9:1F:BF:53:E4:15:EF:28:96:DE:DE:D4:82:B5:F5:54:4F:7C:B3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9-kfv1PkFe8olt7e1IK19VRPfLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.34.0/24
5.105.124.0/24
5.105.127.0/24
5.105.157.0/24
5.105.200.0/24
5.105.216.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6a:31:ba:4c:b8:db:80:71:7d:47:68:42:dd:1d:da:71:f1:
cb:9c:bf:a8:76:4e:05:20:a7:18:4c:24:96:b4:d2:7f:a4:d2:
5d:b3:0d:fd:32:21:8c:4d:81:dd:8c:7f:22:33:e3:5d:42:84:
7d:fc:05:aa:d6:32:33:a9:6b:3b:06:fd:30:6d:37:5f:e5:2d:
54:cf:08:84:2c:cf:a8:37:38:1d:a2:29:94:d5:04:3e:92:b1:
e5:95:0f:61:ce:66:3a:75:b9:57:8d:9a:ff:f0:62:6b:3b:61:
34:f5:15:6b:e5:da:dd:22:06:b6:ad:d1:1c:79:a9:ae:d7:17:
a3:ff:2c:1e:47:26:a4:2a:1e:aa:ef:14:73:45:9f:c8:b4:e9:
51:d4:36:a8:f5:4e:43:85:8e:2b:ff:52:b5:bd:65:73:c1:ea:
fb:30:35:0f:b4:b3:4f:20:80:c8:16:8f:d9:86:a2:57:da:6a:
78:81:96:2b:58:88:a7:80:6b:d8:4d:4a:fd:9a:e4:e1:af:83:
64:50:61:c7:79:36:2a:dd:13:83:03:60:dd:e6:da:67:9d:0f:
56:71:de:77:7c:54:a1:86:5d:73:7b:33:4f:e5:b5:78:d8:4d:
8f:51:3e:c6:f3:74:0a:45:c7:49:5b:1d:6d:54:17:5a:ab:38:
12:1f:dc:7e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYfgv5AshgtNOpxBuT3FNcJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNTAzMDgzNDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2U5MWZiZjUzZTQxNWVmMjg5NmRlZGVkNDgyYjVmNTU0NGY3Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzX/MZE1SIz4HgGz+zGioX+VEqwZ
A62B2GWHgI2onjO2EvNu2TKVeVIUwcS8OIs2gRbMtrqTU7JxztpWsz7A6MoEgy2A
EJ2w6tePzZJ33dasfnMnKxDeIXiWJy4S9eVMj+z84Th8/hlnSE1kjIrQtp+3WWxa
4s8zQ2FL8/yra8yP9a/J/Rkz0PFp/yp1M2A1SyHuMP/awgL+xY7cvZ+AM2s7LgyR
6C7t+UtgO3YsChXjEu7YQbzH/3nlMf6ZCFqsH9XhXDnNiTLX59Tc89TOrkGZQlrs
6+Bu5I9o0UAGgPFfeERVl9vrUYrr3p8myZlOjKMfUn+OVOPVFa/6CfZEkQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPfpH79T5BXvKJbe3tSCtfVUT3yzMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvOS1rZnYxUGtGZThvbHQ3ZTFJSzE5VlJQZkxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABWkdAwQA
BWkiAwQABWl8AwQABWl/AwQABWmdAwQABWnIAwQABWnYMA0GCSqGSIb3DQEBCwUA
A4IBAQBjajG6TLjbgHF9R2hC3R3acfHLnL+odk4FIKcYTCSWtNJ/pNJdsw39MiGM
TYHdjH8iM+NdQoR9/AWq1jIzqWs7Bv0wbTdf5S1UzwiELM+oNzgdoimU1QQ+krHl
lQ9hzmY6dblXjZr/8GJrO2E09RVr5drdIga2rdEceamu1xej/yweRyakKh6q7xRz
RZ/ItOlR1Dao9U5DhY4r/1K1vWVzwer7MDUPtLNPIIDIFo/ZhqJX2mp4gZYrWIin
gGvYTUr9muThr4NkUGHHeTYq3RODA2Dd5tpnnQ9Wcd53fFShhl1zezNP5bV42E2P
UT7G83QKRcdJWx1tVBdaqzgSH9x+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org